-
ATI2KSAG.SYS Information
This is an undesirable program.
This file has been identified as a program that is undesirable to have running on your computer. This consists of programs that are misleading, harmful, or undesirable.
If the description states that it is a piece of malware or potentially unwanted malware, we recommend you immediately download Malwarebytes and perform a Free Malware Scan to check for and remove malicious programs.
If that does not help, feel free to ask us for assistance in the forums.
-
AlertThis file is a rootkit and may be hiding other files, processes, and registry entries on your computer.
If you find this file on your computer, it is strongly advised that you create a virus removal assistance topic. Instructions on how to do this can be found here.
-
NameObject memory mapping 8.0
-
Filenameati2ksag.sys
-
CommandC:\WINDOWS\System32\ati2ksag.sys
-
DescriptionAdded by a variant of the Goldun.Fam rootkit.
-
RecommendationIf the description states that this is malware or a potentially unwanted program, we suggest you download Malwarebytes and perform a free malware scan and remove what it detects.
-
File Location%System%
-
Startup TypeThis startup entry is installed as a Windows service.
-
Service Nameati2ksag
-
Display NameObject memory mapping 8.0
-
HijackThis Category
-
Note%System% is a variable that refers to the Windows System folder. By default this is C:\Windows\System for Windows 95/98/ME, C:\Winnt\System32 for Windows NT/2000, or C:\Windows\System32 for Windows XP/Vista/7.
- This entry has been requested 10,096 times.
Disclaimer
It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. BleepingComputer.com will not be held responsible if changes you make cause a system failure.
This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.