Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

System32 Error On Startup


  • Please log in to reply
9 replies to this topic

#1 SaxonManFinland

SaxonManFinland

  • Members
  • 159 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:British was living on Russian Boarder in Finland
  • Local time:12:30 AM

Posted 04 March 2006 - 03:10 AM

When I boot up my PC I get a Windows XP screen then over the top I get a black screen labelled
C:\WINDOWS\System32\ntqt.ex[i]
when I go to clear it down i get this message.
Cannot end program needs time to complete - or some such

How do I stop this screen popping up from start up? I cannot find any reference to ntqt.exe at microsoft or on the net.

BC AdBot (Login to Remove)

 


#2 RichieP

RichieP

  • Members
  • 86 posts
  • OFFLINE
  •  
  • Local time:11:30 PM

Posted 04 March 2006 - 09:43 AM

Seeing as you're a HJT trainee I thought you may be suspicious of any unknown files, particularly in the system32 folder. Can't you use HJT to remove it?

#3 SaxonManFinland

SaxonManFinland
  • Topic Starter

  • Members
  • 159 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:British was living on Russian Boarder in Finland
  • Local time:12:30 AM

Posted 04 March 2006 - 11:51 AM

Well good point, but NOT on my computer and 1800 ks from my friend who has the problem..............The topic above was just a cut and paste from his email

I really wanted to know if anyone had heard of this file..........Yes it seems to be strange, but WHY does it appera at Bootup.........I am no Windows expert and am not about to get him to dump a valid file...........At moment its a small problem, no ill effects on his PC, do not think it would go down well if I killed his PC

Edited by SaxonManFinland, 04 March 2006 - 12:14 PM.


#4 SaxonManFinland

SaxonManFinland
  • Topic Starter

  • Members
  • 159 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:British was living on Russian Boarder in Finland
  • Local time:12:30 AM

Posted 07 March 2006 - 03:16 PM

:thumbsup: :flowers: Turns out for everyones info This file appears to be a Trojan". I say appears to be, because the PC is only used for static non internet connected work, it does not even have a modem........Which makes checking and removal quite fun, how many programmes can one use that does not require an internet connection, to download and update????

Edited by SaxonManFinland, 07 March 2006 - 03:18 PM.


#5 acklan

acklan

    Bleepin' cat's meow


  • Members
  • 8,529 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Location:Baton Rouge, La.
  • Local time:05:30 PM

Posted 07 March 2006 - 03:34 PM

I found a reference to the fle in the following HJT POST.

http://www.bleepingcomputer.com/forums/t/18373/hijackthis-log-please-help-diagnose/
"2007 & 2008 Windows Shell/User Award"

#6 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 51,138 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:07:30 PM

Posted 07 March 2006 - 03:36 PM

From a Kaspersky Web scan report:
C:\WINDOWS\SYSTEM32\ntqt.exe Infected: Trojan.Win32.Agent.bi

From an Ewido scan report:
C:\WINDOWS\system32\ntqt.exe -> Trojan.Agent.bi : Cleaned with backup
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#7 Enthusiast

Enthusiast

  • Members
  • 5,898 posts
  • OFFLINE
  •  
  • Location:Florida, USA
  • Local time:06:30 PM

Posted 07 March 2006 - 04:48 PM

How would this computer get infected if it wasn't connected to the internet?

#8 SaxonManFinland

SaxonManFinland
  • Topic Starter

  • Members
  • 159 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:British was living on Russian Boarder in Finland
  • Local time:12:30 AM

Posted 12 March 2006 - 03:29 AM

It IS NOT connected Now, but WAS sometime in the past.................

Free removal tool for 32.BackDoor B available at Symantec!!!

#9 Albert Frankenstein

Albert Frankenstein

  • Members
  • 2,707 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Michigan, USA
  • Local time:07:30 PM

Posted 12 March 2006 - 08:48 AM

How would this computer get infected if it wasn't connected to the internet?

Couldn't a computer get infected through bringing in infected data? Perhaps an infected Word document from a floppy or cd, or some infected music that had originally been downloaded from a P2P web site, etc? I think so. Or maybe when someone buys a new computer they transfer data from their old computer. I had that happen with a neighbor of mine. He got tired of his 'connected' computer getting infected, so he bought a brand new computer, never connecting it to the internet in an effort to keep it clean. But transferring downloaded programs and data infected him anyway.
ALBERT FRANKENSTEIN
I'M SO SMART IT'S SCARY!


Currently home chillin' with the fam and my two dogs!


#10 usasma

usasma

    Still visually handicapped (avatar is memory developed by my Dad


  • BSOD Kernel Dump Expert
  • 25,090 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Southeastern CT, USA
  • Local time:07:30 PM

Posted 12 March 2006 - 04:05 PM

During Gulf War I a soldier of mine was sent a game on a floppy disk from his father (who was also a soldier). He let me use the disk to play the game. I let my boss use the disk to play the game. He went to a big meeting with all the head honcho's for the US forces - and let them use the disk to play the game.

Then the Joshi virus hit and it nearly paralyzed all of the US forces computers. In very short order I was visited by so many investigators that I lost count! Guess where the virus came from!

That's how viruses can get spread.
My browser caused a flood of traffic, sio my IP address was banned. Hope to fix it soon. Will get back to posting as soon as Im able.

- John  (my website: http://www.carrona.org/ )**If you need a more detailed explanation, please ask for it. I have the Knack. **  If I haven't replied in 48 hours, please send me a message. My eye problems have recently increased and I'm having difficult reading posts. (23 Nov 2017)FYI - I am completely blind in the right eye and ~30% blind in the left eye.<p>If the eye problems get worse suddenly, I may not be able to respond.If that's the case and help is needed, please PM a staff member for assistance.




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users