Tftp520

Hi,
I have another interesting problem...I have a friend who's computer keeps getting a prompt at or around startup from "TFTP520" about a file can not be found. I am unable to find any info on TFTP520 and can not seem to find how to disable it. I was under the impression it's through port UDP but at this time I am unable to confirm that as any possibility. The computer is a Windows Xp and has (ComCast) cable for it's service provider. I'm lost as to where to look and why it's always popping up. Every time I go and disable it in Startup it re-appears. I looked around in the registry and still no luck there either. A real thumper. Your help will be greatly endorsed if anyone has a clue that I can search out...Thanks

 

TFTP - Trivial File Transfer Protocol, a idiot younger cousin of File Transfer Protocol (FTP). TFTP uses the User Datagram Protocol (UDP)and provides no security. Be an easy way for stuff to sneak in. But the 520 part is a puzzle if it is a TFTP thing.

And port 520 is normally a UDP thing but used by RIP (Routing Information Protocol).

Hmmmmm.

- What file is reported as missing?
- Current spyware scans been done?
- Event logs have any helpful errors or warnings?
- TFTP520 mentioned in the registry?
- Any good firewall software running?
- Msconfig show any unknowns running at startup?

If all else fails you might try running HiJack This and searching thru the log for bad stuff or post it to one of the security forums with experts who can usually sniff out problems. But they will expect a system as spyware/malware free as you can manage before generating a log for them to look at.

I do have to agree though that with TFTP520 following so closely on the heels of Belt.exe, you may be setting some sort of record for being handed strange critters to locate and kill.

 

Hi,
From what I have looked into your information is accurate and I thank you for it but trying to find out why it comes up at startup and locating it's source has been the issue. I apologize for giving the impression it followed on the heels of the other problem I inquired about (the virus "Belt.Exe) recently but it was popping up for several weeks prior, I'm just getting around to it now. I looked in startup and yes it's listed there but when unchecked it comes back again. I looked in the registry and could not see any thing there. It's not only puzzling but making the list of one of them annoying things for sure... I will continue on my search & destroy mission and let you know how things turn out as soon as I can find more difinitive ways to eliminate the little rascal...Thanks

 

I wasn't thinking that your belt.exe issue and this one were related. Just that you have gotten several interesting issues in a short period of time.

Have you done spyware scans with updated def files?

And you might get good information from running a Hijack This scan and a look at the log file it generates.

 

Hi,
No problem, sometimes I run my thoughts together and was not sure if this was one of those times. Anyways, yes is my answer to your questions. In the later part of this afternoon I will be stopping by that persons house to see if the problem is connected to TCP/IP filtering which may lead me to the UDP port and the TFTP520 issue. I came across information relating to our previous posts through Microsoft TechNet and for now it seems like the best shot or atleast I have a possible direction anyways. I will post back to you this evening on how I make out. Thanks for keeping in touch. Much appreciated. (In regards to the interesting problems I have come across in a short time, I agree. I will be posting another interesting one tonight that I am up against a tough challenge to finding a solution to as well)...

 

Hi,
I was able to remove the TFTP520 startup problem. It was listed is startup off of programs...Thank you everyone...Bye