1. You are viewing our forum as a guest. For full access please Register. WindowsBBS.com is completely free, paid for by advertisers and donations.

trojan horse

Discussion in 'Malware and Virus Removal Archive' started by tremara, 2004/03/13.

Thread Status:
Not open for further replies.
  1. 2004/03/13
    tremara

    tremara Inactive Thread Starter

    Joined:
    2003/03/31
    Messages:
    20
    Likes Received:
    0
    Can someone please explain what these messages mean and doI have a big problem here

    Norton anti virus found a trojan horse with a red circle and a black cross inside next to it A high risk

    the message reads
    There was an recent attempt to attack your computer that was blocked.Do you wish to view details of the attempted attack.
    Attempt to connect to local computer using the net by trojan horse blocked. The programme c:/windows/explorer.exe.protocol TCP (inbound)

    What triggers this alert,
    the ip address 127.0.0.1 attempted to connect to your computer using default block net spy trojan horse
     
  2. 2004/03/13
    markp62

    markp62 Geek Member Alumni

    Joined:
    2002/05/01
    Messages:
    4,012
    Likes Received:
    16
    The first means that you got a Trojan virus, and you should let Norton quarantine it.
    The second means an attempt was made to connect to it and was blocked.
    The third means it is running, the IP address 127.0.0.1 is your own computer, the signal is trying to get out.
    Go to the online Housecall and Trojan scans below.

    Get HijackThis and post the startup log here, and you will be shown how to stop it from running. When hijack is running, click on Config, then Misc Tools, the Generate Startup log, it will appear in Notepad, Copy & Paste it on here.
    Go ahead and download ExeFix8, you may need it when the trojan is deleted and you get the message something cannot be found when you start a program.
     

  3. to hide this advert.

  4. 2004/03/13
    Johanna

    Johanna Inactive Alumni

    Joined:
    2003/03/08
    Messages:
    2,402
    Likes Received:
    2
    Why didn't Norton block the Trojan in the first place? I have had NIS 02 & 03, and the tattletale globe reports all, (because I set it that way!:D ) and nothing has ever been allowed to get in. I have never seen that exact message before, but it is similar to the ones I get that the attempt has been blocked, and has failed. Run the scans, but you're probably clean if you never disabled Norton while online.

    NIS has a novelty of being able to geographically identify where your attack came from. You get to see a map and a domain name. Frankly, I don't care if it came from China, Denmark or Indiana, as long as Norton blocked it. If you just want it to work in the background without being interrupted, you can set it that way. If you have a concern, you can always check your event logs.

    I let my tattletale tell all, and I use a freebie from AT&T called Privacy Bird and WhoIs by Karen Kenworthy if I have any questions. For fun, look up our beloved BBS! :D

    Johanna
     
  5. 2004/03/14
    aleekat

    aleekat Inactive

    Joined:
    2002/01/07
    Messages:
    902
    Likes Received:
    0
    Why didn't Norton block the Trojan in the first place?

    Virus defs not kept up to date?
     
  6. 2004/03/15
    Houston

    Houston Inactive

    Joined:
    2003/11/15
    Messages:
    34
    Likes Received:
    0
    tremara,
    The message was informing you of what it had done! It *blocked*
    the trojan, and asked if you wanted to see aditional info, plain and simple. Keep up with the updates and things will work ok.

    Houston
     
Thread Status:
Not open for further replies.

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.