Advertisement
If you have a new account but are having problems posting or verifying your account, please email us on hello@boards.ie for help. Thanks :)
Hello all! Please ensure that you are posting a new thread or question in the appropriate forum. The Feedback forum is overwhelmed with questions that are having to be moved elsewhere. If you need help to verify your account contact hello@boards.ie
Hi there,
There is an issue with role permissions that is being worked on at the moment.
If you are having trouble with access or permissions on regional forums please post here to get access: https://www.boards.ie/discussion/2058365403/you-do-not-have-permission-for-that#latest

Blocking a file from being installed on my comp in future..... how?

  • 28-03-2005 1:37am
    #1
    eskimo
    Closed Accounts Posts: 682 ✭✭✭


    A file called windrvNT.sys keeps re-appearing in my system32 folder after I have deleted it. I deleted it a few days ago because it was causing problems and then today it re-appeared again causing the same problem. I've done all I can think of to try and find the source of the file, but I just can't figure it out.

    I think it's coming from the net but I'm not sure at all. Anyone know anything about this file?

    And if it is coming from the net, anyone know how I can block it from being downloaded in future? It's doing my head in!

    *I'm using Windows XP Home Edition


Comments

  • #2
    the_syco
    Registered Users, Registered Users 2 Posts: 37,316 ✭✭✭✭the_syco


    Get Ad-Aware and run it. It may get rid of it. Also, I presume you have some type of anti-virus software? If not, get some.

    Also, check out this. Someone had a problem with a file called windrvNT.sys, like yours.


  • #3
    greglo23
    Registered Users, Registered Users 2 Posts: 1,028 ✭✭✭greglo23


    rename windrvNT.sys to windrvNT.old and try again. if everything is ok then leave it for awhile and if everything works ok then, you can delete it after a few days.


  • #4
    Capt'n Midnight
    Moderators, Recreation & Hobbies Moderators, Science, Health & Environment Moderators, Technology & Internet Moderators Posts: 93,596 Mod ✭✭✭✭Capt'n Midnight


    Have a look at these two too - don't try unless you know what you are doings, it's just what the malware cleaners would do for you.
    http://forum.tweakxp.com/forum/shwmessage.aspx?ForumID=1&MessageID=153778&TopicPage=1
    http://forum.tweakxp.com/forum/shwmessage.aspx?ForumID=1&MessageID=153778&TopicPage=2

    Spywareblaster sets kill bits in IE - so some programs get blocked as I understand it


  • #5
    hshortt
    Closed Accounts Posts: 1,587 ✭✭✭hshortt


    Is this a legit Windows XP system?

    Are you certain that this is not a valid Windows file? If the file keep re-appearing it's either cause your PC is comprimised or the file is actually required by Windows and is being 'self-healed'.

    Self healing files are protected from deletion using a dll cache folder that keeps copies of all essential files and when the system detects that they have been deleted, they are automatically restored. You'll find the dll cache folder in Windows\system32. It's a hidden folder so you need to be viewing all files.

    The dll cache folder can also be used by hijackers and malware programs, where they can copy their own files to ensure that you don't delete them. Most adware/malware programs can detect this though.

    You could and should run a maware detection program, Microsoft's one is in Beta but it's actually very good and I'd recommend it. I also use Spybot to ensure that there's two seperate scans of the system.

    Cheers
    Howard


  • #6
    eskimo
    Closed Accounts Posts: 682 ✭✭✭eskimo


    Cheers for all your replies

    Yeah I'm using a legit version of XP. Also, I have Norton Anti-Virus 2005 on my PC.

    I'll give all your advice a try and see how it goes

    thanks again


  • Advertisement
  • #7
    Khannie
    Registered Users, Registered Users 2 Posts: 37,485 ✭✭✭✭Khannie


    final suggestion:

    delete the file, then create it again as an empty file. Right click, select properties and make it read only.

    HTH.


  • #8
    jor el
    Closed Accounts Posts: 16,713 ✭✭✭✭jor el


    eskimo wrote:
    I think it's coming from the net but I'm not sure at all. Anyone know anything about this file?
    As your other question has probably been answered, you could try using Firefox, if you're not already that is, and enable popup blocking. Also, install the adblock extension which will help to block adsites and scripts that install such crap. You will need to add site addresses to adblock manually though.

    If you're using IE, and need to continue to use it for some reason, there are third party extensions, such as PopUpCop, that can block ads and stop ActiveX and Javascripts etc from running. But these are not generally free.

    The Pro version of Adaware also comes with an adwatch monitor that can help in blocking suspicious spyware activity.


Advertisement