View Full Version : ntos.exe trying to install itself in a loop
Hello,
I have a problem dunno how to handle.
Spybot 1.5.2 has spotted a change of registry (C:\WINDOWS\system32\ntos.exe) which I have refused.
Now it keeps on asking me in a loop and wont stop, even after a reboot.
Can anyone please help me?
EDIT:
Hello again,
I managed to fix the problem, installed another program that is looking for spyware and while Spybot was struggling with this trojan (ntos.exe), I ran the other program which deleted it.
After rebooting, it seems to be fixed :)
Hope this helps.
drragostea
2008-07-09, 01:02
Hm.
--
http://www.symantec.com/security_response/writeup.jsp?docid=2007-040208-5335-99&tabid=2
--
Does Spybot-SD still detect it?
No, it doesn't detect it anymore.
But I am not sure if it was even installed, since I got the alert from Spybot and I denied access. My problem was, that after denying access, Spybot kept asking me over and over if I would accept or deny (that's why I said it was in a loop).
After reading your post, I manually checked the registry keys mentioned in your link. Couldn't find any of those modified registry keys.
So I guess that everything is ok.
drragostea
2008-07-09, 23:44
I'm assuming Spybot does not prompt you anymore (Teatimer) about the process.