How to deal with "iaStorV.sys" in Win 7?

How to deal with "iaStorV.sys" in Win 7?

Windows 7 Professional 64b.

Returnil report:
"Status: Denied execution for program that is absent from real disk.
Location: C:\WINDOWS\SYSTEM32\DRIVERS\IASTORV.SYS"

Is the mentioned "iaStorV.sys a trojan?
How to remove is if it is?
Why does it try to circumvent the Virtual Mode if it is not a trojan?

Thank you very much!

 

Seems to be related to Intel? http://www.runscanner.net/lib/iaStorV.sys.html. That being said, it isn't coming up at Process Library, and if it's not on the real disk, you may have averted a problem.

 

Hi fuquen,
The message is a block from the Anti-Execute feature (Virtual Mode > Settings > Additional Protection Options section). What do you have this set to; trust services (default) or trust programs only (full paranoid mode)?

Mike

 

Mr.dw426

Thank you.

Yes. Normally, both iaStor.sys and iaStorV.sys are Intel Matrix Storage Managers.
(http://ssdtechnologyforum.com/threads/508-Intel-Matrix-Storage-Manager-iaStor.sys-vs-iaStorV.sys)

But it is also a malware.
"Important note: Normally, the iaStorV.sys file should be in the C:\Windows\System32 folder. If it is found anywhere else, then the iaStorV.sys could be a virus, Trojan, worm, or spyware! "
*xhttp://www.pcsafedoctor.com/exe-errors/iaStorV.sys.html

And, according to Returnil's report, it tries to circumvent the Virtual Mode for executing a program that is absent from the real disk.

Many thanks.

 

Mr. Coldmoon

Thank you very much for always helping!

In the Additional Protection Options,
this is set to: Trust system services
from real disk only.


Thank you very much!

 

fuquen,
*xttp://www.pcsafedoctor.com/exe-errors/iaStorV.sys.html is given a bad rating by WOT.
Personally I would not believe what I read on a site like that.
Good luck.
Hugger

 

Mr. Hugger

Thank you very much for the worthy advice.
Maybe I am a little bit too nervous.

Thank you. Really appreciate!

 

Then it may be a legitimate block as the file on the real system should be known. Did the path in the block description lead to your system32 folder or to a different location on an alternate disk or partition?

Mike

 

Thank you, Mr. Coldmoon

Yes. I can locate it easily:
C:\Windows\system32\drivers\iaStorV.sys

Thank you!