Question about W2K and outgoing data brusts at boot

From: N2n (devnul@attbi.com)
Date: 08/17/02


From: "N2n" <devnul@attbi.com>
Date: Fri, 16 Aug 2002 23:45:30 GMT

I have noted from a seperate traffic logging system that that my W2K and XP
boxes make a connection with the Internet/Network before; Zone Alarm,
Nortons AV apps starts and before the MS logger records any data.

I have already spotted,monitored and reported a site that was getting 2 to
4kb of data brusts at boot from a locked/hidden file after visiting their
site.

Since the default MS load process seems to load and open ports before
security is applied, leaving a system open for XX seconds before
loading tracking and FW apps. Doesn't this leave a system open for an
outgoing trojan data brust attack at boot?

I posed this question to both Norton AV and ZA tech support a good while
ago
with out a response yet.



Relevant Pages

  • Re: Slow Boot up
    ... Most of the Media Center Games and programs have been ... It seems to take much too long for the PC to boot up, and when it boots, ... I tried stopping on several and then the Nortons ... Its Symantec, not Nortons. ...
    (microsoft.public.windowsxp.general)
  • Re: System Volume Information
    ... Nortons prevent access but could not do anything with them. ... safe mode when that drive is the boot drive because it keeps rebooting. ... > What are the infected files that Norton found? ...
    (microsoft.public.windowsxp.help_and_support)
  • Chk disc
    ... I searched the Symantec site without much luck. ... If you have a bootable install cd for XP run chkdsk from ... Set your PC BIOS to boot from CDROM, ... reinstalled nortons, now it will not ...
    (microsoft.public.windowsxp.general)