View Full Version : how do i replace afd.sys

30-12-2011, 12:59 PM
mallware has taken over afd.sys in my win7 laptop it is locked so i can't delete it. it has removed my internet access

can somone tell me how to get a good version of afd .sys first of all will a xp version be ok?
i was going to rename it afd.syss and copy it to my win system32 drivers directory, then

I am going hopeing to use the recovery disk and then use a dos prompt to delete and rename

but i need the command to remove afd.sys and then rename afd.syss to afd.sys

i hope this will work any help appreciated thanks

Speedy Gonzales
30-12-2011, 02:00 PM
I think its a rootkit. Run tdsskiller (http://support.kaspersky.com/faq/?qid=208280684) The version in Win7 maybe different from the file in XP. Is it 32 or 64 bit?? If tdsskiller finds it tell it to remove it then reboot.

Try safe mode / networking, then get / run tdsskiller

30-12-2011, 02:13 PM
You could also try this

30-12-2011, 02:14 PM
it is a rootkit virus win 7 32bit machine will tdsskiller replace afd.sys ?

remember the laptop has no internet connection and will not allow any antivirus software to be installed nor will system restore work
vipre support said i need to replace afd.sys hence my original post

30-12-2011, 02:17 PM
ok but i need an afd.sys file where can i get a win7 32bit copy of this file

The instructins are

The virus just corrupted the file afd.sys. afd.sys in c:\WINDOWS\System32\drivers\.
After copying re-register afd.sys, you need to:1) Click Start2) Click Run3) Type regsvr32 afd.sys4) Press Enter5) Restart your computer

Speedy Gonzales
30-12-2011, 02:45 PM
You could try running sfc /scannow after tdsskiler removes the rootkit. Or if you have the Win7 dvd, extract afd.sys after, and put it in the same folder.

30-12-2011, 03:13 PM
how do i extract the file from my win 7 dvd?

Speedy Gonzales
30-12-2011, 03:16 PM
Do a sfc /scannow first put the dvd in. See if it'll do it for you