Norton Firewall: Attempt to connect to local comp using trojan horse blocked?

[Techie333]

This is the 4th time I am getting this message from Norton Internet Security. The exact message is:
Attempt to connect to local computer using the Backdoor/Subseven Trojan horse blocked.
Protocol: TCP (inbound)
Remote Address: 65.29.210.52: 2056

What does this mean?.....by the way i know this is a repost, the other one got deleted.
What should I do.?

 

[Souka]

Not %100, but.....

Are you running a Anti-virus prog? latest defs?

Might want to check Norton's (symantec) site regarding this "Backdoor/Subseven Trojan horse "

See if your system is running it.....

Good Luck!


Edit: When does this message happen? Are you on a particular web site? Opening email? Running an application? Or is it when the computer is idle?

 

[ScottMac]

It sounds like YOU have the Trojan Horse, and it's trying to "Phone Home." (or, at least, that's what the Firewall thinks).

Scan the system after you boot from a CD.

Good Luck

Scott

 

[Techie333]

I just got another one guys....... at 6:44pm on 6/11/02

remote address: 65.93.108.77: 1083

anyone can check who that is.....anyway......will boot from disk and scan w/ latest norton antivirus definitions.......by the way i have norton antivirus 2002.......just scanned whole system 6/6/02....oh well

 

[JackMDS]

Judging from your first post it seems an attempt to connect to your computer (Inbound TCP).

Could be an attempt to infest your computer, or just a communication that is mistakenly interpreted as Trojan Horse.

Open the Firewall Setting, Internet Zone, and restrict incoming info from this IP.

BTW: If this is your ISP IP than leave it alone, and call your ISP. On Cable Internet Service, it could be another poor guy that is unaware that his system is infested, and transmitting on the Node.

 

[Techie333]

nope, it is not my IP address.......everytime i get this message it is from a different IP address. I just scanned my computer using Norton Antivirus 2002....antivirus definitions from 6/11/02........all the files..........in Windows XP.........not boot cause i don't know how..........and it came up with no infection.

WTF?

 

[tecmcse26]

The message that your getting has to do with the blocking of a possible virus to a port on your computer.
The firewall software is blocking the port that the remote computer is try to access to infect your system.

Nothing you would need to worry about, the software is doing its job.

Marc

 

[Techie333]

okely-dokely