by bently - 4/16/08 7:12 AM
WINPATROL keeps popping this up on my computer...
""A new auto startup program has been detected.
This program will run each time you login or restart your machine.
Do you approve the additon of this program startup setting?
Press YES if this program is expected and acceptable.
Microsoft Corporation version 5.1.2600.2180 ""
I am clicking DENY each time, but it keeps popping up every few minutes.
Did an ADVANCED SEARCH on CNET forums for CTF LOADER, this is what came up.
"W32/Agobot-JS is a worm that spreads to remote shares with weak passwords.
The worm copies itself as soundman.exe to the Windows system folder "
Using win XP sp2, auto update.
Do NOT have any MS OFFICE programs on my computer.
ALSO I am getting a lot of UNKNOWN various sites wanting to access my computer, I keep clicking DENY, but some are very persistant.
Latest PERSISTANT popup was from SHAWCABLE.NET, wanting to send UDP datagram to port 1027 owned by Kerio personal firewall.
Appreciate any help on this.