NavScan32.exe not Norton

[Dave]

I recently upgraded to XP from ME. Everything went well
as I enabled the XP firewall but there seemed to be
trouble accessing the internet. Slow connection etc., and
then my ADSL went down. I switched to dial-up as I waited
for my ISP appointment (a week away). I then started
having trouble with my Mozilla browser starting on its own
as soon as my modem logged on. I tried to find out what
programs were porting through the XP Firewall but I was
unable to? I then reinstalled Sygate and as soon as I did
a program called NavScan32.exe wanted permission. As soon
as I denied it access I began receiving port scans. I
checked the internet and finally found something about it
on the Sophos
websitehttp://www.sophos.com/virusinfo/analyses/w32sdbotdo.
html. It listed it as W32/Sdbot-DO, it let's a remote
user access to my computer using IRC. Nothing I tried
found this virus... spyware checkers/Antivirus/online
scans. The XP Firewall didn't stop it. Why was it so
hard to find? I've never used any Norton products either.
Is XP that open to virus'. As soon as XP was live I did a
virus scan and found 18 little bugs. The only thing I did
was update XP at the Windows site. I'm wondering if I
should have upgraded at all. Just thought some of you
might want to know about this.

 

[Guest]

I have the same problem (though not from upgrading, I'm
not sure how I got this virus). How did you get rid of
it? AVG won't find it, and when I remove the registry
entries they put themselves back again a moment later.