ndisuio.sys downloading?

Triple6_wild · Post by **Triple6_wild** » Sat Sep 06, 2003 6:25 pm

hello ppl

ok i need some help here cuz ive tryed everything with this ndis file

for some reason its always downloading 24/7 where the info goes is unknown and where its coming from is unknown and it downloads so much thats its always caping my internet and slowing my computer

here is what ive tryed so far

3 diff virus scaners n found nothing

checked for spyware found 130 spyware files (roblem keeps going lmao)

i searched google hoping to find somthing but didnt get much other then ppl saying it could be a trogan / hacker on my computer

ive changed the name of the file and a new copy with the old name pops up n ive even deleted it but WOW look a new copy lmao

n im gonna scan for worms tonight

well do what ya can guys to help me out here n thx in advanced if you need more info then i will find out for ya

oh i use a sygate firewall and it shows that its located C:WINDOWSSystem32DRIVERS
disuio.sys

n its called NDIS User mode

i feel like this guy

help!! lmao well thx n sup ryan

Archived topic from Iceteks, old topic ID:1290, old post ID:11313

Red Squirrel · Post by **Red Squirrel** » Sat Sep 06, 2003 6:29 pm

I forgot to ask you, did you try to block it in your firewall?

Archived topic from Iceteks, old topic ID:1290, old post ID:11314

Triple6_wild · Post by **Triple6_wild** » Sat Sep 06, 2003 6:36 pm

yeah but its still caping my internet lol i only have full cable for like 3 days then it caps

Archived topic from Iceteks, old topic ID:1290, old post ID:11317

Wren · Post by **Wren** » Sat Sep 06, 2003 8:02 pm

Kenshin, what OS are you running?

Try this online scan, be sure to check the repair tool before running.

http://www.pandasoftware.com/activescan/com/

If there is a trojan on your system, this should take care of it.

Archived topic from Iceteks, old topic ID:1290, old post ID:11318

Triple6_wild · Post by **Triple6_wild** » Sat Sep 06, 2003 11:41 pm

windows xp home n ive tryed scaning online and offline so if its a trogan can it be hidden?

Archived topic from Iceteks, old topic ID:1290, old post ID:11324

Wren · Post by **Wren** » Sat Sep 06, 2003 11:48 pm

Don't think it would be hidden, some scanners are more thorough than others.

I had a trojan once and Panda was the only AV scanner that caught it.

You will need to disable system restore before the scan so it can repair it.

Archived topic from Iceteks, old topic ID:1290, old post ID:11325

Triple6_wild · Post by **Triple6_wild** » Sat Sep 06, 2003 11:51 pm

umm got any programs that can track where all this is coming from and where its being stored on my pc cuz its downloading about 340+MB's a day and i have no clue where its coming from or going to

that would atleast give me a few answers as to what the F$%^ its doing lol n thx

Archived topic from Iceteks, old topic ID:1290, old post ID:11326

Wren · Post by **Wren** » Sun Sep 07, 2003 12:09 am

I've never dealt with being hacked.

Go to PC Pitstop, sign in and go to the virus and spyware forum. Those folks there will be able to help you.

http://pcpitstop.ibforums.com/

Archived topic from Iceteks, old topic ID:1290, old post ID:11330

Triple6_wild · Post by **Triple6_wild** » Sun Sep 07, 2003 12:13 am

aight lol i will go check out there but i gotta figger this out cuz everyone says its ether just a normal thing or its a hacker / trogan and i dont know what to belive anymore but all i know is this is not normal cuz then it would of started as soon as i installed windows XP right? lol and it only started a month or 2 ago

Archived topic from Iceteks, old topic ID:1290, old post ID:11331

Wren · Post by **Wren** » Sun Sep 07, 2003 12:17 am

It wouldn't matter what OS you have, you can be hacked anytime. You may have a port open that the hacker came through.

Archived topic from Iceteks, old topic ID:1290, old post ID:11332

Triple6_wild · Post by **Triple6_wild** » Sun Sep 07, 2003 3:28 am

lmao ok i did a trogan scan and came out clean lmao and i did a port scan but found one port open and only one ... now wtf lmao anyone know how to close a port?

Archived topic from Iceteks, old topic ID:1290, old post ID:11333

rovingcowboy · Post by **rovingcowboy** » Sun Sep 07, 2003 9:51 am

here is the info i got on it. from my own winxp computer.

Microsoft Corporation

5.1.2600.1181 (xpsp2.030305-0046)
NDISUIO.SYS
English (United States)

NDISUIO.SYS

Microsoft® Windows® Operating System

5.1.2600.1181

so it looks like your computer might still be trying to download the rest of the update for the service pack 2.

if you know you got that and it is already installed then there is a know error with sp1. you have the tweaking program called "xteq setup"

if not get it there is a plug in for that error with the sp1. Called "windows service pack fix" it is in the system area in the xteq set up program.

but weather or not that fixes it i dont know?

Archived topic from Iceteks, old topic ID:1290, old post ID:11335

Wren · Post by **Wren** » Sun Sep 07, 2003 12:02 pm

I would do a clean install of XP. I've never had to try and close a port and I'm using the free version of Zone Alarm. Good thing, since I don't know how either. I've had good results using ZA, never had to do anything as far as configuration...it just works for me.

If you still want to use Sygate, they can tell you how to close a port.

Archived topic from Iceteks, old topic ID:1290, old post ID:11336

Red Squirrel · Post by **Red Squirrel** » Sun Sep 07, 2003 12:40 pm

Another thing you can try is to delete all your firewall rules, then wait for some program to ask permission to access the internet, let it in, if you notice it starts again, it's that program, so you can go delete it.

Archived topic from Iceteks, old topic ID:1290, old post ID:11337

Triple6_wild · Post by **Triple6_wild** » Sun Sep 07, 2003 8:20 pm

ah i had to meny problems with zone alarm lol n ive tryed a few fire walls n this one is the best one ive found

oh and lmao i downloaded all service packs and everything for windows last night n didnt have any changes in this program n i did unblock it b4 and this download never stops blocked or not

still dont know what its downloading lmao

Archived topic from Iceteks, old topic ID:1290, old post ID:11347

Wren · Post by **Wren** » Sun Sep 07, 2003 11:04 pm

See if this site might be of some help to you.

http://www.dnsstuff.com/

Archived topic from Iceteks, old topic ID:1290, old post ID:11356

Triple6_wild · Post by **Triple6_wild** » Mon Sep 08, 2003 12:48 am

umm donno if this will be any help but i tested my computer lmao heres my test lmao http://www.pcpitstop.com/techexpress.asp?i...X7KJWDTNQNSLN04

main thing i wanna fix now is internet speed and when i have the money i will fix ram lmao

Archived topic from Iceteks, old topic ID:1290, old post ID:11363

Triple6_wild · Post by **Triple6_wild** » Mon Sep 08, 2003 5:04 am

YAY ok i got my ndis problems solved lmao now anyone know how to fix my internet speed?

Archived topic from Iceteks, old topic ID:1290, old post ID:11364

Red Squirrel · Post by **Red Squirrel** » Mon Sep 08, 2003 9:29 am

the internet speed should fix itself next month when they uncap it. Maybe try calling them and tell them you had a virus using up all the bandwidth and they might give it back to you for this month, doubt it though.

Archived topic from Iceteks, old topic ID:1290, old post ID:11366

Triple6_wild · Post by **Triple6_wild** » Mon Sep 08, 2003 9:40 am

hehehe above post was me lmao but why was i loged out? lmao i never click log out button?

oh and umm any thing els about my test thingy can ya help me out with?

Archived topic from Iceteks, old topic ID:1290, old post ID:11368

Triple6_wild · Post by **Triple6_wild** » Mon Sep 08, 2003 9:51 am

yo wait one second here man ... my internet caps once ive downloaded 10 gigs now is there any possible way to download 10 gigs in 2 or 3 days? lol

help me figger this one out downloading non stop for 72 hours at what speed to equal 10 gigs?

Archived topic from Iceteks, old topic ID:1290, old post ID:11369

Wren · Post by **Wren** » Mon Sep 08, 2003 1:19 pm

I looked at your test results...first thing, get rid of Wild Tangent (spyware). See if it is in add/remove and uninstall it. That can slow you down. Clean out temp, internet files and history. Defrag too if you haven't done that lately. It may take a while if you are running slow.

Next, use the auto fix at Pitstop for the security issue.

Archived topic from Iceteks, old topic ID:1290, old post ID:11373

Triple6_wild · Post by **Triple6_wild** » Mon Sep 08, 2003 1:28 pm

• Check IE Restricted Sites zone <---- ran auto fix donno if it helped
• Remove Spyware running on your PC <------ used ad-aware a few times this week
• Defragment files (Drive C) <------ can be done when im sleeping lol
• Slow Internet performance <------ only thing i really need help to fix
• Install more memory <--------- no money now or i would lol
• Clean up disk space (Drive C) <------ will do when i got time

Bandwidth Down
82 Kbits/sec

Bandwidth Up
77 Kbits/sec

Average Ping
68 ms

Ping Loss
0%

should be at 512 down or close to and wildtengent i need for a lil then i will remove

Archived topic from Iceteks, old topic ID:1290, old post ID:11374

Wren · Post by **Wren** » Mon Sep 08, 2003 1:35 pm

Try this too while your at it.

Click run, type cmd, at the prompt, type chkdsk /f

Be sure and leave the space between the k and slash.

This will run a scan disk and fix on XP.

There is something else we can try if you have your XP CD.

Archived topic from Iceteks, old topic ID:1290, old post ID:11375

Triple6_wild · Post by **Triple6_wild** » Mon Sep 08, 2003 1:44 pm

umm and where do i put this ?lol im not one to mess with windows much and yeah i have the cd

Archived topic from Iceteks, old topic ID:1290, old post ID:11376