Solved 45,120 events in event viewer, I have a keylogger

Help me please Need to Switch to ahci from irst

I have Been getting bsod xd1 from iastora.sys I have come to the conclusion that I want it gone and want to switch to ahci and get rid of irst. Only problem is I heard you have to reinstall to do that and I don't want to. I really need this done and I'm scared because I get bsod in the middle of dayz and writing papers and its annoying.

Hi Amingst

See if the tutorial below will help

:ar: http://www.sevenforums.com/tutorials/61869-ahci-enable-windows-7-vista.html

What is your current SATA controller mode setting in BIOS setup?

IRST is not a storage controller mode but a driver that gets installed for your hardware which if not needed for RAID can be disabled in Services.msc as explained in this thread: http://www.sevenforums.com/hardware-devices/175483-intel-rapid-storage-technology-boot-slowing.html

It is set to Intel Smart Response Technology

also if i do what you said gregrocker, will that stop the iastora.sys bsod with error code 0xd1

I have found out my problems are a result of a keylog. I checked event viewer and it has 45k events all warnings and errors going back to october. I need to fix this now.

I have a keylogger in my system, i need to remove it without a reinstall or my pc crashing

Run a full scan with Malwarebytes, SUPERAntiSpyware.com - Downloads and your AV. What is your AV?

Report back what it finds.

What are the other settings choices besides Intel Rapid Storage technology?

How do you know you have a keylogger?

Is it a virus or malware detected by some security software, or is it a program you installed on your own? If so, just uninstall though control panel, or else, your antivirus may help.
Anyway, what has that to do with the event viewer and its many events? Often, malware, or even normal keyloggers don't write to it to avoid detection, I think.

it keeps saying kernel tracing errors in event viewer and it wont let me run disk check and it BSOD's with code xd1 and its because of iastorA.sys

everything turned negative except spyware thing. It showed 368 cookies. My AV is avast free and the option in bios is ata ahci and intel smart response

iaStorA.sys is a driver . Update the driver by clicking on the Download button above .

Lets scan for viruses ---------------------------------




Create a HitmanPro Kickstart USB flash drive, on a “clean” (non-infected) computer, download HitmanPro from the below link.



Insert your USB flash drive into your computer and launch the HitmanPro program .

Inside the program, click on the flying kick icon . Once you see your flash drive icon inside the program click on it and click on the Install Kickstart button ( this will wipe the flash drive ) click Yes to continue .

Once you're done remove the flash drive using the safely hardware removal inside the systray next to the time on the right hand side . Icon has a green arrow .

Plug the USB drive to the infected computer and restart the PC . While the PC is starting up press F12 and choose USB device

Scan the computer with HITMAN and delete anything it finds and remove the USB drive and restart the PC .

Upload the log once completed .



Run this program FIRST


Let's see if the following will take care of the issue:

TDSSKiller

Right-click the program and select: Extract to tdsskiller\


A TDSSKiller folder is found on your Desktop.
Open the folder, and double-click the TDSSKiller application.


When the TDSSKiller console opens, click on: Change Parameters
Under Additional Options, place a check in the box next to: Detect TDLFS File System
Click: OK


Press: Start Scan


If a suspicious object is detected, the default action is Skip, leave it as is, and click on: Continue
If malicious objects are found, they show in the Scan results.
Ensure Cure (the default) is selected, then click: Continue > Reboot now, to finish the cleaning process.
(Note: If Cure is not available, select Skip, >>Do not select: Delete<<)


When done, the tool outputs its log to the disk with the Windows Operating System, normally C:\


Logs have a name like:
C:\TDSSKiller.X.X.X_12.04.2013_15.31.43_log.txt

Information that might help you good folks.

http://www.sevenforums.com/general-discussion/286215-help-me-please-need-switch-ahci-irst.html

What Anti-virus do you have installed? Have you used PC Tools?

Jacee sounds like he has a rootkit

Well, we need to get some "specifics" before we start throwing tools at 'em to download.

Jacee said:

What Anti-virus do you have installed? Have you used PC Tools?

Click to expand...

If you read here he states what AV he has

OKay, see that AV is "avast free".

You asked a question . You got it answered you didn't ask if it was free or paid.