Cant install xp sp3 NDIS.sys is open or in use !!!!

When I try to update windows xp sp2 to sp3 I get the ndis.sys is open or in use by another application error. I know that ndis.sys should only be in the servicepackfiles\i386 and system32\drivers folder. correct me if Im wrong.
So I did a search for Ndis.sys and what I found that it is in those 2 folders posted above but it is also located at
So my heres my question is that right or should I delete that file?

Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

I would suggest scanning for malware.  download, update and run ccleaner, malwarebytes and superantispyware.  Then try upgrading again.  
MaxonxAuthor Commented:
Thanks but I already did that..even ran sfc\scannow. running MBA atm again to see what it finds.
did you run all 3 programs above?  have you tried running superantispyware in safe mode?  do you have an up to date antivirus program?  you may want to download kaspersky or avg and run those as well.  
10 Tips to Protect Your Business from Ransomware

Did you know that ransomware is the most widespread, destructive malware in the world today? It accounts for 39% of all security breaches, with ransomware gangsters projected to make $11.5B in profits from online extortion by 2019.

MaxonxAuthor Commented:
avira antivir is the av and yes ran them all..
do you have another drive attached to this computer?  if so disconnect it, reboot and try the update.  Have you tried updating in safe mode?  
MaxonxAuthor Commented:
No only one drive and avg sucks dont ever recomend that
Copy ndis.sys from another machine onto a usb device
Boot to Knoppix live cd and replace Ndis.sys in:

A virus called protector.c infects it.
Then run Mbam afterwards and Nod32 online scanner
Nod online scan


Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Microsoft Legacy OS

From novice to tech pro — start learning today.