kamber Report post Posted April 18, 2007 I think I am having a similar problem as was described here https://forums.superantispyware.com/viewtopic.php?t=516 I am having cpXXXX.nls files being created upon reboot, and a copy of ndis.sys which was modified last night, has a file size of 275KB. If anyone can help me begin to get this off my system, i would sorely appreciate the help. Thanks Alisa Share this post Link to post Share on other sites
kamber Report post Posted April 18, 2007 i'm on xp with sp2 Share this post Link to post Share on other sites
kamber Report post Posted April 19, 2007 I boodted into safe mode and replaced ndis.sys with a known clean copy, SAS no longer finds the RUCrzy Virus and no CPxxxx.nls files. Share this post Link to post Share on other sites
fatdcuk Report post Posted April 19, 2007 I boodted into safe mode and replaced ndis.sys with a known clean copy, SAS no longer finds the RUCrzy Virus and no CPxxxx.nls files. WTG , have you checked winlogon.exe in system32 folder by uploading it to VT service? http://www.virustotal.com/en/indexf.html Share this post Link to post Share on other sites
kamber Report post Posted April 20, 2007 I did check the file and it's clean as a whistle....Thanks so much! Share this post Link to post Share on other sites
