I am being hit by a trojan called

rovingcowboy · Post by **rovingcowboy** » Wed Jul 28, 2004 11:49 pm

Sec Thought.E

it is a version of the .B one by the same name.

it is only hitting my windows ME computer so how would i stop it from getting in?

any ideas would be great. as it has hit the computer hard enough now for 3 times that each time it has crashed the computer and gone though the newest version of zone alarm

Archived topic from Iceteks, old topic ID:2516, old post ID:21049

VictorEM83 · Post by **VictorEM83** » Thu Jul 29, 2004 12:11 am

Do you have an Anti-Virus?

Archived topic from Iceteks, old topic ID:2516, old post ID:21051

Wren · Post by **Wren** » Thu Jul 29, 2004 10:28 pm

Do an online scan to see if you have any open ports.

http://scan.sygate.com/stealthscan.html

If it actually got into ME, it may be backed up in your restore feature.

Try a few different online AV scanners also, they're not all 100%.

Archived topic from Iceteks, old topic ID:2516, old post ID:21062

rovingcowboy · Post by **rovingcowboy** » Fri Jul 30, 2004 1:40 am

no it is not backed up as it keeps getting taken out.

yes i have a good av program i use avg free version, that is what keeps finding it.

i just got hit with it again on the winMe computer.

they came out with a new update for zone alarm so this time it did not crash zone alarm but it still got in?

it does the hacker no good as it crashes the computer when it gets in so i reset and unplug the phone cord so theres no way it can get out again, then i run the av and get rid of it,

so why does this jerk keep trying to get in? its a winMe computer with a few games on it and lots of songs. he cant want my songs as they are mostly old and country. we dont use the computer for anything else, my joystick burned out so i cant even play online with it anymore.?

just this stupid jerk keeps doing this.

Archived topic from Iceteks, old topic ID:2516, old post ID:21065

Wren · Post by **Wren** » Fri Jul 30, 2004 12:29 pm

One other suggestion, get a free trial of Zone Alarm Pro which had a feature called, "Hacker ID". It will let you report the IP address of hackers back to their ISP.

http://download.zonelabs.com/bin/promotions/zap/alerts.htm

Archived topic from Iceteks, old topic ID:2516, old post ID:21067

Cold Drink · Post by **Cold Drink** » Sat Jul 31, 2004 1:46 am

First, no true hacker would do such a thing. Of course, the symantics could be argued for days without benifit, so I'll leave that part at that.

Most likley, one of two things is happening:
- You've allowed some program/service (probably one you don't need anyway) through your defenses and you keep getting re-infected by another machine / scanner.
- The malicious code has infected / replace key system files that it can't be removed from in a predictable way.

If its the former, you need to tighten your defenses. If its the latter, you're best off wiping everything out and starting clean.

Unfortunalty, there is no real security in the Windows 9x line, which includes ME. This makes it extremely difficult to prevent the spread of malicious code once it has come in contact with your machine.

I cannot give you more specific information at the moment because the anti-virus industry still hasn't standardized its naming procedures. What AVG calls Sec Thought.E very well may have a half dozen other names. I can find no reliable information for "Sec Thought.E".

Archived topic from Iceteks, old topic ID:2516, old post ID:21069

rovingcowboy · Post by **rovingcowboy** » Sun Aug 01, 2004 5:41 pm

i have them wren but thanks

thanks i have not been able to find any lengthy info on it either.

i do not think it is any program i used before on that computer as it has never got in on this xp and it has never happened before on that win me computer and it still does not happen when i use the ie browser on that winMe.

it only started after i installed the e..lyrics program and it only happens with i use the e..lyrics program with out using the ie.

i used it on friday for 10 hours to find all the rest of the lyrics i needed but i did not use ie. and i never got it then?

which makes me think it is some one watching the servers for activity by the e..lyrics program. or maybe any server? but the times it came in it crashed right through zone alarm so i told them what was going on and what avg called it then two days later there was a new zonealarm update, on thursday i did use the the e..lyrics program and the trojan crashed in again but this time it did not crash the zonealarm just got in to the computer

i do get rid of the file each time and avg never finds any left over files for the trojan but it just keeps coming in.

but since it did not on last friday i really think the hacker is sitting some place and watching the servers? because the trojan does not come in to the computer from the same database all the time it is coming in from different ones each time and that tells me it is on different servers each time..

i have all the lyrics caught up on that computer now i will have to get the new ones i add in and i will do that from this xp computer since it did not get hit by the trojan then i can move them from here.

thanks for the help and atleast this message is out so others can find it

Archived topic from Iceteks, old topic ID:2516, old post ID:21070