User User name Password  
   
Thursday 6.3.2025 / 19:59
Search AfterDawn Forums:        In English   Suomeksi   På svenska
afterdawn.com > forums > software, operating systems and more > windows - virus and spyware problems > guyz help me out, frrom this ntndis.exe thing!!
Show topics
 
Forums
Forums
guyz help me out, frrom this ntndis.exe thing!!
  Jump to:
 
Posted Message
Page:123Next >
jeynash
Junior Member
_
3. December 2007 @ 10:21 _ Link to this message    Send private message to this user   
This thing wont disappear even after using anti spyware or adware or anything of its kind.....
every time when ma pc login, this thing shows up...

[URL=http://img443.imageshack.us/my.php?image=44061173ui9.jpg][IMG]http://img443.imageshack.us/img443/9643/44061173ui9.th.jpg[/IMG][/URL]
and advanced thanks tooo
Advertisement
_
__
Senior Member
_
3. December 2007 @ 17:26 _ Link to this message    Send private message to this user   
http://www.bleepingcomputer.com/startups/not_used-14934.html
This appears to be in startup programs.
Try this: START> RUN> TYPE REGEDIT> EXPAND HKEY_LOCAL_MACHINE> SOFTWARE> MICROSOFT> WINDOWS> CURRENTVERSION> RUN> IN THE RIGHT WINDOW PANE LOOK FOR THE ITEM YOU WANT TO REMOVE FROM STARTUP> RIGHT CLICK THE ITEM> SELECT DELETE. CLOSE HKEY_LOCAL_MACHINE, AND OPEN HKEY_CURRENT_USER> PERFORM THE SAME STEPS. THIS WILL GET RID OF UNWANTED STARTUPS.

This message has been edited since posting. Last time this message was edited on 3. December 2007 @ 19:31

Member
_
3. December 2007 @ 19:10 _ Link to this message    Send private message to this user   
need to run your updated resident anti-virus and do a online scan:

F-secure scan:
http://support.f-secure.com/enu/home/ols.shtml

uses Internet Explorer only

click on the "start scanning button" near bottom of page.
click to accept/install the ActiveX applet
"accept" the License Agreement, click "full system scan"
Once the download of files completes,the scan will begin automatically.
The scan may take some time to finish.
When the scan completes, click the Automatic cleaning (recommended) button.

jeynash
Junior Member
_
3. December 2007 @ 21:11 _ Link to this message    Send private message to this user   
thnx for ur suggestions... but those didnt solve the problem...it keep scomin out as
"windows cannot find the'c:windows/system32/drivers/ntndis.exe'"
even though i have installed de os in partition "D"
Senior Member
_
3. December 2007 @ 22:12 _ Link to this message    Send private message to this user   
Try looking here. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Shell
Member
_
3. December 2007 @ 22:18 _ Link to this message    Send private message to this user   
there is probably a left over registry entry pointing to the file that is now missing. a hjt log might be useful.

Download HiJackThis log - Trend Micro HijackThis 2.0.2

http://www.trendsecure.com/portal/en-US/.../HJTInstall.exe

* Save HJTInstall.exe to your desktop.
* Doubleclick on the HJTInstall.exe icon on your desktop.
* By default it will install to C:\Program Files\Trend Micro\HijackThis .
* Click on Install.
* It will create a HijackThis icon on the desktop.
* Once installed, it will launch Hijackthis.
* Click on the Do a system scan and save a logfile button. It will scan and the log should open in notepad.
* Click on "Edit > Select All" then click on "Edit > Copy" and Paste the entire contents of the log in next reply.

jeynash
Junior Member
_
3. December 2007 @ 22:25 _ Link to this message    Send private message to this user   
wow!!
auickdraw u were rite....
i saw de below

Value Data
"Explorer.exe C:\WINDOWS\system32\drivers\ntndis.exe"

what should i do now??
jeynash
Junior Member
_
3. December 2007 @ 22:30 _ Link to this message    Send private message to this user   
Thanks to echoreply!!
i fixed the error by installing HT...and fixing the errors...thnx buddy!
Senior Member
_
3. December 2007 @ 22:36 _ Link to this message    Send private message to this user   
Great! Glad you were able to fix it. To answer your earlier question. After you located the file in the registry, you would of just deleted it. However, both suggestions would of worked. I just thought editing the registry would be easier.

This message has been edited since posting. Last time this message was edited on 3. December 2007 @ 22:39

jeynash
Junior Member
_
3. December 2007 @ 22:39 _ Link to this message    Send private message to this user   
Thnx for the information buddy!
Senior Member
_
3. December 2007 @ 22:42 _ Link to this message    Send private message to this user   
Not a problem. That's what we do here. Have a nice day!
jeynash
Junior Member
_
3. December 2007 @ 22:56 _ Link to this message    Send private message to this user   
Well, I do have one more problem.
There is an icon in the task bar, just like the windows security alert,
which cant be found in the "process" in the task manager and i also cant exit the program. when i click it, it opens the internet explorer, and guides to "http://www.antivirgear.com/?aff=1012", which does not exist.
this been there for the past 2 weeks.
Senior Member
_
3. December 2007 @ 23:01 _ Link to this message    Send private message to this user   
The quick launch icons, is this what you mean?

This message has been edited since posting. Last time this message was edited on 3. December 2007 @ 23:07

jeynash
Junior Member
_
3. December 2007 @ 23:07 _ Link to this message    Send private message to this user   
yes an icon in the system tray
Senior Member
_
3. December 2007 @ 23:23 _ Link to this message    Send private message to this user   
Remember this fix I showed you earlier for startup programs?
Try this: START> RUN> TYPE REGEDIT> EXPAND HKEY_LOCAL_MACHINE> SOFTWARE> MICROSOFT> WINDOWS> CURRENTVERSION> RUN> IN THE RIGHT WINDOW PANE LOOK FOR THE ITEM YOU WANT TO REMOVE FROM STARTUP> RIGHT CLICK THE ITEM> SELECT DELETE. CLOSE HKEY_LOCAL_MACHINE, AND OPEN HKEY_CURRENT_USER> PERFORM THE SAME STEPS. THIS WILL GET RID OF UNWANTED STARTUPS.

If this appears in the system tray next to the clock, it is a startup. This can also be removed manually with Microsoft Configuation Utility. START> RUN> TYPE MSCONFIG> CLICK THE START TAB> SCROLL THROUGH THE LIST UNTIL YOU LOCATE THE FILE NAME> UNCHECK THE FILE> CLICK APPLY> CLICK OK. REBOOT YOUR COMPUTER. However, the problem with doing it this way, is you don't actually delete the file, you only disable it. Removing it from the registry deletes it.
jeynash
Junior Member
_
3. December 2007 @ 23:34 _ Link to this message    Send private message to this user   
i know de msconfig option.
i had tried it. there is nothing in the startup item that has any relation to the icon in the system tray. even if i "disable all" in the startup, it keeps comin.
Please chk de image:


jeynash
Junior Member
_
3. December 2007 @ 23:38 _ Link to this message    Send private message to this user   
In the registry editor,
i found only 2 entries
1, Default
2, daemon tools
which, i think, are not the source of the problem
Senior Member
_
3. December 2007 @ 23:53 _ Link to this message    Send private message to this user   
If your not sure. You'll need to work with MSCONFIG start tab. Here's what you do. START> TYPE MSCONFIG> CLICK ON THE STARTUP TAB> SELECT DISABLE ALL> CLICK APPLY> AND GET OUT OF THERE AND REBOOT. SEE IF THE ICON HAS DISAPPEARED. IF SO, AND I SUSPECT IT HAS, THE NEXT THING TO DO IS GO BACK INTO MSCONFIG START TAB AND PUT THREE GREEN CHECKS MARKS ON THE FIRST THREE PROGRAMS IN THE LIST THEN REBOOT. KEEP ADDING THREE MORE CHECK MARKS AT A TIME TO THE REST OF THE PROGRAMS IN THE LIST UNTIL YOU HAVE THE PROGRAM IN QUESTION STARTING AGAIN IN SYSTEM TRAY. GO BACK TO THE START TAB AGAIN AND REMOVE ONE CHECK MARK AT A TIME, STARTING AT THE BOTTOM OF THE LIST, REBOOTING EACH TIME, UNTIL THE PROGRAM DISAPPEARS. BINGO! YOU FOUND WHICH ONE IT IS. HOW GO BACK INTO THE REGISTRY WHERE I SHOWED YOU TO GO AND LOCATE THIS STARTUP. RIGHT CLICK IT AND SELECT DELETE. THEN BOB'S YOUR UNCLE! OPPS, JUST NOTICED I'M SHOUTING WITH CAPITOL LETTERS, SORRY ABOUT THAT.

This message has been edited since posting. Last time this message was edited on 4. December 2007 @ 00:01

jeynash
Junior Member
_
4. December 2007 @ 00:30 _ Link to this message    Send private message to this user   
dude, this is ma startup

check the image





do you still think i got anything to do in the msconfig.exe
jeynash
Junior Member
_
4. December 2007 @ 00:34 _ Link to this message    Send private message to this user   
i had unchecked all the items
Senior Member
_
4. December 2007 @ 00:37 _ Link to this message    Send private message to this user   
Good try, but I can't see the 1 inch size msconfig window you posted. LOL I can say, if it's in system tray, then it's in startup. And just for the record, I'm not a dude. All you need to do is a GOOGLE search. Type: Windows system tray icons. Here's just one to read. http://www.pcworld.com/article/id,73163-page,1/article.html

This message has been edited since posting. Last time this message was edited on 4. December 2007 @ 00:41

jeynash
Junior Member
_
4. December 2007 @ 00:47 _ Link to this message    Send private message to this user   
OOOOPs!!!
seriously miscalculated(regarding de dude thing)
:)

Anywayz i do now, the icon in the system tray is not in the startup(ie in the msconfig.exe) got it?

and please check the link below, for the image....buddy!!(will that do?)

http://img98.imageshack.us/my.php?image=fewas3.jpg
Senior Member
_
4. December 2007 @ 01:09 _ Link to this message    Send private message to this user   
If you want to call a woman buddy, then I say whatever floats your boat. You can call me QuikDraw... works for me. I was a sketch artist in the old days before it became computerized. This is where the name Quick Draw comes from. I'm retired.

OK, just like you sent proof on your unchecked arrows in MSCONFIG, send me another one of your system tray icons after you select Normal startup in MSCONFIG and reboot.

You can hover the mouse over the icon in question and it should say what it is. Or you can right click it. To keep al the icons displaying in systray. Right click on START> Properties> uncheck hide inactive icons> click apply.

This message has been edited since posting. Last time this message was edited on 4. December 2007 @ 01:16

jeynash
Junior Member
_
4. December 2007 @ 02:27 _ Link to this message    Send private message to this user   
Now, QuickDraw, this is how it looks during startup

http://img259.imageshack.us/my.php?image=thisistheprobzb0.jpg

Gettin anythin?? Quickdraw?
Advertisement
_
__
 
_
Senior Member
_
4. December 2007 @ 02:39 _ Link to this message    Send private message to this user   
That's easy. It tells you what's wrong. Says you got crap in your machine and to get rid of it. LOL
All kidding aside. There is a red icon to the right of it with an x in it. click on that, I believe that is the problem. Let me know what you find out. Oh and that icon is a windows warning, it will go out when we fix the other problem.

This message has been edited since posting. Last time this message was edited on 4. December 2007 @ 03:23

 
Page:123Next >
afterdawn.com > forums > software, operating systems and more > windows - virus and spyware problems > guyz help me out, frrom this ntndis.exe thing!!
 

Digital video: AfterDawn.com | AfterDawn Forums
Music: MP3Lizard.com
Gaming: Blasteroids.com | Blasteroids Forums | Compare game prices
Software: Software downloads
Blogs: User profile pages
RSS feeds: AfterDawn.com News | Software updates | AfterDawn Forums
International: AfterDawn in Finnish | AfterDawn in Swedish | AfterDawn in Norwegian | download.fi
Navigate: Search | Site map
About us: About AfterDawn Ltd | Advertise on our sites | Rules, Restrictions, Legal disclaimer & Privacy policy
Contact us: Send feedback | Contact our media sales team
 
  © 1999-2025 by AfterDawn Ltd.

  IDG TechNetwork