Re: false netspy trojan?

From: NK (nkinf@hotpop.com)
Date: 12/03/02 

From: "NK" <nkinf@hotpop.com>
Date: Mon, 2 Dec 2002 18:02:38 -0800

Everytime I start my PC, proport gives a message
connection found , remote IP 127.0.0.1 (local host),
possible Trojan Netspy. My Network card is disabled on
startup. Why do I get this message & how can I remove it?
Please help

>-----Original Message-----
>Duncan Ross wrote:
>
>> I have Norton Internet security 2003. Recently after
>> performing several windows updates to various security
>> and IE6 patches, Norton now throws up a blocking message
>> for the Netspy Trojan.
>>
>> The Trojan doesn't appear to be on my machine so it's
>> either a false trigger of Norton or the windows update
>> has included some illicit activity from Microsoft. If I
>> turn on the block for the IP address shown against the
>> trojan, IE6and outlook won't communicate with the
>> internet any more so I am guessing it's a problem
>> included with the update.
>>
>> Anyone else seen this problem, please email me.
>>
>> Cheers
>
>
>Have you done a whois search on the IP address to see
where the process
>blocked by Norton is trying to connect? Perhaps it's a
false positive for
>something fairly trivial like your system pinging a DNS
server or the MS
>time server.
>> Duncan
>
>--
>Home life as we understand it is no more natural to us
than a cage is
>to a cockatoo.
> -- George Bernard Shaw
>
>.
>

Quantcast