backdoor.subseven trojan

[stemy]

hi

My firewall notifies me from time to time that it blocked trojan horse backdoor.subseven from making an outbound connection. I performed full system scans, read dozens of online articles about where to look for it in the registry and initialization files, and found absolutly no trace of the trojan on my computer.
please help me (running win2000, NAV internet security and antivirus 2003)

 

[browolf]

have u tried running process explorer?

http://www.sysinternals.com/ntw2k/freeware/procexp.shtml

"Ever wondered which program has a particular file or directory open? Now you can find out. Process Explorer shows you information about which handles and DLLs processes have opened or loaded. " ===============
Security Forums

http://www.security-forums.com

 

[crow053]

Try an online virus scan. Bit-defender, Trend,RAV are good ones. Be sure and check auto- clean options.Look in google. My Norton missed a trojan I had.

 

[Grenage]

It was definately an outbound connection ?

Inbound ones are common enough since "script kiddies" just scan large IP ranges.

 

[stemy]

definately.

 

[crow053]

stemy sounds like you have a trojan in your comp. The firewall keeps it from connecting. Download and try "the Cleaner". Its free for 15 days, I believe. Norton should have picked it up though