PDA

View Full Version : Norton Firewall blocks Trojan Horse when FAX opened.


phduffey
December 5th, 2003, 10:10 AM
Yesterday I was opening one of the Microsoft Fax programs (not Phone Tools) and Norton Firewall blocked "Default Block Netspy Trojan Horse" which was attempting to reach the URL which is assigned to my own computer. The program listed was Explorer.exe and the path was C;\Windows\ When I run AVG it displays about 10 items as unable to scan because the are locked. Notron Antivirus and TDS-3 have not identified this Trojan on any of my scans. Any ideas? Log file:

Details: Rule "Default Block Netspy Trojan horse" stealthed (localhost,1024)
Inbound TCP connection
Local address,service is (0.0.0.0,1024)
Remote address,service is (localhost,1032)
Process name is "C:\WINDOWS\Explorer.EXE"

Pieter_Arntz
December 5th, 2003, 10:21 AM
Hi phduffey,

That is very likely a False Alarm (http://service1.symantec.com/SUPPORT/nip.nsf/16c1d01d537bf4d188256d8e0076b346/713afacbd4135e0a88256c77007e526f?OpenDocument&src=bar_sch_nam)

Regards,

Pieter

phduffey
December 5th, 2003, 03:17 PM
Thank you. Paul