Rootkit detected in windows.....\winsx....... Error 5

Viruses and worms
1

C:\windows\winsx…FWPKCLNT.SYS Threat: Rootkit hidden file
C:\windows\winsx… TCPIP.syts Threat: Rootkit hidden file
C:\windows\winsx…Threat: Iphlpsvcmicplugin.dll
C:\windows\winsx…Threat: Iphlpsvcmicplugin.dll Rootkit hidden file
C:\windows\winsx…Threat: Netcorehc.dll Threat: Rootkit hidden file
C:\windows\winsx…Threat: Netcorehc.dll Threat: Rootkit hidden file
C:\windows\winsx…Threat: Netcorevent.dll Threat: Rootkit hidden file
C:\windows\winsx…Threat: Netcorevent.dll Threat: Rootkit hidden file

When I try to delete I receive error 5. What do I do :frowning:

2

Did this happen during or shortly after a windows update ?
I think that there has been a couple of topics like this in the past.

3

I do not know when it happened. I just downloaded Avast today. I guess I will try searching for the names of those files. I probably should have did that prior to posting. However, it did not look good. So, I wanted to get a jump - ty. If you run across anything I gladly accept advice from great people.

4

We have seen similar in relation to windows update as some of the files being used/updated are hidden and avast is a bit suspicious of hidden files in certain locations.

Was this detection on a specific scan that you ran ?
Or perhaps it happened shortly after boot (8 minutes after bot avast runs an anti-rootkit scan) ?

If you have rebooted since this notification/scan/alert ?
I suspect that these files are no longer there/hidden. You can confirm by checking the C:\windows\winsx… (you need to expand the column to see what the … concatenation is) and see if an avast scan of that folder results in further alerts ?

5

I am having a similar problem, if Anyone can help. I have Windows Vista 64 bit. I reinstall my software connect to Windows update and somehow download root kits. I’ve done this about three times in the past week and the infections range anywhere from 7 to 100 each time. Eventually the computer restarts to configure the updates and then just keeps restarting and never successfully configures them or does it start up. It just remains configuring and restarts repeatedly.