Click here for AnswerPool.com Home page


Google

    AnswerPool.com  Hop To Forum Categories  Computers  Hop To Forums  Security Issues    SecThought.e Virus (Trojan Alert!, ARG) (15 Replies)

Moderators: Dwight
Go
Post
Find
Notify
Tools
Reply
  
  Login/Join 
Bronze Enthusiast
Posted
Ok, I have found SecThought.e on my computer. I have tried various methods, and I cannot get it off! Any help would be appreciated.
*****************************************************************
07-06-04, 11:22 PM
bedstor
Try this... got this off the Wilders security boards (link to SpywareBlaster)

quote:... that folder "Temporary Internet Files" contains the files that are downloaded to your computer when you surf the Net. sometimes opening a site might cause this download and trigger the alarm. its also possible that some malicious file is running in your memory which is trying to download another file. empty that "Temporary Internet Files" folder and look for a file named LOADER.EXE or STCLOADER.EXE in your memory. if it exists then remove it from the memory. search your computer for that file and delete it. open registry and delete the entry of this file from autostart.


and Delete cookies then check if cookie called 'install[1].exe' is present? This is possibly the trigger? FrownRoll Eyes Delete this
Here is my full search: 358 hits Smile So there must be a good solution in this lot somewhere? Roll Eyes
*****************************************************************
07-06-04, 11:59 PM
mystery250
Don't know if this is related to this virus or not, but when I go to certain pages, like Yahoo games, or a few ebay pages, all of the internet explorer pages close! Annoying, can't do much.
*****************************************************************
07-07-04, 09:18 AM
bedstor

quote:Originally posted by mystery250:
Don't know if this is related to this virus or not, but when I go to certain pages, like Yahoo games, or a few ebay pages, all of the internet explorer pages close! Annoying, can't do much.


Mystery
If you have a firewall and it stops these "events" it often logs the hits.
So if I visit a music.video site My firewall is bombarded with Kazaa,I have 300+ hits recorded for this last week average 20 per hour
Move to another site the bombardment may be from an adult dialler which tries several Ports to get in over a period of time.

Why not install one?There are several freeware firewalls available.
They aren't 100% Roll Eyes but they do deflect some pests. Smile
And of course you can keep track of what is trying to "look" at your computer Smile

Just found this site has lots of info/comparisons and download links also advice
on firewalls, especially the free ones also links to spyware malware trojan detection prevention and removal sites Smile
www.firewallguide.com/freeware.htm
Worth a Cool Cool? Razz
Worth saving to Favorites Smile
*****************************************************************
07-07-04, 09:21 AM
mystery250
Already use McAfee firewall. Also, I do not see anything about the event in the logs.
*****************************************************************
07-07-04, 10:59 AM
bedstor
So we are stumped Frown
Chances are slim you'll get it again unless you visit the same site often? Roll Eyes
Concentrate on getting rid of it for the moment.
If you did know the sites address you could put it in the Banned IP list then things will be back to "normal" Smile
You haven't lowered the firewall setting below Standard? Roll EyesI imagine the hit count is affected by what setting is used,and events not recorded Frown.Worth checking out.
Also the tab (System Services) under Options should have NO items ticked OK? Roll Eyes
My hit count today(so far..) over 6 hours is 172. Have had 1000+ hits logged if on some music sites Eek
*****************************************************************
07-07-04, 11:40 AM
mystery250
Today 0
this week 13
this month 42
*****************************************************************
07-07-04, 11:43 AM
mystery250
Worse thing right now is, why the heck those windows are closing when I visit certain sites.
*****************************************************************
07-07-04, 12:39 PM
bedstor

quote:Originally posted by mystery250:
Worse thing right now is, why the heck those windows are closing when I visit certain sites.


Check your Internet Explorer settings
set privacy to Medium and security to Medium-Low
And have you any NetNanny software installed that locks all the settings on High as default Frown Hence your "blackouts" either reduce settings as far as you can or uninstall? Roll Eyes
The other thing is of course a popup stopper which is blocking too many sites Frown.Suggestion. Find the "Allow this site" list and Put your pages on it works as before but allows the site to display the Popup Smile
*****************************************************************
07-07-04, 01:17 PM
mystery250
Nope. Changing those did not help. Plus, I have tried those sites with my firewall/popup blocker/antivirus off, just to see if that was the cause.
*****************************************************************
07-07-04, 10:30 PM
cswchan
Go to Start and right click to open the menu -click Explore
Follow the path of each file, for example C:\WINDOWS\TEMP\I4120.TMP

you are looking for the file 14120.TMP - once you've found it, just highlight this file and delete it. Do the same for the others...OR, just go to the Start /Search /For Files or Folders option and type in the name of the file (NOT the name of the virus) but the actual name of the file - and delete the file from here.
*****************************************************************
07-07-04, 10:40 PM
cswchan
I forgot... here's a link to TRENDMICRO 'S site.... it's a online virus checker/remover. There's also a FREE Antivirus program by AVG ANTIVIRUS.

Good Luck
*****************************************************************
07-07-04, 10:47 PM
mystery250
Couldn't find that file, already use AVG, as stated above.
*****************************************************************
07-07-04, 11:18 PM
cswchan
Sorry.... but nowhere in any of the above posts did it say that you were already using AVG. Which is why I suggested it. Have you tried using SPYBOT 1.3 or AdAware 6.181
make sure you tweak the Adaware by going into Settings/Tweak/Cleaning Engine/Automatically try to unregister. Also under Scanning, Scan within archives, Memory & Registry, make sure you've got them all checked.
Again, Good Luck.
*****************************************************************
07-07-04, 11:29 PM
mystery250
Oh, thought I did, apologies. I have AdAware, and haved tried spybot. Seems like I have tried everything, still see it when I scan with AVG.
*****************************************************************
07-07-04, 11:44 PM
cswchan
Open up the AVG program, click on "Program", then select "AVG Virus Vault", Delete any files found there. If you don't immunize or delete any of the files, AVG will continue to find the virus. I fixed a friend's computer today that AVG kept finding a certain Trojan & finally went into the vault, deleted ALL the infected files, ran AVG again & found NO MORE VIRUSES.

This message has been edited. Last edited by: DorianGreyed,
 
Posts: 679 | Location: Pooler, GA, USA | Registered: 08-22-03Reply With QuoteEdit or Delete MessageReport This Post
 Previous Topic | Next Topic powered by eve community  
 

    AnswerPool.com  Hop To Forum Categories  Computers  Hop To Forums  Security Issues    SecThought.e Virus (Trojan Alert!, ARG) (15 Replies)

© 2002-2008 AnswerPool.com



Visit DiscussionPool.com!