What is "TFTP"?

26 Mar 2005 2:31 PM

Warren C. E. Austin

Is the file "tftp.exe" a valid MICROSOFT Windows Utility; and if it is,
I assume there must have been a purpose for its having been created;
therefore, and most importantly, short of deleting the file, how do I
shut the damn thing off?

I use neither Internet Explorer, nor Outlook (Express), yet this utility
appears to almost function on its own relying on the Trident-engine
subsystem of the Windows OS, and lately I've been plagued by instances
of Virii activity being driven through this utility. Admittedly my
AntiVirus Software is catching them; but it becoming a real pain, and
has only been an apparent phenomenon within the past few months.

Warren C. E. Austin
Toronto, Canada

26 Mar 2005 2:30 PM

William W. Plummer

Warren C. E. Austin wrote:

> Is the file "tftp.exe" a valid MICROSOFT Windows Utility; and if it is,
> I assume there must have been a purpose for its having been created;
> therefore, and most importantly, short of deleting the file, how do I
> shut the damn thing off?
>
> I use neither Internet Explorer, nor Outlook (Express), yet this utility
> appears to almost function on its own relying on the Trident-engine
> subsystem of the Windows OS, and lately I've been plagued by instances
> of Virii activity being driven through this utility. Admittedly my
> AntiVirus Software is catching them; but it becoming a real pain, and
> has only been an apparent phenomenon within the past few months.
>
> Warren C. E. Austin
> Toronto, Canada

http://www.webopedia.com/TERM/T/TFTP.html

26 Mar 2005 2:45 PM

David H. Lipman

Show quote Hide quote

From: "Warren C. E. Austin" <warrenceaus***@netscape.net>

| Is the file "tftp.exe" a valid MICROSOFT Windows Utility; and if it is,
| I assume there must have been a purpose for its having been created;
| therefore, and most importantly, short of deleting the file, how do I
| shut the damn thing off?
|
| I use neither Internet Explorer, nor Outlook (Express), yet this utility
| appears to almost function on its own relying on the Trident-engine
| subsystem of the Windows OS, and lately I've been plagued by instances
| of Virii activity being driven through this utility. Admittedly my
| AntiVirus Software is catching them; but it becoming a real pain, and
| has only been an apparent phenomenon within the past few months.
|
| Warren C. E. Austin
| Toronto, Canada

Trivial File Transfer Protocol. It is like FTP (File Transfer Protocol) except it uses UDP
rather than TCP and it doesn't require authentication. It also doesn't have have the
fascilities to very the file being transferred or if the destination file already exists.
Note that some implementations of TFTP *may* overcome some of these factors.

Now TFTP does NOT "...function on its own...". If your Win2K platform is performing TFTP
w/o your knowledge or direction then it is *very* likely that your PC has been compramised
and your PC is infected !

Dump the contents of the IE Temporary Internet Folder cache (TIF)

start --> settings --> control panel --> internet options --> delete files

1)    Download the following four items...

         McAfee Stinger
         http://vil.nai.com/vil/stinger/

         Trend Sysclean Package
         http://www.trendmicro.com/download/dcs.asp

         Latest Trend Pattern File.
         http://www.trendmicro.com/download/pattern.asp

         Ad-aware SE (free personal version v1.05)
         http://www.lavasoftusa.com/

Create a directory.
On drive "C:\"
(e.g., "c:\New Folder")
or the desktop
(e.g., "C:\Documents and Settings\lipman\Desktop\New Folder")

Download Sysclean.com and place it in that directory.
Download the Trend Pattern File by obtaining the ZIP file.
For example; lpt518.zip

Extract the contents of the ZIP file and place the contents in the same directory as
sysclean.com.

2)     Update Ad-aware with the latest definitions.
3)     Reboot your PC into Safe Mode and shutdown as many applications as possible
5)     Using Trend Sysclean, Stinger and Ad-aware, perform a Full Scan of your
        platform and clean/delete any infectors/parasites found.
        (a few cycles may be needed)
6)     Restart your PC and perform a "final" Full Scan of your platform using the three
        utilities; Trend Sysclean, Stinger and Ad-aware

* * Please report your results ! * *

--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm

27 Mar 2005 2:21 AM

George Hester

Yes it is. Why it is a required system file is something inquiring minds want to know. Namely this one. I have made tftp.exe inaccessible to Everything and Everyone on my system. Why? Because it is used by SQL Hackers to upload crap to our machines. Hence nothing can access and I have nipped that issue in the butt. But let me tell you all Service Packs for Windows 2000 don't like what I did one bit.

--
George Hester
_________________________________

Show quoteHide quote

"Warren C. E. Austin" <warrenceaus***@netscape.net> wrote in message news:e#4MA4gMFHA.244@tk2msftngp13.phx.gbl...
> Is the file "tftp.exe" a valid MICROSOFT Windows Utility; and if it is,
> I assume there must have been a purpose for its having been created;
> therefore, and most importantly, short of deleting the file, how do I
> shut the damn thing off?
>
> I use neither Internet Explorer, nor Outlook (Express), yet this utility
> appears to almost function on its own relying on the Trident-engine
> subsystem of the Windows OS, and lately I've been plagued by instances
> of Virii activity being driven through this utility. Admittedly my
> AntiVirus Software is catching them; but it becoming a real pain, and
> has only been an apparent phenomenon within the past few months.
>
> Warren C. E. Austin
> Toronto, Canada