Norton tells me it blocked an attack....

[Yzzim]

...from IP# 209.174.242.241. It said the IP# tried to connect to my computer using "Default Block Backdoor/SubSeven Trojan horse."

The IP# points to some ISP in Springfield, Illinois.

I have run Norton Anti-Virus many times and it has come up with nothing. Anything I can do to find this backdoor? Is that IP# just scanning a group of IPs and that's what trigged Norton to say it was an attack?

 

[Torghn]

Dang you had a firewall, that's what stoped me!

Serisously though, I can't imagine why someone would want to hack me or any normal person.

 

[RbSX]

Originally posted by: Yzzim
...from IP# 209.174.242.241. It said the IP# tried to connect to my computer using "Default Block Backdoor/SubSeven Trojan horse."

The IP# points to some ISP in Springfield, Illinois.

I have run Norton Anti-Virus many times and it has come up with nothing. Anything I can do to find this backdoor? Is that IP# just scanning a group of IPs and that's what trigged Norton to say it was an attack?

No, when a person tries to scan a group of ip's its refered to as 'ping', this can be done through dos or several other applications.

What this person was trying to do was to put a 'trojan horse' inside your computer, in otherwords put a file inside your computer that would let him take it over.

 

[Legendary]

It's just scanning a certain range of IPs. If you start with 24. or some other common prefix it happens a lot.

 

[Utterman]

Looks like I may need to add some more coal to my firewall

 

[Yzzim]

Would it be worth sending an email to the ISP stating what happened along with the IP#? Will anything come of it?

 

[Yossarian]

Not only did Norton block the attack, but Ashcroft rounded up 200 innocent people just to be on the safe side.

 

[Yzzim]

Originally posted by: PipBoy
Not only did Norton block the attack, but Ashcroft rounded up 200 innocent people just to be on the safe side.

ROFLMAO

 

[MercenaryForHire]

Absolutely nothing to worry about. Some script kiddie in Springfield is just scanning everyone's computer for trojans. If there's no trojan or a firewall, it gets blocked and the program moves on. If there is, it records it and the "1337 S|<r1pt h4><0R!!" thinks he's cool for "r3\\|t1n6 j00R b0><0r"

Totally harmless. But worth reporting. ISPs don't like people portscanning.

- M4H

 

[kgraeme]

Originally posted by: Torghn
Dang you had a firewall, that's what stoped me!

Serisously though, I can't imagine why someone would want to hack me or any normal person.

Because they can then use your computer as a platform for further hacking making it harder to trace or more often a DDOS attack with your computer assisting.

 

[n0cmonkey]

Originally posted by: RyanSengara

Originally posted by: Yzzim
...from IP# 209.174.242.241. It said the IP# tried to connect to my computer using "Default Block Backdoor/SubSeven Trojan horse."

The IP# points to some ISP in Springfield, Illinois.

I have run Norton Anti-Virus many times and it has come up with nothing. Anything I can do to find this backdoor? Is that IP# just scanning a group of IPs and that's what trigged Norton to say it was an attack?

No, when a person tries to scan a group of ip's its refered to as 'ping', this can be done through dos or several other applications.

What this person was trying to do was to put a 'trojan horse' inside your computer, in otherwords put a file inside your computer that would let him take it over.

That is perhaps one of the dumbest things I have read in ATOT. A ping is a specific ICMP type, an echo request. It is not a mass scan of ip addresses. This person was not trying to put a "trojan horse" inside this computer, but mass scanning (a sweep) for any machines with that trojan installed.

 

[WinkOsmosis]

Originally posted by: PipBoy
Not only did Norton block the attack, but Ashcroft rounded up 200 innocent people just to be on the safe side.

Were they young Arab males? Those young Arab males are up to no good!