1. You are viewing our forum as a guest. For full access please Register. WindowsBBS.com is completely free, paid for by advertisers and donations.

subseven alert nort firewall kaaza?

Discussion in 'Security and Privacy' started by schamish, 2003/02/17.

Thread Status:
Not open for further replies.
  1. 2003/02/17
    schamish

    schamish Inactive Thread Starter

    Joined:
    2002/11/08
    Messages:
    241
    Likes Received:
    0
    I recently changed firewalls to Norton (actually outpost pro for some reason after installing a driver for a scanner just would not work)
    with Norton firewall running and Kaaza allowing uploads I am getting sporadic warnings from the Norton firewall program of
    subseven trojan attempted attacks.
    could this be a quirk with kaaza uploads or are these really blocked subseven trojan attacks ?
    scanning for trojans does not reveal any trojans. :confused: :eek:
     
  2. 2003/02/18
    compdude

    compdude Well-Known Member

    Joined:
    2002/01/10
    Messages:
    62
    Likes Received:
    1
    These are probably valid blocked subseven trojan attacks. I am running Norton Firewall as well as Kazaa Lite and I have never noticed any connection between any attacks and Kazaa. I get notified of attacks both while running Kazaa and when I'm not.

    This means that the firewall is doing its job; not allowing any of these on your machine.
     

  3. to hide this advert.

  4. 2003/02/18
    schamish

    schamish Inactive Thread Starter

    Joined:
    2002/11/08
    Messages:
    241
    Likes Received:
    0
    no trojans on scan

    ran Tauscan as you advised.
    No trojans were found
     
  5. 2003/03/18
    schamish

    schamish Inactive Thread Starter

    Joined:
    2002/11/08
    Messages:
    241
    Likes Received:
    0
    by the way when speaking to tech support at my isp I asked about this issue.
    I was told that this means nothing and " is all part of the broadband experience" When I asked if this "means nothing" why is someone from S. Korea or China trying to break into my computer ? No answer.
    just in case you have never seen this " internal memo" look
    at the chain of events that occur when a Dell techie who acts on behalf of an irate customer forewards the memo and customer service notes to micheal@dell.com
    for those of you not experienced in the culture of larger corporations "cc" on a memo translates to "YOU ARE IN BIG TROUBLE!!! "
    The question is Did the customer ever get her missing ac adaptor ?

    link: http://www.internalmemos.com/memos/memodetails.php?memo_id=28
     
  6. 2003/03/18
    markp62

    markp62 Geek Member Alumni

    Joined:
    2002/05/01
    Messages:
    4,012
    Likes Received:
    16
    Some guy is just scanning a block of addresses aimed at that particular port. While subseven usually uses that port, other legitimate programs could, too. Norton put a name on it and not just the number and that alarmed you. You might to look up to see if you can suppress alerts, as they will get annoying.
    To better understand what is going on, the attempts are blocked because your computer has not opened that port and has not sent any packets out through it. So when one comes in, it really is just dropped, no response is sent out advising if the port is open or closed. And that hurts the guy a bit, as he/she would have to wait for a response that is not coming before going on the next one.
     
Thread Status:
Not open for further replies.

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.