Welcome to MalwareRemoval.com,
What if we told you that you could get malware removal help from experts, and that it was 100% free? MalwareRemoval.com provides free support for people with infected computers. Our help, and the tools we use are always 100% free. No hidden catch. We simply enjoy helping others. You enjoy a clean, safe computer.

Malware Removal Instructions

Rootkit.Agent: ntndis.sys & ipsecndis.sys

MalwareRemoval.com provides free support for people with infected computers. Using plain language that anyone can understand, our community of volunteer experts will walk you through each step.

Re: Rootkit.Agent: ntndis.sys & ipsecndis.sys

Unread postby TAGScorpioN » August 14th, 2010, 12:07 pm

Thank you very much for your reply. Thanks to your instructions on the Java update I noticed I three(!!) redundant versions installed gobbling up valuable space on my c:\ drive. Feels like my PC is getting a complete overhaul ;-)

Here's the OTL log:

========== FILES ==========
File\Folder F:\Games\PC\F.E.A.R\update\crack\FEAR.exe moved successfully.
F:\Programs\BSPlayer Pro v2.28.964 Multilanguage - Incl. Key\BS.Player.Pro.v2.28.964.exe moved successfully.
F:\Programs\BSPlayer Pro v2.28.964 Multilanguage - Incl. Key\BSPlayer Pro v2.28.964 Multilanguage - Incl. Key.rar moved successfully.
F:\Programs\daemon408-x86.exe moved successfully.
F:\Programs\rexbackup file system settings\BR-070721-00\BR-070721-00.exe moved successfully.
F:\Schijf dump\laptop\Software Download\Programs\CleanMyPC_Registry_Cleaner_v2[1].16.zip moved successfully.
F:\Schijf dump\laptop\Software Download\Programs\daemon408-x86.exe moved successfully.
F:\Schijf dump\laptop\Software Download\Programs\FlashFXP.3.0.Cracked-EQUiNOX.(Zekond-Torrent).zip moved successfully.
G:\CFA\ExamForce.CFA.Institute.CFA.2006.Level.I.CramMaster.v1.6-RBS.zip moved successfully.
G:\CFA\Exams\ExamForce.CFA.Institute.CFA.2007.Level.I.CramMaster.v1.4-RBS.zip moved successfully.

OTL by OldTimer - Version log created on 08142010_170956
Active Member
Posts: 10
Joined: August 5th, 2010, 3:43 am
Register to Remove

Re: Rootkit.Agent: ntndis.sys & ipsecndis.sys

Unread postby deltalima » August 14th, 2010, 12:13 pm

Hi TAGScorpioN,

Now that you are clean, please follow these simple steps in order to keep your computer clean and secure

Remove GMER

Delete the GMER icon from your desktop, it will be named cnklsmcv.exe

Uninstall ComboFix

  • Click START then RUN
  • Now type Combofix /Uninstall in the runbox and click OK

Clean up with OTL

  • Double-click OTL.exe to start the program. This will remove all the tools we used to clean your pc.
  • Close all other programs apart from OTL as this step will require a reboot
  • On the OTL main screen, press the CleanUp! button
  • Say Yes to the prompt and then allow the program to reboot your computer.

Update your AntiVirus Software and keep your other programs up-to-date
Update your Antivirus programs and other security products regularly to avoid new threats that could infect your system.
You can use one of these sites to check if any updates are needed for your pc.
Secunia Software Inspector
F-secure Health Check

Security Updates for Windows, Internet Explorer & Microsoft Office
Whenever a security problem in its software is found, Microsoft will usually create a patch so that after the patch is installed, attackers can't use the vulnerability to install malicious software on your PC. Keeping up with these patches will help to prevent malicious software being installed on your PC. Ensure you are registered for Windows updates via Start > right-click on My Computer > Properties > Automatic Updates tab or visit the Microsoft Update site on a regular basis.

Install SpywareBlaster - SpywareBlaster will added a large list of programs and sites into your Internet Explorer settings that will protect you from running and downloading known malicious programs.

A tutorial on installing & using this product can be found here:

Using SpywareBlaster to protect your computer from Spyware and Malware

Update all these programs regularly - Make sure you update all the programs I have listed regularly. Without regular updates you WILL NOT be protected when new malicious programs are released.Follow this list and your potential for being infected again will reduce dramatically.

Here are some additional utilities that will enhance your safety

Also, please read this great article by Tony Klein So How Did I Get Infected In First Place

Happy surfing and stay clean!
User avatar
Posts: 7614
Joined: February 28th, 2009, 4:38 pm
Location: UK

Re: Rootkit.Agent: ntndis.sys & ipsecndis.sys

Unread postby NonSuch » August 15th, 2010, 6:16 pm

As this issue appears to be resolved, this topic is now closed.

We are pleased we could help you resolve your computer's malware issues.

If you would like to make a comment or leave a compliment regarding the help you have received, please see Feedback for Our Helpers - Say "Thanks" Here.
User avatar
Posts: 27576
Joined: February 23rd, 2005, 7:08 am
Location: California


  • Similar Topics
    Last post

Return to Infected? Virus, malware, adware, ransomware, oh my!

Who is online

Users browsing this forum: No registered users and 60 guests

Contact us:

Advertisements do not imply our endorsement of that product or service. Register to remove all ads. The forum is run by volunteers who donate their time and expertise. We make every attempt to ensure that the help and advice posted is accurate and will not cause harm to your computer. However, we do not guarantee that they are accurate and they are to be used at your own risk. All trademarks are the property of their respective owners.

Member site: UNITE Against Malware