Re: SubSeven alerts: Norton Firewall vs Hacks/Trojan cleaner

From: Francis Bell (phrankndonna@worldnet.att.net)
Date: 08/28/02 

From: Francis Bell <phrankndonna@worldnet.att.net>
Date: Wed, 28 Aug 2002 06:16:55 -0400

Thanks so much for all the replies and info! Can any of you recommend
a good program that does protect one's system best? Or, if there's
not one single program that does cover it all, what is the best way to
best protect the computer from most of the threats? Thanks again!

Frank

On Wed, 28 Aug 2002 01:15:06 GMT, NormanM <my.aren't@we.nosy.invalid>
wrote:

>On Tue, 27 Aug 2002 20:16:10 -0400, Francis Bell
><phrankndonna@worldnet.att.net> wrote:
>
>>Hello,
>>
>>I've got Norton Personal Firewall on my computer with a cable modem,
>>and I'm continually getting alerts stating that I've had a SubSeven
>>attack. The way I understand it is Norton caught it before it got
>>into my system and did any damage. Is there any need for one of thos
>>hack/trojan scanner/cleaner/remover programs on top of the firewall?
>>If Norton is catching it, then why the alert? What should I be doing?
>>I like to be proactive and keep my system clean. Thanks for any
>>advice.
>
>No sir, Norton did not catch it before it did any damage. Norton
>reported an attempt to connect to the SubSeven Trojan on your
>computer. If you had SubSeven, Norton protected you against the
>connection; very likely, though, you don't have it, and Norton just
>dropped the incoming packets and reported same. Either way, no damage
>done.
>
>Learn about how a RAT operates. A port scan, which is what Norton
>reported, is just that: a port scan. Someone with a SubSeven client is
>looking for a SubSeven server to play with. The SubSeven client lets
>the remote operator play with the infested system, but the system has
>to be infested with a SubSeven server before the guy with the clien
>can connect.
>
>Which isn't to say that you aren't infested, just that what you are
>seeing is not evidence of an infestation at all. I get them all the
>time. I don't worry about them.
>
>I do think I want to do something about the port 25 scans from China,
>though; run a Honeypot, maybe, so the spammer thinks he has connected
>to an open SMTP relay, and wastes his time sending spam that my system
>won't deliver! ;)
>
>
>Norman M
>"At the far end of the tunnel, a mysterious town...
> Will Chihiro get back her name?
> Will she return to the world of humans?"
> Prepare to be "Spirited Away"...
> http://bventertainment.go.com/movies/spiritedaway/index.html

Relevant Pages

  • Re: Help! Still cant get my E mail with OE
    ... We generally advise people not to use anything from MAfee or Norton. ... Protect your PC ... > future live update that could correct it for otherwise unaware users. ... >>> scanning but it didn't fix the problem..I also checked and rechecked ...
    (microsoft.public.windows.inetexplorer.ie6_outlookexpress)
  • Re: T or F? Just opening Outlook Express allows viruses/adware/spyware to load?
    ... to protect his PC from security breeches. ... Norton Internet Security 2004 ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: Firewall Ability
    ... It doesn't give you any alarms to tell ... Right-click the connection> Properties> Advanced> Protect my ... I've been very happy with Symantec's Norton ... Norton AntiVirus, Norton Personal Firewall, parental controls, privacy ...
    (microsoft.public.windowsxp.security_admin)
  • Re: how secure is microsoft firewall ?
    ... Right-click the connection> Properties> Advanced> Protect my ... I've been very happy with Symantec's Norton ... Norton AntiVirus, Norton Personal Firewall, parental controls, privacy ...
    (microsoft.public.windowsxp.security_admin)
  • Re: firewall compatibility
    ... Right-click the connection> Properties> Advanced> Protect my ... I've been very happy with Symantec's Norton ... Norton AntiVirus, Norton Personal Firewall, parental controls, privacy ...
    (microsoft.public.windowsxp.security_admin)