1

I'm still searching for a solution to my problem as I stated in my previous question (UAC being turned off every time Windows 7 starts (once a day)). Today, a program called SpyHunter found an unknown object on my computer. The name of the file is 1UnHooker.sys and it is located in C:\Windows\System32\Drivers\. It has also a registry entry.

1UnHooker.sys screeny

Googling this name did not help much. Is it a rootkit or malware? Should I delete it?

Community
  • 1
Mehper C. Palavuzlar
  • 55,164
  • 49
  • 193
  • 250

1 Answers1

1

VirusTotal only has McAfee-GW-Edition say Heuristic.BehavesLike.Win32.Rootkit.H.

Looking into this further, it seems to be Tizer� Rootkit Razor and that file is Tizer File System Driver.

All that is hidden under the name X-Wire Technology and a fake service called Windows Installer.

Tamara Wijsman
  • 57,083
  • 27
  • 185
  • 256
  • 1
    I used Tizer Rootkit Razor last week, then I uninstalled it. That program should have left it. I just found [this](http://download.cnet.com/Tizer-Rootkit-Razor/9241-2239_4-11308031.html?messageID=10597962&tag=uo;uo), so I shouldn't have trusted that program. Thanks. – Mehper C. Palavuzlar Jan 25 '11 at 10:21
  • 1
    I deleted it together with the registry leftovers with no remorse. – Mehper C. Palavuzlar Jan 25 '11 at 11:37