Trojan alerts from Norton firewall?
05 January 2002, 02:53 PM
#1
Scooby Regular
Thread Starter
I installed a new virus scanner about 4 weeks ago, rthis detected a trojan which i have removed, Norton virus does not detect any viruses, but Norton Firewall brings up an alert every couple of hours saying that:
A connection has been blocked using the backdoor/subseven trojan
or
A connection has been blocked using the RASMIN trojan.
Does this mean I still have something to worry about? All the online checks say I am safe and detedt no trojans.
Anyone advise?
Andy
A connection has been blocked using the backdoor/subseven trojan
or
A connection has been blocked using the RASMIN trojan.
Does this mean I still have something to worry about? All the online checks say I am safe and detedt no trojans.
Anyone advise?
Andy
05 January 2002, 03:54 PM
#2
Scooby Regular
Join Date: Aug 2001
Posts: 72
Likes: 0
Received 0 Likes
on
0 Posts
You can get software IE The Cleaner, Doorguard and others that just find and kill Trojans. Anti Virus software is not really designed for these and can miss them. Your firewall sounds like it is stopping incoming connection attempts, but try the free version of ZoneAlarm because it will tell you which programs are trying to access the net and let you block any that you think should not. If you do have a Trojan on your system you can block it from accessing the net with ZoneAlarm.
05 January 2002, 03:55 PM
#3
Scooby Senior
Join Date: Feb 2000
Location: West Midlands
Posts: 5,763
Likes: 0
Received 0 Likes
on
0 Posts
Andy,
you say that you _had_ a trojan (which has now been removed).
It is possible that this trojan has already sent your IP address, PC details (surfing habits
) etc. to the "underworld", and the alerts are those sad geeks trying to connect to what was an open system.
You should be safe now, and hopefully they will give up trying
mb
you say that you _had_ a trojan (which has now been removed).
It is possible that this trojan has already sent your IP address, PC details (surfing habits
) etc. to the "underworld", and the alerts are those sad geeks trying to connect to what was an open system.You should be safe now, and hopefully they will give up trying
mb
05 January 2002, 05:14 PM
#5
Scooby Regular
Join Date: Aug 2001
Posts: 72
Likes: 0
Received 0 Likes
on
0 Posts
I love Norton software but I must admit I have not used their firewall. As long as the list of program rules can be monitored and verified that should secure the machine. But running specific Trojan detection/removal software is still a must.
05 January 2002, 06:47 PM
#6
Scooby Regular
Join Date: Jul 2001
Posts: 451
Likes: 0
Received 0 Likes
on
0 Posts
Take a look at this:
http://service2.symantec.com/SUPPORT/nip.nsf/e584eff20b611f7988256a9b007e63c1/15b3fa622f4662bf88256ad3005b2904?OpenDocument
it's the default settings for Norton Personal Firewall.
http://www.symantec.com/avcenter/venc/data/backdoor.trojan.html
is a description of the 'backdoor' trojan.
Den
01 May 2002, 03:19 PM
#7
Scooby Regular
Join Date: Jul 2001
Posts: 451
Likes: 0
Received 0 Likes
on
0 Posts
I get the same occassionally with Hack Tracer under Win 98. It isn't a trojan virus on your PC, but a trojan trying to connect to it.
The firewall is just doing it's job...
Den
Edited to say: Why don't you check the Norton/Symantec web site for more info?
[Edited by Dirty_Den - 1/5/2002 3:22:42 PM]
The firewall is just doing it's job...
Den
Edited to say: Why don't you check the Norton/Symantec web site for more info?
[Edited by Dirty_Den - 1/5/2002 3:22:42 PM]
Thread
Thread Starter
Forum
Replies
Last Post
smunns
Dealer and Third Party Supplier Queries
5
14 September 2015 08:08 PM