Sub7Server scans

[Epoch84722]

I recently set up the Linksys LogViewer utility and immediately began noticing a large number of 'Incoming' events on port 27374, which I've learned is the port used by the Sub7Server trojan. I've visited numerous security websites and have done extensive searching around in my systems and I am pretty sure that I do not actually have the trojan client on any of them. So what I need to know is, are these just random port scans made by remote Sub7Server applications looking for a response from any infected machines?

 

[mboy]

Most likely, yes.

 

[cleverhandle]

Definitely. I pick up tons of these every day.

 

[GprophetB]

yeah... i hate that