PDA

View Full Version : rogue TFTP files


MP
December 12th 03, 07:34 PM
Three TFTP files have popped up in my start folder!
I can't disable them using msconfig (they keep coming
back!!) Windows keeps trying to open them on start-up but
doesn't know how.

My norton Antivirus also refuses to be enabled on start up
(or even after to monitor email, etc.)though I did run a
scan and it came up negative.

It's kinda wierd.

D.Currie
December 12th 03, 07:34 PM
Sorry to say this, but those are symptoms people have been reporting if they
haven't installed the recommended security patch and the hackers have gotten
in.

Unlike a virus, there's no telling what the happy little hacker might have
done while he was crawling around in your computer, so it's hard to say what
to do next. If it was me, I'd format. You could patch the hole now, but
someone's already been there, so it's a bit late. Damage has been done.

"MP" > wrote in message
...
> Three TFTP files have popped up in my start folder!
> I can't disable them using msconfig (they keep coming
> back!!) Windows keeps trying to open them on start-up but
> doesn't know how.
>
> My norton Antivirus also refuses to be enabled on start up
> (or even after to monitor email, etc.)though I did run a
> scan and it came up negative.
>
> It's kinda wierd.

Kent W. England [MVP]
December 12th 03, 07:36 PM
I would take a shot at cleaning the system, but first I would disconnect
it from the Internet. If your AV software recognizes this "autorooter"
it may be able to remove it, or you can search your AV vendor web site
for manual instructions.

But if your system "phoned home" and the hacker gained access, there is
no telling what other stuff he installed to make sure you don't get your
system back. I'm not aware of any powerful "anti-rooter" programs that
work comparably to anti-virus and anti-spyware programs.

--
Kent W. England, Microsoft MVP for Windows



"jennifer" > wrote in
message ...

> And when you get through formatting, installing and
> updating, you would be well advised to, also, install a
> firewall. That's the best way to close the ports.
> Good luck
> jennifer
>
>
> >-----Original Message-----
> >Three TFTP files have popped up in my start folder!
> >I can't disable them using msconfig (they keep coming
> >back!!) Windows keeps trying to open them on start-up
> but
> >doesn't know how.
> >
> >My norton Antivirus also refuses to be enabled on start
> up
> >(or even after to monitor email, etc.)though I did run a
> >scan and it came up negative.
> >
> >It's kinda wierd.
> >.
> >

Google