PDA

View Full Version : They Hijacked me - help!



nikosgreekos
08-23-2005, 08:55 PM
Just recently (days ago) I'v been getting hit every 5 minutes it seems where programs are trying to access my computer. Can't seem to end this mayhem, even by checking off where it says " do not show this window again " it comes back to haunt me. I am running Sygate personal Firewall. It doesnt matter what I'm doing with my computer, even when I check off " BLOCK ALL TRAFFIC"
in my firewall, the programs still try to access it but Sygate blocks it. My question is: How do I terminate this problem? Please don't say "Format".

Some of the programs that are trying for access are: ntsfprotect.exe, xpfirewall.exe

Any suggestions or help please.

Btw .. I'v already ran SPYBOT and AD-aware and did a complete system scan on my Virus detector and cleaned/healed whatever was found.

Frogy
08-23-2005, 09:43 PM
I believe you mean ntfsprotect, most recent info here. This is a spybot worm. Scroll down the page and see if you have any of the other files that they mention the presence of.

http://www.acns.colostate.edu/aspx/www.acns/virus_8_20_05.html

xpfirewall here (MYTOB worm)

I'm looking for a free removal tool

edit = here is one http://www.pspl.com/download/cleanmt.htm

It would seem that whatever security you are running may be out of date. What are you using currently?

nikosgreekos
08-24-2005, 07:14 AM
I believe you mean ntfsprotect, most recent info here. This is a spybot worm. Scroll down the page and see if you have any of the other files that they mention the presence of.

http://www.acns.colostate.edu/aspx/www.acns/virus_8_20_05.html

xpfirewall here (MYTOB worm)

I'm looking for a free removal tool

edit = here is one http://www.pspl.com/download/cleanmt.htm

It would seem that whatever security you are running may be out of date. What are you using currently?

Whatever Firewall came with my Router. It's actually not hooke up right now since it got cooked during the storm last week but it was running during the time. Also using AVG Virus Scanner.

Frogy
08-24-2005, 07:21 AM
If you aren't using your router, at least activate the xp firewall or download and install ZoneAlarm or some other firewall. Without one you're just asking for more trouble.

AVG is good but are you keeping the database current? What are you using for spyware? You should at least be running Microsoft's Antispyware and recommend at least one other. If using IE I'd recommend SpywareDoctor. Spybot S&D and Spywareblaster are also great as resident. Again, you must keep their databases up to date. Most offer automatic updates.

Cleaning out the garbage is short term if you don't block new installations from the net.

nikosgreekos
08-24-2005, 07:31 AM
I believe you mean ntfsprotect, most recent info here. This is a spybot worm. Scroll down the page and see if you have any of the other files that they mention the presence of.

http://www.acns.colostate.edu/aspx/www.acns/virus_8_20_05.html

xpfirewall here (MYTOB worm)

I'm looking for a free removal tool

edit = here is one http://www.pspl.com/download/cleanmt.htm

It would seem that whatever security you are running may be out of date. What are you using currently?

It's basically the program " ntsfprotect.exe " thats contantly trying to access my network as well as " xpfirewall.exe " . Thanks for the link on the WORM scanner, used it but found none.

mitch
08-24-2005, 08:19 AM
This might help...
http://www.bleepingcomputer.com/forums/How_to_remove_a_Trojan_Virus_Worms_or_other_Malwar e-tut101.html