Norton Worm Report - Techist - Tech Forum

Go Back   Techist - Tech Forum > Computer Software > Microsoft Windows and Software
Click Here to Login
Closed Thread
 
Thread Tools Display Modes
 
Old 08-24-2005, 12:53 PM   #1 (permalink)
Junior Techie
 
Join Date: Feb 2005
Posts: 90
Send a message via AIM to realmike15
Default Norton Worm Report

I was sitting on my computer last night, trying to clean up my computer a bit after a fresh install of XP and all my software (Defrag, Cleanspace 8, RegistryMech). I was connected to the internet through my DSL, but wasn't using any software that requires a connection, when all the sudden my new version of Norton AV2005 tells me:

"Details: Rule "Default Block Bla Trojan horse" blocked (69.28.191.84,1042).
Inbound UDP packet.
Local address,service is (MICHELL(172.16.1.34),1042).
Remote address,service is (69.28.191.84,27014).
Process name is "N/A"."

I get a bit worried because I just did a fresh install, and I can't believe I would virus problems so suddenly. I'm a little confused about the message. Does this mean I had a trojan horse on my computer, or that someone was trying to put one there?

I'm just worried theres more crap on my computer, and I don't even know it. Norton comes up with no viruses found under a full scan, and I had run the full scan earlier that day with no detection.

Are there any other programs, or online databases that could search my computer a little better for viruses. The last thing I want, is more performance problems, thats why I reformated in the first place.

*edit* also why does the process that was doing it have no name "n/a". I wanted to find out where it was coming from, and when it says n/a, dunno how I'm supposed to know.

**edit** one last thing, Norton AV2005 told me to disable Windows Firewall, and let it handle those things, I let it disable it but I'm wondering if i'd be better off with them both enabled in light of this problem. I do also have a 2wire homeportal DSL Modem/Firewall, for connecting to my ISP.
__________________

__________________

Gigabyte GA-P31-S3G Motherboard (Intel P31 Chipset)
Intel Core Duo 2.33Ghz (1333FSB/Conroe)
eVGA 9600GT (512MB)
WD 240gig SATA150(7,200rpm 16mb cache) x2
G. Skill Dual Channel DDR2 1066 (2Gigs)
Plextor 16x/48x DVD+-RW SATA150
Sound Blaster Audigy2 ZS
Seasonic 500W Power Supply
LIAN LI PC-G70B Full-Tower
ViewSonic 19" VP191b LCD Monitor
realmike15 is offline  
Old 08-24-2005, 12:57 PM   #2 (permalink)
Newb Techie
 
Join Date: Aug 2005
Posts: 8
Default

http://securityresponse.symantec.com...la.trojan.html
__________________

DLONTS is offline  
Old 08-24-2005, 01:12 PM   #3 (permalink)
Junior Techie
 
Join Date: Feb 2005
Posts: 90
Send a message via AIM to realmike15
Default

Ok thanks for the quick response, one thing I'm a little confused about though, I don't remember a response about it being deleted, just the alert I posted up top. Virus scan detects nothing, and nothing that I can see in registry either.
__________________

Gigabyte GA-P31-S3G Motherboard (Intel P31 Chipset)
Intel Core Duo 2.33Ghz (1333FSB/Conroe)
eVGA 9600GT (512MB)
WD 240gig SATA150(7,200rpm 16mb cache) x2
G. Skill Dual Channel DDR2 1066 (2Gigs)
Plextor 16x/48x DVD+-RW SATA150
Sound Blaster Audigy2 ZS
Seasonic 500W Power Supply
LIAN LI PC-G70B Full-Tower
ViewSonic 19" VP191b LCD Monitor
realmike15 is offline  
Old 08-24-2005, 01:25 PM   #4 (permalink)
Ultra Techie
 
Join Date: Jul 2005
Posts: 813
Default

My opinion would be if your norton knew that much info about it, obvioulsy it is a known virus in your virus definintions and it was able to handle it. If you did a scan, and nothing seems awry, I wouldn't worry anymore about it.

I've found that sometimes having 2 Firewalls up can be counter-productive, and a general pain, just my opinion though. Personally I would disable norton and XP and use zonealarm.
__________________
Associates Degree in IS

A+ Certified

Studying for Network+
BASSMASTER is offline  
Closed Thread

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are Off




Copyright 2002- Social Knowledge, LLC All Rights Reserved.

All times are GMT -5. The time now is 06:09 PM.


Powered by vBulletin® Version 3.8.8 Beta 1
Copyright ©2000 - 2017, vBulletin Solutions, Inc.