(Resloved) "Teefer" Is this a virus? Then my PC is infected.

My PC Configuration:
P III 550 MHz, Win98SE, 128 MB RAM, 20GB HD, on board sound and display.

I have had a problem sometimes back of net connection bandwidth. My dial-up adapter used to connect but after connection, there was virtually no bandwidth. A few hundred bytes would be sent and received and things will stop right there.

When nothing worked, I removed all the network adapters and protocols and re-installed Win98SE on top of the existing installation (even that was Win98SE). This generated a few errors regarding teefer.vxd and would refuse to start except in safe mode.

In safe mode I went ahead and deleted an entry for this Teefer and to my surprise, Win98SE started after a couple of errors initially. Now it doesn't give me any errors and starts normally, but creates a key by the name of Teefer under HKEY_LOCAL_MACHINE > System > CurrentControlSet > Service > VXD. If this key is present, my net connection is as dead as a dodo. If I delete this key, it becomes normal. But this key gets created in the registry everytime I start my machine.

I have scanned my system with updated Norton AV as well as updated AVG and they haven't reported any virus. But is this a new virus? There is no other apparent abnormal activity.

Also, my PC cannot browse the network (LAN of 4 stand-alone PCs with a hub and LAN-cards). It just keeps telling me that its unable to do so. All the wires are connected, LAN card drivers and LAN protocols are installed. Whever my PC is on, the hub shows that my PC is on with a small green Led Indicator. I am not behind any firewalls.

I am totally confused.

Here's a link to my original problem posted at TSG forums.
http://forums.techguy.org/showthread.php?s=&postid=691252#post691252

 

I asked in your other post if the Teefer in question was the Sygate winsock uninstaller from their tech support. Have you found this vxd and right clicked to check the properties so you can see if a company name is available? Do you use any sygate stuff (such as their office network or firewall)?

 

Looks like it's part of sygate firewall

http://forums.sygatetech.com/search...archid=56329&sortby=forum&sortorder=ascending


http://forums.sygatetech.com/showthread.php?s=&threadid=1934

 

You guys seem to have hit the bull's eye!! I have Sygate Personal Firewall installed in my PC. I run it as and when necessary and it doesn't run every time I start my PC. But something called SMC gets executed from the same folder as Sygate so obviously its something related to it. I disabled it and Teefer key no longer gets created in the registry!!

I will have this thread marked as resolved and proceed with the earlier one.

Earlier when I tried, I could not find this file. But now, I could find it. I wonder how!! I have never been so dumb . It does mention the name of Sygate there.

Thanks a lot. I am relieved that its at least not a virus and my PC isn't infected!!

 

Closed thread and resolved requested by thread starter.

Dave