You are viewing an archive. To view the actual thread click here : What does this mean?


Mo
20-06-2003, 03:16 PM
I have just posted and immediately received a high risk security alert saying ' Attempt to connect to local computer using the backdoor/subseven trojan horse blocked'

What does it mean and do I have to do anything??????

Geoff
20-06-2003, 03:22 PM
It's not related to the forum. However, I did some research. You basically have a virus (technically a "trojan horse") on your computer. This allows hackers access to your otherwise secure computer, hence the trojan reference. Luckly for you, you obviously have some kind of security system and the hackers attempt was blocked.

Let me know what virus/firewall software you are using and I can try and get you the removal instructions. These kinds of viruses (trojan horses) are generally spread by email attachments or possibly something you downloaded.

Geoff
20-06-2003, 03:32 PM
Just had a PM from Mo, letting me know she uses Norton.

To remove the problem, read the instructions on this page:
http://securityresponse.symantec.com/avcenter/venc/data/backdoor.subseven.2.15.html

John
21-06-2003, 01:25 PM
Mo doesn't necessary have a virus on the machine in order to get that message.

The Norton firewall detected a signature/packet on one of the port that was identified as "backdoor/subseven trojan horse" that was Initiated by outside means to setup communications between the hacker and mo machine.

A running background program on your machine containing the virus, if it exists , would response to that signature/packet but Norton firewall blocked it before any such program could connect communication between the two computers.

Without the firewall, any virus that was running that if you had one would pick up the signature/packet and activate itself if it reconizes that particular packet causing the two computers to talk to each other. If you didn't have the "backdoor/subseven trojan horse" virus on your machine, the hacker machine would get no return signal to start communicating with the two machines and therefore moves on and try another IP address/victim machine.

So basically, the firewall is an extra safety net just in case a new virus was created that the virus detection software does not know about yet. The Norton firewall message is a bit alarmist and just like terror it causes you response to the threat. What I am trying to say is, it making you subscribe to the firewall software because it showing you “without me you may have been attack” – Clever marketing.

upholder
21-06-2003, 04:29 PM
I get these alerts from my Norton firewall about 4 times a day.
At first you do panic but after a while it's not a worry.
The 2003 version tracks where the so called attack came from for you, a lot come from the USA and Europe.
I'm just glad my system is protected if only from background noise on the net.

If you are worried you may have a Trojan virus you can download a Cleaner from http://www.moosoft.com/ it's free and easy to use.
I have had my firewall for 12 months now as i went onto a cable connection, after scanning my pc with the Cleaner last week it found nothing.

£50 well spent? I dunno.

:?

Cayenne
27-04-2005, 11:49 PM
Originally posted by upholder


£50 well spent? I dunno.

:?

Hmm. I have just resurrected a pc and got it up and running to the web over a wireless lan. In my enthusiasm to try it out, I connected to the web without Norton installed. BIG MISTAKE. It took about an hour before a virus hit it and I had to reinstall from scratch.

Just goes to show.....

You are viewing an archive. To view the actual thread click here: Sheffield Forum