Forum Home
Press F1
 
Thread ID: 28507 2002-12-21 21:08:00 exe file jonmac (2609) Press F1
Post ID Timestamp Content User
108039 2002-12-21 21:08:00 I have a file called VPROT34 EXE which was trying to dial out.Does anyone know about it or how to get rid of it.Virus scan says it is not a virus. jonmac (2609)
108040 2002-12-21 21:27:00 I can find no reference to it anywhere myself.

Check your settings in Dialup/networking and make sure you have it set for Never Dial A Connection and see if that helps.

Start > Settings > Dialup Networking > right click your dialup and select Properties > go to the Dialing Tab and change as required to Never Dial A Connection and This is My Default Connection > Ok/Apply.


Or

On your Internet Explorer Toolbar > Tools > Internet Options > Connections and then the settings as above, in this window you will also see any other connections available from your computer, make sure you have the right dialup selected as the default one.
duckyduck (197)
108041 2002-12-21 21:37:00 sounds like a program that you downloaded.

where in your system is this program?
robsonde (120)
108042 2002-12-21 21:43:00 In addition I would also make sure it is not in the startup and therefore running in the background.

Start > Run > type in msconfig > Enter > go to the StartUp tab and then scroll through the list of entries there and make sure it is not ticked to load with the computer, if it is untick > Apply/Ok and see if that helps.

If you want to know what all those other items are in the startup and whether you need them or not, look at the following links.

www.pacs-portal.co.uk

www.answersthatwork.com
duckyduck (197)
108043 2002-12-21 22:09:00 Sounds like it is spyware you have inadvertantly installed... have you downloaded Kazaa recently?

Either way, try installing Ad-Aware (www.lavasoftusa.com/), run a full scan and then see what happens. I'd also uninstall Kazaa, and find a Spyware free (http:) version of Kazaa.

Let us know how you get on.

Lo.
Lohsing (219)
108044 2002-12-21 23:23:00 Having a look through Google, it seems VPROT was a program written by Fridrick Skulason some years back. His FPROT was a DOS based antivirus program fairly well used a few years back - it may still be for all I know.
Whether the VPROT34 you have is related to this I don't know, I don't know what it is doing on your system or why it should be trying to dial out - doing the latter seems like a trick things like GATOR are fond of.
If it's spyware from KAZAA I would have thought it would be more widely known and reported.
I don't have a file named VPROT anywhere on my own computer. My personal inclination would be to use your "find" or "search" facility and just delete it. If manifestations of it still occur I would (depending on your OS) check win.ini or sytem.ini or registry and see just what its function seems to be.
rugila (214)
108045 2002-12-21 23:56:00 Actually, if you change it to "Vprot32.exe" and do a search for that... well, here's (securityresponse.symantec.com) what Symantec have to say...

Lo.
Lohsing (219)
108046 2002-12-22 02:04:00 Hi . The fact that you detected it's activity suggests that you're using a firewall - naturally you should make a rule to block both incoming and outgoing access from this . exe, to start with .

I've heard one report of it being a RAT (remote access trojan), which is installed from some downloads, ie screensavers etc . Apparently it disables detection from virus scanners, so is effectively invisible .

My suggestion would be to run regcleaner and find and delete every reference to it (after backing up your registry first) and/or run an online anti-virus scan, such as Trend Housecall .
Greg S (201)
108047 2002-12-22 04:51:00 I looked at what symentec said.I did have a trojan horse called back door litmus.This file must be part of it.I cant delete it as it says windows is using it.I found it with zone alarm.AVG antivirus fixed the problem but that file is still there. jonmac (2609)
108048 2002-12-22 22:18:00 I have ad-aware on.I think it is part of a trojan horse virus I had.It wont delete as it says windows is using it.Symantec has one called VPROT32.exe and this appears similar.I now have to get rid of it jonmac (2609)
1 2