Re: Need help with NTAP32SMS.EXE- Mission Critical. new Virus?

From: Craig n (noway_at_getmyemail.com)
Date: 04/27/05


Date: Wed, 27 Apr 2005 09:34:20 -0500
To: Craig N <"Craig N"@discussions.microsoft.com>

Craig N wrote:
> I have a virus hosing one of my critical servers, and it had also nailed my
> laptop. Symptoms are 99% processor usage, and loss of internet connectivity.
> I was able to remove it from my laptop, which has XP SP2, and al the security
> updates, along with Norton AV. Now a srver appears to be infected, and it is
> a 2000 server with mcaffee. At first, mcaffee was taxing the processor at
> 99%, stuck in a starting mode, and this morning found that ntap32sms.exe was
> running on it.
>
> I cant find ANYTHING regarding this process, except I can google ntap32.exe
> and get back trojan info. AV wont pick it up, so I assume this is new. Does
> anyone have any info on this?
>
> Also, picking processes called msdirectx.sys, and nviload32.

Oh, and after I remove the files from system32 and prefetch, and destroy
the registry entries, they are right back the next boot. Where is it
coming from?



Relevant Pages

  • Need help with NTAP32SMS.EXE Virus- ASAP - Mission Critical
    ... I have a virus hosing one of my critical servers, ... I was able to remove it from my laptop, which has XP SP2, ... and it is a 2000 server with mcaffee. ... ntap32.exe and get back trojan info. AV wont pick it up, ...
    (microsoft.public.windows.server.security)
  • Need help with NTAP32SMS.EXE- Mission Critical. new Virus?
    ... I have a virus hosing one of my critical servers, and it had also nailed my ... I was able to remove it from my laptop, which has XP SP2, and al the security ... mcaffee was taxing the processor at ... and get back trojan info. AV wont pick it up, so I assume this is new. ...
    (microsoft.public.win2000.security)
  • ltimg.dll in system32 folder
    ... Whenever my Mcaffee scan hits this file it ... gets jammed up and locks up my laptop. ...
    (microsoft.public.windowsxp.help_and_support)