Thread: anlukx7n.sys
View Single Post
  #9 (permalink)  
Old 03-04-2008, 05:02 PM
Gerry
 
Posts: n/a
Re: anlukx7n.sys
Matt

If you access the internet you are to open to attacks from spyware /
malware which are not the same as a virus attack. With Symantec they do
provide an anti-virus programme but they also provide more composite
packages e.g. Norton Internet Security, which will provide a measure of
protection against malware. You need to check exactly what is installed.
If you select Help, About within Norton that will often give details of
what is installed. However, no single anti-spyware programme is able to
fully protect because of the cunning ,skill and tenacity of those
putting out malware. As soon as programmes are upgraded to detect the
latest malware a new variant is created, which defeats the latest
preventative measures.

Malware is often created to appear as a driver and given a randomly
created name. If a Google search provides no returns then this
immediately suggests a bogus driver i.e. malware and that is the message
anlukx7n.sys gives to me. In many cases files, which are part of a
malware infestation, are documented but to avoid their easy detection
those propating malware use randomly created names to make their
detection less easy. What may have happened in your case is that the
infestation has been detected but only partly resolved. An entry has
been left in your computer start up process , which has been orphaned.
The entry, which is often in the Windows Registry is triggered by the
start up process but cannot connect to the file it wants to because it
has been removed so you are seeing an error.

You can examine the start up entries using Autoruns to see if you can
find a reference to anlukx7n.sys. It may be that by simply disabling or
deleting the entry using Autoruns you may see an end to your problem.

http://www.microsoft.com/technet/sys.../Autoruns.mspx

With Autoruns you can uncheck an item, which disables it from starting,
or you can can right click an item and then delete it. If you uncheck
you can recheck to re-enable the item. It is a much safer approach than
editing the Registry. Another useful feature of the programme is that
you can right click an item and select Search Online to get information
about the item selected.


--



Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~



kamikazimatt wrote:
> All I have to block it is my school provided symantec antivirus and
> windows firewall. I can't see why it would be malware though because
> there should be documented cases elsewhere.
>
> "Gerry" wrote:
>
>> What are your anti-virus and anti-spyware arrangements? Nil
>> responses to a search for anlukx7n.sys suggests malware!
>>
>>
>> --
>>
>>
>>
>> Hope this helps.
>>
>> Gerry
>> ~~~~
>> FCA
>> Stourport, England
>> Enquire, plan and execute
>> ~~~~~~~~~~~~~~~~~~~
>>
>>
>>
>>> kamikazimatt wrote:
>>> wait...no, I downloaded an xp pro SP2 ISO from my school and also a
>>> xp pro SP1 ISO that I slipstreamed into the files, and both are bad?
>>> Are you sure it's not just the ISOs of the install files?
>>>
>>> "Mark L. Ferguson" wrote:
>>>
>>>> You definitely have a bad copy of the SP2 download.
>>>>
>>>> --
>>>> Was this helpful? Then click the "Yes" Ratings button. Voting helps
>>>> the web interface.
>>>> http://www.microsoft.com/wn3/locales....htm#RateAPost
>>>>
>>>> Mark L. Ferguson
>>>>
>>>> .
>>>> "kamikazimatt" <kamikazimatt@discussions.microsoft.com> wrote in
>>>> message news:CCEFC81C-46DE-4548-8606-65F8B0A20D89@microsoft.com...
>>>>> I downloaded a windows xp pro sp2 and sp1a ISO to try to install
>>>>> on my computer. The sp2 cd told me when I was copying the files
>>>>> to start the installation that the file anlukx7n.sys could not be
>>>>> copied. Is this file essential or can it be skipped? I also
>>>>> tried to slipstream sp2 into the sp1a
>>>>> cd and the error still occurs.



Reply With Quote