Sponsor for PC Pals Forum

Author Topic: Help! Sokets fries my brain.  (Read 882 times)

Offline fizic

  • New Member
  • *
  • Posts: 4
Help! Sokets fries my brain.
« on: June 16, 2005, 11:52 »
OK you've probably done this to death but I need help.

For the past couple of weeks I've been getting attacked by the sokets de trois v1 trojan. I figure it's got to be some kind of spyware attatchment or something because it's always the same sender.

I tried an anti-spyware scan with Counterspy which I found to be quite thorough but despite clearing all spyware I'm still getting attacked.  :cry:
Any thoughts or suggestions?  :idea:

I'm running XP pro.

Cheerz

fizic

Offline Clive

  • Administrator
  • *****
  • Posts: 75153
  • Won Quiz of the Year 2015,2016,2017, 2020, 2021
Help! Sokets fries my brain.
« Reply #1 on: June 16, 2005, 12:50 »
Are you using Norton's by any chance fizic?  Oh, and  :welcome:   :laugh:

Offline fizic

  • New Member
  • *
  • Posts: 4
Help! Sokets fries my brain.
« Reply #2 on: June 16, 2005, 13:01 »
Yes. Norton Antivirus & Internet Security. That's all that's blocking it.

fizic

Offline Sandra

  • Ultimate Member
  • *******
  • Posts: 12155
Help! Sokets fries my brain.
« Reply #3 on: June 16, 2005, 13:04 »
This is a little information about that particular trojan :

http://www.glocksoft.com/trojan_list/Sockets_des_Troie.htm

It appears that TCP port 30303 is the main one that it tries to get in on.
If you have a firewall or a router that allows specific port blocking then I would check that its blocked that one and the others in the list on that webpage.

If you are on a static or a sticky dynamic IP then theres not a lot you can do to stop it other than close down your pc for a short time and hope that it doesnt find your IP again.
If you have a dynamic IP then just rebooting should assign a different IP for you and stop the attacks.

The main thing is that you are being notified of the attack so its not actually getting in to your PC  :)

If the IP address is always the same then you could contact the ISP and tell them which IP address is attacking you and they should be able to sort it out from their end, unless they are using a proxy server or hiding their true IP in some way  :(


Show unread posts since last visit.
Sponsor for PC Pals Forum