Haxdoor RootKit Removal
Haxdoor creates 2 registry service sub-keys with random generated names ("rgb" is a part of the name). It masks their drivers as the video drivers.
UnHackMe detects that the Haxdoor driver hooked some API functions.
It can hide their files from user eyes.
Haxdoor doesn't hide their drivers:
Haxdoor creates second driver. It is not active but it may be started on demand.
In addition Haxdoor activates the Winlogon Notification DLL:
UnHackMe automatically detects Haxdoor using Virus Scan and the rootkit will be removed at next reboot.
System requirementsWindows 9x, 2000/2003/XP/2008/Vista/Seven or higher 32 or 64 bit.
512 Mb RAM
CD/DVD drive or USB stick.
Please visit our support center: Ask your question
This solution works great. Thanks!
Works as advertised. Keep up your good work guys!