T.exe

  • Thread starter Thread starter Joseph Sullivan
  • Start date Start date
J

Joseph Sullivan

Quick question - there is a process called T.exe running on my machine
from startup (win xp). The executable exists in Documents and
Settings in my daughter's folder area. It opens up TCP ports 2431 and
2433, which are associated with SQL Server (I don't have). Anybody
know what this executable does? Thanks

Joe
 
You probably do have a server running, it just isn't yours.
Google returned several hits for "t.exe" this MIGHT be the
most appropriate...
PestPatrol Pest Info - I-Worm.Ronoper.t
.... i-worm.ronoper.t.exe. Remove Files: Remove these files
(if present) with
Windows Explorer: i-worm.ronoper.t.exe. Research. File
Analyses: ...
www.pestpatrol.com/PestInfo/i/i-worm_ronoper_t.asp - 17k -
Cached - Similar pages



Also


Kaspersky Anti-Virus, Known
viruses:90777,Updated:11-06-2004:
6 of 9 Possible Viruses Found!

CODE
t.exe - infected by
TrojanDownloader.Win32.Small.ar
in[1].htm - infected by Exploit.HTML.Mht
JS SEEKER.reg - infected by Trojan.JS.Seeker.e
awi.exe - infected by
TrojanDownloader.Win32.INService
EXPLOIT[1].CHM - infected by
TrojanDownloader.VBS.Psyme.v
exploit[1].htm - infected by Exploit.HTML.Mht




AVG 7.0 Professional, virus base: 263.2.0, release date:
6/10/2004:
2 of 9 Possible Viruses Found!


CODE
t.exe - Downloader.Small.BG
awi.exe - Downloader.Inservice.F





--
The people think the Constitution protects their rights;
But government sees it as an obstacle to be overcome.


| Quick question - there is a process called T.exe running
on my machine
| from startup (win xp). The executable exists in Documents
and
| Settings in my daughter's folder area. It opens up TCP
ports 2431 and
| 2433, which are associated with SQL Server (I don't have).
Anybody
| know what this executable does? Thanks
|
| Joe
|
|
 
This is a good time to install Zone Alarm, it will block out
going as well as in-coming unwanted servers.
www.zonelabs.com a free version is available and works just
fine.

In program control you can block all server connections to
the Internet.


--
The people think the Constitution protects their rights;
But government sees it as an obstacle to be overcome.


in message | You probably do have a server running, it just isn't
yours.
| Google returned several hits for "t.exe" this MIGHT be the
| most appropriate...
| PestPatrol Pest Info - I-Worm.Ronoper.t
| ... i-worm.ronoper.t.exe. Remove Files: Remove these files
| (if present) with
| Windows Explorer: i-worm.ronoper.t.exe. Research. File
| Analyses: ...
| www.pestpatrol.com/PestInfo/i/i-worm_ronoper_t.asp - 17k -
| Cached - Similar pages
|
|
|
| Also
|
|
| Kaspersky Anti-Virus, Known
| viruses:90777,Updated:11-06-2004:
| 6 of 9 Possible Viruses Found!
|
| CODE
| t.exe - infected by
| TrojanDownloader.Win32.Small.ar
| in[1].htm - infected by Exploit.HTML.Mht
| JS SEEKER.reg - infected by Trojan.JS.Seeker.e
| awi.exe - infected by
| TrojanDownloader.Win32.INService
| EXPLOIT[1].CHM - infected by
| TrojanDownloader.VBS.Psyme.v
| exploit[1].htm - infected by Exploit.HTML.Mht
|
|
|
|
| AVG 7.0 Professional, virus base: 263.2.0, release date:
| 6/10/2004:
| 2 of 9 Possible Viruses Found!
|
|
| CODE
| t.exe - Downloader.Small.BG
| awi.exe - Downloader.Inservice.F
|
|
|
|
|
| --
| The people think the Constitution protects their rights;
| But government sees it as an obstacle to be overcome.
|
|
| | | Quick question - there is a process called T.exe running
| on my machine
| | from startup (win xp). The executable exists in
Documents
| and
| | Settings in my daughter's folder area. It opens up TCP
| ports 2431 and
| | 2433, which are associated with SQL Server (I don't
have).
| Anybody
| | know what this executable does? Thanks
| |
| | Joe
| |
| |
|
|
 
Regarding Zone Alarm - I run the free version (for the
past year) & also have Trend's PCCillin. A popup from
Zone Alarm said updated version, 5.0, was available. I
downloaded it but it refused to install unless I remove
PCCillin! Apparently, since they now have their own anti-
virus program, they are playing hard ball??
 
I run McAfee anti-virus and Zone Alarm installs without any
problem. The new version of ZA does monitor the anti-virus
program status optionally. Installing software with
anti-virus running could be the problem, some anti-virus
programs may see some software as a virus.

I doubt that Zone Labs has singled out any software because
the offer a similar product. My version of McAfee has a
firewall which I don't use, since I already have and prefer
the ZA interface.


--
The people think the Constitution protects their rights;
But government sees it as an obstacle to be overcome.


| Regarding Zone Alarm - I run the free version (for the
| past year) & also have Trend's PCCillin. A popup from
| Zone Alarm said updated version, 5.0, was available. I
| downloaded it but it refused to install unless I remove
| PCCillin! Apparently, since they now have their own anti-
| virus program, they are playing hard ball??
|
| >-----Original Message-----
| >This is a good time to install Zone Alarm, it will block
| out
| >going as well as in-coming unwanted servers.
| >www.zonelabs.com a free version is available and works
| just
| >fine.
| >
| >In program control you can block all server connections
| to
| >the Internet.
| >
| >
| >--
| >The people think the Constitution protects their rights;
| >But government sees it as an obstacle to be overcome.
| >
| >
| >"Jim Macklin" <p51mustang[threeX12]@xxxhotmail.calm>
| wrote
| >in message | >| You probably do have a server running, it just isn't
| >yours.
| >| Google returned several hits for "t.exe" this MIGHT be
| the
| >| most appropriate...
| >| PestPatrol Pest Info - I-Worm.Ronoper.t
| >| ... i-worm.ronoper.t.exe. Remove Files: Remove these
| files
| >| (if present) with
| >| Windows Explorer: i-worm.ronoper.t.exe. Research. File
| >| Analyses: ...
| >| www.pestpatrol.com/PestInfo/i/i-worm_ronoper_t.asp -
| 17k -
| >| Cached - Similar pages
| >|
| >|
| >|
| >| Also
| >|
| >|
| >| Kaspersky Anti-Virus, Known
| >| viruses:90777,Updated:11-06-2004:
| >| 6 of 9 Possible Viruses Found!
| >|
| >| CODE
| >| t.exe - infected by
| >| TrojanDownloader.Win32.Small.ar
| >| in[1].htm - infected by Exploit.HTML.Mht
| >| JS SEEKER.reg - infected by Trojan.JS.Seeker.e
| >| awi.exe - infected by
| >| TrojanDownloader.Win32.INService
| >| EXPLOIT[1].CHM - infected by
| >| TrojanDownloader.VBS.Psyme.v
| >| exploit[1].htm - infected by Exploit.HTML.Mht
| >|
| >|
| >|
| >|
| >| AVG 7.0 Professional, virus base: 263.2.0, release
| date:
| >| 6/10/2004:
| >| 2 of 9 Possible Viruses Found!
| >|
| >|
| >| CODE
| >| t.exe - Downloader.Small.BG
| >| awi.exe - Downloader.Inservice.F
| >|
| >|
| >|
| >|
| >|
| >| --
| >| The people think the Constitution protects their
| rights;
| >| But government sees it as an obstacle to be overcome.
| >|
| >|
| message
| >| | >| | Quick question - there is a process called T.exe
| running
| >| on my machine
| >| | from startup (win xp). The executable exists in
| >Documents
| >| and
| >| | Settings in my daughter's folder area. It opens up
| TCP
| >| ports 2431 and
| >| | 2433, which are associated with SQL Server (I don't
| >have).
| >| Anybody
| >| | know what this executable does? Thanks
| >| |
| >| | Joe
| >| |
| >| |
| >|
| >|
| >
| >
| >.
| >
 
Back
Top