Click to See Complete Forum and Search --> : Anybody hear for SennaSpy?
KOBBRAS
February 15th, 2002, 12:33 AM
It is some kind of trojan horse, is anybody have some experience with that ?
TechieChick
February 15th, 2002, 04:44 AM
How about a link to the source? (http://www.tlsecurity.net/senna.html)
Three variations of the worm (http://www.antivirus.com/vinfo/virusencyclo/default2.asp?m=a&virus=sennaspy&alt=sennaspy&key=&payload=&type=&day=&month=&year=&wkday=) are listed at trendmicro. Looks easy to remove though.
Go here (http://housecall.antivirus.com/housecall/start_corp.asp) and run an online scan if you think you're infected.
One way to tell if you're infected is to telnet to your own system on port 11000.
o 127.0.0.1 11000
Hope this answered your question.
TC
I am a cracker
February 15th, 2002, 06:25 AM
Yes it is a trojan! Trojans are lame
http://www.avpavp.hpg.ig.com.br/index.htm check that site out!
KOBBRAS
February 15th, 2002, 11:24 PM
Yes TechieChik, but thats the point !!!, I am talking probably about SennaSpy Trojan Generator 3.01 beceause it is activate through ICQ(i found it at tlsecurity and they said that version 3.01 have activated through NetDetect), I cant download trojan beceause link is down, and I cant find that trojan on the net(version 3.01), and antivirus cant recognize them(Northon last updated, and PC-cilin), I know how I get it and from who, and I saw through firewall that IP is trying to connect to my comp everytime at the different port, and when I permit connection IP are connected( I see that through netstat at my firewall). Any suggestions?
the_JinX
February 15th, 2002, 11:28 PM
trojans suck...
trojans are one of the lamest way to get into lame pc's ran by lame opperaters...
TechieChick
February 17th, 2002, 01:28 AM
Go here (http://www.safersite.com/PestInfo/S/SennaSpy.asp) , this company talked about 3.01 and they have a trial version of their removal tool. Might be your best option since the manual removal directions didn't do the job.
Sorry I didn't respond to this sooner, somehow I didn't see that you had come back with further questions. :(
KOBBRAS
February 18th, 2002, 12:21 AM
We will try, or format C: is second solution. :)