kamber Posted April 18, 2007 I think I am having a similar problem as was described here https://forums.superantispyware.com/viewtopic.php?t=516 I am having cpXXXX.nls files being created upon reboot, and a copy of ndis.sys which was modified last night, has a file size of 275KB. If anyone can help me begin to get this off my system, i would sorely appreciate the help. Thanks Alisa Share this post Link to post Share on other sites
kamber Posted April 19, 2007 I boodted into safe mode and replaced ndis.sys with a known clean copy, SAS no longer finds the RUCrzy Virus and no CPxxxx.nls files. Share this post Link to post Share on other sites
fatdcuk Posted April 19, 2007 I boodted into safe mode and replaced ndis.sys with a known clean copy, SAS no longer finds the RUCrzy Virus and no CPxxxx.nls files. WTG , have you checked winlogon.exe in system32 folder by uploading it to VT service? http://www.virustotal.com/en/indexf.html Share this post Link to post Share on other sites
kamber Posted April 20, 2007 I did check the file and it's clean as a whistle....Thanks so much! Share this post Link to post Share on other sites
