Can't get rid of ntndis.sys and ipsecndis.sys

[surfboarder]

seems the directory and file no longer exist on this machine...I did delete the backup file, though.

[IndiGenus]

Sorry need to make sure hidden files are showing, my bad.

http://www.microsoft.com/windowsxp/u...ddenfiles.mspx

[surfboarder]

I did have the "show hidden files" tab checked, but didn't have the "hide systems file" unchecked...

[IndiGenus]

Looks clean to me and right size now too. So no need to worry there. Sometimes just going through the process of looking for a file like that will trigger the AV that something is wrong. Which looks like that happened here.

Other than the start-up issue is all running well?

Uninstall Combofix

• Click START then RUN
• Now type Combofix /Uninstall in the runbox and click OK. Note the space between the X and the /U, it needs to be there.

The above procedure will:

• Delete the following: ComboFix and its associated files and folders.
• Reset the clock settings.
• Hide file extensions, if required.
• Hide System/Hidden files, if required.
• Reset System Restore.

Now to remove most of the tools that we have used in fixing your machine:

• Make sure you have an Internet Connection.
• Download OTC to your desktop and run it
• A list of tool components used in the Cleanup of malware will be downloaded.
• If your Firewall or Real Time protection attempts to block OTC to reach the Internet, please allow the application to do so.
• Click Yes to beging the Cleanup process and remove these components, including this application.
• You will be asked to reboot the machine to finish the Cleanup process. If you are asked to reboot the machine choose Yes.

Let me know if there are any other issues.

[surfboarder]

everything (save the TPM startup problem) seems just fine.

Thanks for all the help - really appreciate the time & effort.


Best regards.

[IndiGenus]

everything (save the TPM startup problem) seems just fine.

Great, and I bet a simple re-install or repair install if available will fix the problem.

Now that you are clean please take some time to read through TonyKlein's So how did I get infected in the first place?

Glad we could help,
Dave