ntmsidx and ntmsdata.bak

ben welch · Joined: 20 Jan 2006 Posts: 1

I came in this morning and a couple of programs had quit working, I searched for files that had been changed today, and ntmsidx and ntmsdata.bak had been modified an hour earlier. I googled them and it looks like it may be some type of spy. Is there a way to see who is spying, or where the stuff is going?

GTO · Joined: 15 Nov 2005 Posts: 1519

Hi, Ben. Welcome to 2-Spyware.com forums!

Both ntmsidx and ntmsdata.bak files can be either legitimate system components or parts of certain keyloggers such as Spector. To figure out, are these files malicious or not, you have to know in which folder they reside. Can you provide this folder's name?