ntos.exe trying to install itself in a loop

[Techna]

Hello,
I have a problem dunno how to handle.
Spybot 1.5.2 has spotted a change of registry (C:\WINDOWS\system32\ntos.exe) which I have refused.
Now it keeps on asking me in a loop and wont stop, even after a reboot.
Can anyone please help me?

[Techna]

EDIT:
Hello again,
I managed to fix the problem, installed another program that is looking for spyware and while Spybot was struggling with this trojan (ntos.exe), I ran the other program which deleted it.
After rebooting, it seems to be fixed
Hope this helps.

[drragostea]

Hm.
--
http://www.symantec.com/security_res...335-99&tabid=2
--

Does Spybot-SD still detect it?

[Techna]

No, it doesn't detect it anymore.
But I am not sure if it was even installed, since I got the alert from Spybot and I denied access. My problem was, that after denying access, Spybot kept asking me over and over if I would accept or deny (that's why I said it was in a loop).
After reading your post, I manually checked the registry keys mentioned in your link. Couldn't find any of those modified registry keys.
So I guess that everything is ok.

[drragostea]

I'm assuming Spybot does not prompt you anymore (Teatimer) about the process.