How to remove an NDIS error

NDIS.sys is a Windows driver. A driver is a small software program that allows your computer to communicate with hardware or connected devices. This means that a driver has direct access to the internals of the OS, hardware etc.
The free file information forum can help you determine if NDIS.sys belonging to the Windows system or an application you can trust.

Run a free scan to check for NDIS drivers in need of updating

NDIS.sys file information

The process known as NDIS 5.1 wrapper driver or NDIS 6.20 driver or NDIS 6.0 wrapper driver belongs to software Microsoft Windows Operating System or Betriebssystem Microsoft Windows by Microsoft (www.microsoft.com).

Description: NDIS.sys is located in the folder C:\Windows\System32\drivers. Known file sizes on Windows 7/XP are 182,912 bytes (78% of all occurrences), 182,656 bytes and 5 more variants.
The driver can be started or stopped from Services in the Control Panel or by other programs. The file is a Windows core system file. The program is not visible. There is no detailed description of this service. It is a trustworthy file from Microsoft. NDIS.sys seems to be a compressed file. Therefore the technical security rating is 2% dangerous, however also read the users reviews.

Recommended: Identify NDIS.sys related errors

Important: Some malware camouflages itself as NDIS.sys, particularly when located in the c:\windows or c:\windows\system32 folder. Therefore, you should check the NDIS.sys process on your PC to see if it is a threat. We recommend Security Task Manager for verifying your computer's security. This was one of the Top Download Picks of The Washington Post and PC World.

Score

User Comments

All i know is my computer crashes all the time, it enters a blue screen with some weird error, In the**Stop** error it said "ndis.sys"
Double Helix

When you change the IPX frame type for your network connection from Auto Detect to any other IPX frame type, you may receive a "STOP 0x0000001D" or "STOP 0x000000A" Stop error that occurs in Ndis.sys.
narrowgate (further information)

I've got the same problem if i play pcgames!... after a time a blue screen apperas with the text ndis.sys problem or sth like this.. and is had to turn off my computer
Kazino

The upgrade of WinXP to Service Pack 2 needs this file (in system32/drivers) to no longer be in use, but it always is.
Scooter_Kitt

Windows XP HE will not start if ndis.sys is missing/quarentined. Startup will go into a loop , a blue screen will flash (too quick to read), and PC will go to boot again and stop to ask how windows should be started. (Blue screen actualy says: Windows has detected a problem and will shot down to protect your PC) . Because you can not start windows is very difficult to fix. You will need your windows CD and probably need to use the XP recovery console
George Vides

It is sometimes replaced with a Trojan in the folder and moves the Microsoft Ndis to a different folder.
JC

I had the same issue and it ended up being a bad onboard NIC. I just disabled it in the BIOS and chose 'last known good' to boot to and it worked. I then installed a NIC PCI card and got network connectivity back up.
derekge

I currently (4/23/09) have a system running Win XP SP3 and the AV software reports NDIS.sys and denies access. I am pretty sure the file is infected, since I have been removing viruses and trojans the past few days, but this problem is pretty persistant. Also I get the 'blue' screen when running 'superantispyware' which normally is a great piece of software to remove all kinds of malware. I can not remove the file since it is in use (not even in safe mode). I do belive NDIS.sys is a windows critical file, but it is hijacked be some piece of malware.
Frenzerelly

causes my pc blue screen

ndis.sys is a network layer driver crucial for network interface controllers that access the internet
israel

hash for ndis.sys file should be: md5 1DF7F42665C94B825322FAE71721130D
jambalaya (further information)

In my case, this file was infected with Win32/Protector.C virus as NOD32 said. After deleting the file, nothing happened, but after the next restart, WinXP coudn't start some services including RPC and WZC (wireless zero configuration). After restoring the file, I tried to start the service, but the Windows crashed, and after the restart, the network connection worked again.

erzeugt ständig bluescreen
DAniel

If you're getting blue screens for NDIS.sys put in your windows disk and run the following command from command prompt (copy & past) "del %windir%\system32\drivers\ndis.sys expand e:\i386\ndis.sy_ %windir%\system32\drivers\ndis.sys"

yelloe icon on driver adapter
Avinash

network problem
patelankit

Some malware or virus infects it, and when disinfecting, ndis disappears thus disabling networkcards.
per

my dell m1330 wont start because ndis.sys missing/corrupt
Robert

NDIS.sys on my computer tries to access the Internet. I have my firewall block it's access but do not delete the file. Everything works OK that way.
Ray B.

it is related to networking
blaster20089

Required by ALL NT based versions of Windows. Most likely cause of Blue Screen relating to ndis.sys is due to a malfunctioning Norton product or an incorrectly/insufficiently uninstalled Norton title. Run "Norton Removal Tool" in Safe Mode to cure.
Mark

this file identify your network adapter and is very important file ,if u have problem with this file just delete this file and have a same copy from a working computer , paste it in c:windows/ system32/driver's folder , this will idnetify network adaptor .
Jitendra

that it make my pc get blue scrren

Summary: Average user rating of NDIS.sys: based on 27 votes with 23 reviews.

15 users think NDIS.sys is essential for Windows or an installed application. 4 users think it's probably harmless. 4 users think it's neither essential nor dangerous. 2 users suspect danger. 2 users think NDIS.sys is dangerous and recommend removing it. 6 users doesn't grade NDIS.sys ("not sure about it").

NDIS scanner

Security Task Manager shows all running Windows tasks including embedded hidden functions (e.g. keyboard or browser monitoring, autostart entry). A unique security risk rating indicates the likelihood of the process being potential spyware, malware, keylogger or a Trojan.

MalwareBytes detects and removes sleeping spyware, adware, trojans, keyloggers, malware and tracking threats from your hard disk. Ideal supplement to Security Task Manager.

SpeedUpMyPC scans, cleans, repairs and optimizes your computer.

Other processes