TechSpot

Help with ntsystem.exe

By s8t
Aug 14, 2007
  1. I followed an earlier thread about removal with Greatis' RegRun Reanimator and I have the same problem. The version of Reanimator I downloaded doesn't have the ntsystem.rnr file. Can somebody tell me how to get it?

    Thanks
    s8t
     
  2. howard_hopkinso

    howard_hopkinso TS Rookie Posts: 24,177   +19

    Hello and welcome to Techspot.

    Please find attached the ntsysten.rnr file you require. I have attached it as a zip file, so you`ll need to unzip it in order to use it.

    Once you`ve finished with the Regrun Reanimator programme, follow the instructions below.

    Very Important: Before deciding whether you should clean or reformat your system, go and read this thread HERE and decide what it is you want to do.

    If after reading the above, you wish to clean your system, do the following.

    Go and read the Viruses/Spyware/Malware, preliminary removal instructions. Follow all the instructions exactly.

    Post fresh HJT, AVG Antispyware and Combofix logs as attachments into this thread, only after doing the above.

    Also, let me know the results of the AVG Antirootkit scan.

    Regards Howard :wave: :wave:

    This thread is for the use of s8t only. Please don`t post your own virus/spyware problems in this thread. Instead, open a new thread in our security and the web forum.
     

    Attached Files:

  3. Bobbye

    Bobbye Helper on the Fringe Posts: 16,335   +36

  4. howard_hopkinso

    howard_hopkinso TS Rookie Posts: 24,177   +19

    The regrun Reanimator programme is the only programme I know of that will get rid of the ntsystem.exe(Gwiz) infection. I have done this several times on different systems with great success.

    The ntsystem.rnr is needed in order to run the fix and is no threat. It used to come with older versions of Regrun, but it seems it doesn`t come with the newer versions, making the fix impossible.

    Regards Howard :)

    This thread is for the use of s8t only. Please don`t post your own virus/spyware problems in this thread. Instead, open a new thread in our security and the web forum.
     
  5. Bobbye

    Bobbye Helper on the Fringe Posts: 16,335   +36

    Please excuse my error on this file. I quoted information for the NTOSKRNL.DLL and this is NOT the file in question. My bad!

    I traced back to try and find the error of my ways: on the RegRun site I referenced, the subject heading is: "Virus Removal Story: ntsystem.exe, ntoskrnl.dll, gviz". I mistakenly scrolled down to the information for the second file.

    Howard, you must also be very careful in your spelling: "ntsysten.rnr file you require" is not correct.(Note the 'n' instead of 'm') This is a copy and paste.
     
  6. howard_hopkinso

    howard_hopkinso TS Rookie Posts: 24,177   +19

    I did spell it correctly r n r when typed without spaces does look like mr(MR). Example rnr. lol.

    Regards Howard :)
     
  7. Bobbye

    Bobbye Helper on the Fringe Posts: 16,335   +36

    I referred to this "ntsysten"- we have to be so careful when referring to errors- one spelling can be a legitimate Windows file, the other, serious malware. An example of the latter would be the legitimate 'svchost' and the malware 'schost' and 'scvhost'.

    I do not point this out to pick, only to advise.
     
  8. howard_hopkinso

    howard_hopkinso TS Rookie Posts: 24,177   +19

    Oops, spot the type`o`.

    I do understand your point, but I have been doing this sort of thing for a long time. As far as I`m aware, I`ve never crashed anyones system thus far and have cleaned thousands of viruses etc.

    Regards Howard :)
     
  9. s8t

    s8t TS Rookie Topic Starter

    Thank you Howard. That appears to have done the job. I can't do the HiJack This files yet because I'm having trouble getting connected. This isn't my computer but my wife's best friends daughters and I don't have a lot of time per day to work on it.

    Again thanks
    s8t
     
  10. howard_hopkinso

    howard_hopkinso TS Rookie Posts: 24,177   +19

    Ok, no problem.

    As soon as you`re able, post the requested logfiles and I`ll see what other nasties(if any) are lurking.

    Regards Howard :)

    This thread is for the use of s8t only. Please don`t post your own virus/spyware problems in this thread. Instead, open a new thread in our security and the web forum.
     
Topic Status:
Not open for further replies.

Similar Topics

Add New Comment

You need to be a member to leave a comment. Join thousands of tech enthusiasts and participate.
TechSpot Account You may also...