Author Topic: Default Block Back Door/SubSeven Trojan - what is this? (Read 891 times)

Dowding · « **on:** March 15, 2001, 01:29:00 PM »

I recently installed a tria version of Norton's Internet Security software. It seems to be doing its job.

I keep getting security alerts with the log message:

'Default Block Back Door/SubSeven Trojan'

I assume this is some kind sado hacking program; I know a little about software to realise what a trojan program does. Does this mean there is a Trojan program on my machine, and that its 'owner' is trying to get it to run?

Grateful for any help here.

Eagler · « **Reply #1 on:** March 15, 2001, 01:39:00 PM »

Dowding
Try looking here:

Trojan Info

good luck

Eagler

Eagler · « **Reply #2 on:** March 15, 2001, 01:46:00 PM »

On a more serious note:
I always go to Norton's virus info page for more info. Try this one:
http://www.symantec.com/avcenter/venc/data/sub.seven.20.html

I don't know if it's blocking something trying to get into your machine or something trying to let information out

gl

Eagler

Sky Viper · « **Reply #3 on:** March 15, 2001, 02:36:00 PM »

Quote

Originally posted by Eagler:
On a more serious note:
I always go to Norton's virus info page for more info. Try this one:
http://www.symantec.com/avcenter/venc/data/sub.seven.20.html

I don't know if it's blocking something trying to get into your machine or something trying to let information out

gl

Eagler

Outlook and Outlook Express are often used for distribution of these worms.
The deal with these things is that once they are active, they will send themselves to all of the addresses in your mail box without telling you.

It sounds like you have this worm, and it is trying to send email on its own but Norton is catching it.

------------------
Sky Viper

Sky Viper · « **Reply #4 on:** March 15, 2001, 02:39:00 PM »

more info[/]

------------------
Sky Viper

Dowding · « **Reply #5 on:** March 15, 2001, 03:58:00 PM »

Let me just take this opportunity to say:

Oh ****.

This computer is 3 weeks old and I already have a 'worm' on it. The good thing is that I haven't actually set up my email address book (I use Netscape for email).

Thanks for the info guys, much appreciated.

<edit>

If it did come from an email, I can't think how. I've barely used it - no attachments have been opened as far as I know.

Isn't the internet a wonderful place?

The bad thing is I only installed the Norton stuff last weekend, but have made a few online purchases since this computer was set-up.

Looks like I'm going to have to start cancelling credit cards.

[This message has been edited by Dowding (edited 03-15-2001).]

bloom25 · « **Reply #6 on:** March 15, 2001, 05:58:00 PM »

Do you have RW with Gator? That *might* get detected as a Trojan. PC Anywhere (or similar) installed?

------------------
bloom25
THUNDERBIRDS

Dowding · « **Reply #7 on:** March 15, 2001, 06:12:00 PM »

I installed RW at the weekend too. I used AdAware but it didn't pick Gator up, although the RW site said this version had Gator attached.

Perhaps it's Gator after all.

Anyway, I've ordered the full version of Norton Internet Security, which apparently includes the Anti-Virus Software. I'm not taking anymore chances.

airspro · « **Reply #8 on:** March 15, 2001, 08:16:00 PM »

I believe you uninstall Gator with windows uninstaller .

Yep I got one of the love virus sent to me by a buddie , he didn't even know he had 4 viruses

I seen it too , he sent it to both yahoo mail and my isp address . Yahoo had the exe and other stuff that made it run on the botton of the page so I could see what it looked like

Widows mail you never see it .

Yep got hacked for 277.somthing rubles already this year

Now thats only 10 something USD's but the credit card company thought it was a test to see if I would pay it . It was INET , look it up

, hehe there is a toejam load of them on the net . Never found the right one .

They said I had bought information , hehe , ya right . You have to get statment notarized then send it back to cc co. They figured I would have payed it and next month would be about 2 to 3 thousand USD

But I still like the internet

cheers
spro

-lynx- · « **Reply #9 on:** March 16, 2001, 08:10:00 AM »

Hmmm... I just say it's not mine, Barcaycard send me the forms to sign and that's it, transaction credited, a card is replaced and then you get a mail from Ronni saying that your credit card's been denied

.

Lephturn · « **Reply #10 on:** March 16, 2001, 09:03:00 AM »

Dowding,

It's not saying that you have the trojan on your machine, it's saying that somebody is scanning your machine LOOKING for the trojan. It's blocking the scan anyway, so the bad guy will get no response. This is normal operation, and just indicates somebody is scanning you, which happens frequently.

If you actually have the trojon on your machine, your anti-virus program should detect and remove it for you anyway.
------------------
Sean "Lephturn" Conrad - Aces High Chief Trainer

A proud member of the mighty Flying Pigs http://www.flyingpigs.com

Check out Lephturn's Aerodrome for AH articles and training info!

[This message has been edited by Lephturn (edited 03-16-2001).]

Nath-BDP · « **Reply #11 on:** March 16, 2001, 09:09:00 AM »

"You get what you put in and people get what they deserve."

-towd_ · « **Reply #12 on:** March 16, 2001, 06:02:00 PM »

no you dont , and people seldom do.

total bull from a silly kid.

Dowding · « **Reply #13 on:** March 17, 2001, 05:35:00 AM »

Nath, do everyone a favour and grow up a little. With every post you write, you show your age.

Nath-BDP · « **Reply #14 on:** March 17, 2001, 12:32:00 PM »

Author Topic: Default Block Back Door/SubSeven Trojan - what is this? (Read 891 times)

Nath-BDP

-towd_

Nath-BDP