hello ppl

ok i need some help here cuz ive tryed everything with this ndis file

for some reason its always downloading 24/7 where the info goes is unknown and where its coming from is unknown and it downloads so much thats its always caping my internet and slowing my computer

here is what ive tryed so far

3 diff virus scaners n found nothing

checked for spyware found 130 spyware files (roblem keeps going lmao)

i searched google hoping to find somthing but didnt get much other then ppl saying it could be a trogan / hacker on my computer

ive changed the name of the file and a new copy with the old name pops up n ive even deleted it but WOW look a new copy lmao

n im gonna scan for worms tonight

well do what ya can guys to help me out here n thx in advanced if you need more info then i will find out for ya

oh i use a sygate firewall and it shows that its located C:\WINDOWS\System32\DRIVERS\ndisuio.sys

n its called NDIS User mode

i feel like this guy help!! lmao well thx n sup ryan

I forgot to ask you, did you try to block it in your firewall?

yeah but its still caping my internet lol i only have full cable for like 3 days then it caps

Kenshin, what OS are you running?

Try this online scan, be sure to check the repair tool before running.

http://www.pandasoftware.com/activescan/com/

If there is a trojan on your system, this should take care of it.

windows xp home n ive tryed scaning online and offline so if its a trogan can it be hidden?

Don't think it would be hidden, some scanners are more thorough than others.

I had a trojan once and Panda was the only AV scanner that caught it.

You will need to disable system restore before the scan so it can repair it.

umm got any programs that can track where all this is coming from and where its being stored on my pc cuz its downloading about 340+MB's a day and i have no clue where its coming from or going to

that would atleast give me a few answers as to what the F$%^ its doing lol n thx

I've never dealt with being hacked.

Go to PC Pitstop, sign in and go to the virus and spyware forum. Those folks there will be able to help you.

http://pcpitstop.ibforums.com/

aight lol i will go check out there but i gotta figger this out cuz everyone says its ether just a normal thing or its a hacker / trogan and i dont know what to belive anymore but all i know is this is not normal cuz then it would of started as soon as i installed windows XP right? lol and it only started a month or 2 ago

It wouldn't matter what OS you have, you can be hacked anytime. You may have a port open that the hacker came through.

lmao ok i did a trogan scan and came out clean lmao and i did a port scan but found one port open and only one ... now wtf lmao anyone know how to close a port?

here is the info i got on it. from my own winxp computer.


Microsoft Corporation

5.1.2600.1181 (xpsp2.030305-0046)
NDISUIO.SYS
English (United States)

NDISUIO.SYS

Microsoft® Windows® Operating System

5.1.2600.1181


so it looks like your computer might still be trying to download the rest of the update for the service pack 2.

if you know you got that and it is already installed then there is a know error with sp1. you have the tweaking program called "xteq setup"

if not get it there is a plug in for that error with the sp1. Called "windows service pack fix" it is in the system area in the xteq set up program.

but weather or not that fixes it i dont know?

I would do a clean install of XP. I've never had to try and close a port and I'm using the free version of Zone Alarm. Good thing, since I don't know how either. I've had good results using ZA, never had to do anything as far as configuration...it just works for me.

If you still want to use Sygate, they can tell you how to close a port.

Another thing you can try is to delete all your firewall rules, then wait for some program to ask permission to access the internet, let it in, if you notice it starts again, it's that program, so you can go delete it.

ah i had to meny problems with zone alarm lol n ive tryed a few fire walls n this one is the best one ive found

oh and lmao i downloaded all service packs and everything for windows last night n didnt have any changes in this program n i did unblock it b4 and this download never stops blocked or not

still dont know what its downloading lmao

See if this site might be of some help to you.

http://www.dnsstuff.com/

umm donno if this will be any help but i tested my computer lmao heres my test lmao http://www.pcpitstop.com/techexpress.asp?i...X7KJWDTNQNSLN04

main thing i wanna fix now is internet speed and when i have the money i will fix ram lmao

YAY ok i got my ndis problems solved lmao now anyone know how to fix my internet speed?

the internet speed should fix itself next month when they uncap it. Maybe try calling them and tell them you had a virus using up all the bandwidth and they might give it back to you for this month, doubt it though.

hehehe above post was me lmao but why was i loged out? lmao i never click log out button?

oh and umm any thing els about my test thingy can ya help me out with?

This post has been edited by kenshin on Sep 8 2003, 09:42 AM