UNSOLVED

Chairface1

updated

19 years ago

C

Chairface1

16 Posts

0

5359

February 27th, 2008 00:00

ndt2.sys?!

I've been getting the following error message on my XPS 420 running Vista Home Premium:

 

"ndt2.sys stopped working and was closed

A problem caused the application to stop working correctly.  Windows will notify you if a solution is available."

 

 

I tried searching for ndt2.sys on Google, and it seems that this is some sort of malware.  However, the Trend Micro software isn't picking it up.  Has anyone else seen this?  Is it actually malware?  Should I be concerned and work to eliminate it?

 

Thanks.

  • Gmanson

    2 Intern

    •

    508 Posts

    284

    0

    Posted February 27th, 2008 15:00

    Refer to this.

    http://forums.techguy.org/windows-vista/652351-ndt2-sys.html
  • Chairface1

    16 Posts

    284

    0

    Posted March 2nd, 2008 01:00

    I appreciate the reply, but I'm not sure why the Trend Micro software isn't picking this up.  Also, it doesn't sound like the Symantec website mentions it either, so I doubt that their software would see it.  Why isn't this being taken care of automatically? 

  • ky331

    5 Journeyman

    •

    15639 Posts

    •

    45084 Points

    284

    0

    Posted March 2nd, 2008 01:00

    you wrote, "I'm not sure why the Trend Micro software isn't picking this up".

     

    Different programs serve different purposes:   an anti-VIRUS program focuses on VIRUSES... but does not (necessarily) seek out "adware", "spyware", "PUPS" (Potentially Unwanted Programs), &etc.   That's why a person needs to run anti-adware and anti-spyware programs, in addition to an anti-virus program.

     

    in particular, ndt2 seems to be a "rootkit" --- which is a specially devised form of malware that seeks to avoid detection!   there are special anti-rootkit programs, but I'm not in a position to suggest which one you should use.

     

    there is some indications that SuperAntiSpyware might find at least part (if not all) of the related infection --- see here:  http://www.superantispyware.com/definition/ndt2/.  

    if you wish, I don't think it would hurt you to try downloading and running a complete scan with it.   Regardless of what SAS can do, you should post a HiJackThis log in the HJT forum... and the experts there should be able to tell you what additional tools, including anti-rootkits, you might need to completely remove the problem.

     

    ===============================================

     

    SuperAntiSpyware [get the Free Version for Home Users]   http://www.superantispyware.com/
    After downloading & installing [either one or both of these], be sure to check for updates first, and then run the scan.   [Select COMPLETE scan for SuperAntiSpyware]
    ====================================================
    Download the latest version of Trend Micro's HiJackThis (HJT) [version 2.0.2]   installer   from
     
    Save it to your Desktop.
    Double-click on the     HJTInstall.exe    file you just downloaded, and click on the   Install   button, to install HJT in the suggested/default folder,
    C:\Program Files\Trend Micro\HijackThis
    ( As part of the installation, a shortcut to the HJT   program  will be placed on your Desktop, and another shortcut in your START menu [for easy-access to using HJT in the future ---
    you only need to run the  program  again, but not the  installer ] ).
    After installation, HJT will automatically open and start running.  
    [If this is your   first time  running HJT, please read and accept the EULA (End-User License Agreement)]
    Click on  Do a System Scan and Save a LogFile

     

    This will automatically open NotePad

     

    Copy the entire file from NotePad:  EDIT/SelectAll, EDIT/Copy

     

    Then go to the forum dedicated for HiJack This logs (**NOT** back here), and  PASTE the results there:

     

    http://forums.us.dell.com/supportforums/board?board.id=si_hijack

     

    Be sure to include a detailed description of any problems/errors/warnings you are encountering.  

    Also, please indicate the steps you've already taken, if any, in terms of running anti-malware scanners or malware removal tools.

     

    When you submit your HJT log, please make sure the box under your text which shows "Automatically convert carriage returns to HTML line breaks" is checked, or your log may not format correctly... it should consist of separate/readable lines, not one large "jumble".
     

    Hopefully, one of the HJT experts will get to it as quickly as possible.

     

    WARNING:  HiJack This is a VERY POWERFUL tool.  While it's  completely safe  for you to download, generate, and post your log (as described above), you should *NOT* attempt to do anything else (in particular, do NOT use it to delete/fix any entries) until you are advised to do so by a forum expert!!   Improper use of this tool can severely damage your system.
    Message Edited by ky331 on 03-01-2008 10:41 PM