I've been getting the following error message on my XPS 420 running Vista Home Premium:
"ndt2.sys stopped working and was closed
A problem caused the application to stop working correctly. Windows will notify you if a solution is available."
I tried searching for ndt2.sys on Google, and it seems that this is some sort of malware. However, the Trend Micro software isn't picking it up. Has anyone else seen this? Is it actually malware? Should I be concerned and work to eliminate it?
I appreciate the reply, but I'm not sure why the Trend Micro software isn't picking this up. Also, it doesn't sound like the Symantec website mentions it either, so I doubt that their software would see it. Why isn't this being taken care of automatically?
you wrote, "I'm not sure why the Trend Micro software isn't picking this up".
Different programs serve different purposes: an anti-VIRUS program focuses on VIRUSES... but does not (necessarily) seek out "adware", "spyware", "PUPS" (Potentially Unwanted Programs), &etc. That's why a person needs to run anti-adware and anti-spyware programs, in addition to an anti-virus program.
in particular, ndt2 seems to be a "rootkit" --- which is a specially devised form of malware that seeks to avoid detection! there are special anti-rootkit programs, but I'm not in a position to suggest which one you should use.
if you wish, I don't think it would hurt you to try downloading and running a complete scan with it. Regardless of what SAS can do, you should post a HiJackThis log in the HJT forum... and the experts there should be able to tell you what additional tools, including anti-rootkits, you might need to completely remove the problem.
After downloading & installing [either one or both of these], be sure to
check for updates first, and then run the scan. [Select COMPLETE scan for SuperAntiSpyware]
Double-click on the
HJTInstall.exe file you just downloaded, and click on the
Install button, to install HJT in the suggested/default folder,
C:\Program Files\Trend Micro\HijackThis
( As part of the installation, a shortcut to the HJT
program will be placed on your Desktop, and another shortcut in your START menu [for easy-access to using HJT in the future ---
you only need to run the
program again, but not the
installer ] ).
After installation, HJT will automatically open and start running.
[If this is your
first time running HJT, please read and accept the EULA (End-User License Agreement)]
Click on
Do a System Scan and Save a LogFile
This will automatically open NotePad
Copy the entire file from NotePad: EDIT/SelectAll, EDIT/Copy
Then go to the forum dedicated for HiJack This logs (**NOT** back here), and PASTE the results there:
Be sure to include a detailed description of any problems/errors/warnings you are encountering.
Also, please indicate the steps you've already taken, if any, in terms of running anti-malware scanners or malware removal tools.
When you submit your HJT log, please make sure the box under your text which shows "Automatically convert carriage returns to HTML line breaks" is checked, or your log may not format correctly... it should consist of separate/readable lines, not one large "jumble".
Hopefully, one of the HJT experts will get to it as quickly as possible.
WARNING: HiJack This is a VERY POWERFUL tool. While it's completely safe for you to download, generate, and post your log (as described above), you should *NOT* attempt to do anything else (in particular, do NOT use it to delete/fix any entries) until you are advised to do so by a forum expert!! Improper use of this tool can severely damage your system.
Gmanson
2 Intern
•
508 Posts
284
0
Posted February 27th, 2008 15:00
http://forums.techguy.org/windows-vista/652351-ndt2-sys.html