I recently had an issue where a clients PC had become infected with a virus which was quarantined by the anti-virus software. Great, only the files that were quarantined were the virus itself and an infected NDIS.sys file plus all other backup copies of this file on the PC eg “the dll cache”.
I copied the NDIS.sys file from another PC which I knew was clean and placed it in the c:\windows\system32\drivers directory thinking I soon would be back up and running but as soon as it was replaced I received the following STOP Error.

After a bit of head scratching and a walk around the office, I found that after booting into Safe Mobe that the registry key entry for NDIS was missing causing the STOP error. So I copied the key from the working XP PC and imported into the damaged PC and it rebooted just fine.
To do this just copy the text below into notepad and save the file as a .reg file then put it on a USB key and while in Safe Mode double click the file to import it into the registry and then reboot.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NDIS]
“DisplayName”=”NDIS System Driver”
“ErrorControl”=dword:00000001
“Group”=”NDIS Wrapper”
“Start”=dword:00000000
“Type”=dword:00000001
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NDIS\MediaTypes]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NDIS\Parameters]
“ProcessorAffinityMask”=dword:ffffffff
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NDIS\Enum]
“0″=”Root\\LEGACY_NDIS\\0000″
“Count”=dword:00000001
“NextInstance”=dword:00000001