ntsystem.exe

[DexSK]

Hi guys,
got some unwanted malware on my comp and spybot doesnt detect it. the app ntsystem.exe starts before my firewall, i tried to remove the autostart entry but it returns still. after starting it opens IE, ive permitted it to see where it connects, then disabled the particular address. it tries to save a file in the temp internet files folder, i could luckily terminate the action with my antivirus resident shield. please, help me...
attached a screenshot from the firewall connections dialog.

 

[DexSK]

okies, cancelling call for help, on another support page i found a solution: simply delete the file ntoskrnl.dll, that's it...and for you programmers, please include this to your new definition file if possible...thanks anyway, keep up the good work:greeting:

 

[LonnyRJones]

Yes ntoskrnl.dll and ntsystem.exe

I would like to see a current hijackthis log and if possible an online scan report.

 

[DexSK]

Yes ntoskrnl.dll and ntsystem.exe

I would like to see a current hijackthis log and if possible an online scan report.

Sorry Lonny, ive already posted a cancellation of the whole topic...ive blocked it out, no traces of it left on my sistem, all clear and running:blush:

 

[LonnyRJones]

Ok

Think Prevention: Put in place a good hosts file
http://www.mvps.org/winhelp2002/hosts.htm
http://www.mvps.org/winhelp2002/hosts2.htm
Repeat that proccess about once or twice a month

To help avoid reinfection see "So how did I get infected in the first place?"
http://forums.spybot.info/showthread.php?t=279

Surf safe

 

[LonnyRJones]

Since the problems are solved Im going to close the topic now, this keeps others with similar problems from posting there logs/question here, they should start a new topic.
If you should need to post another log for the same PC let one of us know via a PM (personal message).