Netbus Trojan horse

Archived from groups: microsoft.public.windowsxp.help_and_support (More info?)

I may have a problem with a netbus Trojan horse, I think.

Once or twice a week Norton Internet Securities detects a possible netbus
torjan horse attack. This has been happening for months. They are usually
from different IP's, mostly from Europe or Asia. I have run Ad-aware and
spybot, but have found nothing, and it keeps happening.

What could the problem be, and how can I possibly fix it?

Thanks
7 answers Last reply
More about netbus trojan horse
  1. Archived from groups: microsoft.public.windowsxp.help_and_support (More info?)

    Norton Internet Security blocks these attacks and is so proud of this that
    it tells you of that fact every time it happens. I do notify use Norton
    anything, but see if there is an option to not notify you of every little
    attack. There may be a Do not show this message again checkbox in the
    messages themselves, check it.

    --
    Hope this helps. Let us know.

    Wes
    MS-MVP Windows Shell/User

    In news:F66B19B5-D3D5-4D63-A922-B94044C11174@microsoft.com,
    Bigdaddyhen <Bigdaddyhen@discussions.microsoft.com> hunted and pecked:
    > I may have a problem with a netbus Trojan horse, I think.
    >
    > Once or twice a week Norton Internet Securities detects a possible netbus
    > torjan horse attack. This has been happening for months. They are usually
    > from different IP's, mostly from Europe or Asia. I have run Ad-aware and
    > spybot, but have found nothing, and it keeps happening.
    >
    > What could the problem be, and how can I possibly fix it?
    >
    > Thanks
  2. Archived from groups: microsoft.public.windowsxp.help_and_support (More info?)

    There is no problem, your firewall is doing it's job by blocking it. Someone
    is trying to hack into your system.

    --


    The best live web video on the internet http://www.seedsv.com/webdemo.htm
    NEW Embedded system W/Linux. We now sell DVR cards.
    See it all at http://www.seedsv.com/products.htm
    Sharpvision simply the best http://www.seedsv.com


    "Bigdaddyhen" <Bigdaddyhen@discussions.microsoft.com> wrote in message
    news:F66B19B5-D3D5-4D63-A922-B94044C11174@microsoft.com...
    >I may have a problem with a netbus Trojan horse, I think.
    >
    > Once or twice a week Norton Internet Securities detects a possible netbus
    > torjan horse attack. This has been happening for months. They are usually
    > from different IP's, mostly from Europe or Asia. I have run Ad-aware and
    > spybot, but have found nothing, and it keeps happening.
    >
    > What could the problem be, and how can I possibly fix it?
    >
    > Thanks
  3. Archived from groups: microsoft.public.windowsxp.help_and_support (More info?)

    So it is nothing on my system trying to connect out, but someone trying to
    get in?

    "pcbutts1" wrote:

    > There is no problem, your firewall is doing it's job by blocking it. Someone
    > is trying to hack into your system.
    >
    > --
    >
    >
    > The best live web video on the internet http://www.seedsv.com/webdemo.htm
    > NEW Embedded system W/Linux. We now sell DVR cards.
    > See it all at http://www.seedsv.com/products.htm
    > Sharpvision simply the best http://www.seedsv.com
    >
    >
    >
    > "Bigdaddyhen" <Bigdaddyhen@discussions.microsoft.com> wrote in message
    > news:F66B19B5-D3D5-4D63-A922-B94044C11174@microsoft.com...
    > >I may have a problem with a netbus Trojan horse, I think.
    > >
    > > Once or twice a week Norton Internet Securities detects a possible netbus
    > > torjan horse attack. This has been happening for months. They are usually
    > > from different IP's, mostly from Europe or Asia. I have run Ad-aware and
    > > spybot, but have found nothing, and it keeps happening.
    > >
    > > What could the problem be, and how can I possibly fix it?
    > >
    > > Thanks
    >
    >
    >
  4. Archived from groups: microsoft.public.windowsxp.help_and_support (More info?)

    That is correct.

    --


    The best live web video on the internet http://www.seedsv.com/webdemo.htm
    NEW Embedded system W/Linux. We now sell DVR cards.
    See it all at http://www.seedsv.com/products.htm
    Sharpvision simply the best http://www.seedsv.com


    "Bigdaddyhen" <Bigdaddyhen@discussions.microsoft.com> wrote in message
    news:DFB5C5F9-6A96-499B-A057-B7604AE0FFCE@microsoft.com...
    > So it is nothing on my system trying to connect out, but someone trying to
    > get in?
    >
    > "pcbutts1" wrote:
    >
    >> There is no problem, your firewall is doing it's job by blocking it.
    >> Someone
    >> is trying to hack into your system.
    >>
    >> --
    >>
    >>
    >> The best live web video on the internet http://www.seedsv.com/webdemo.htm
    >> NEW Embedded system W/Linux. We now sell DVR cards.
    >> See it all at http://www.seedsv.com/products.htm
    >> Sharpvision simply the best http://www.seedsv.com
    >>
    >>
    >>
    >> "Bigdaddyhen" <Bigdaddyhen@discussions.microsoft.com> wrote in message
    >> news:F66B19B5-D3D5-4D63-A922-B94044C11174@microsoft.com...
    >> >I may have a problem with a netbus Trojan horse, I think.
    >> >
    >> > Once or twice a week Norton Internet Securities detects a possible
    >> > netbus
    >> > torjan horse attack. This has been happening for months. They are
    >> > usually
    >> > from different IP's, mostly from Europe or Asia. I have run Ad-aware
    >> > and
    >> > spybot, but have found nothing, and it keeps happening.
    >> >
    >> > What could the problem be, and how can I possibly fix it?
    >> >
    >> > Thanks
    >>
    >>
    >>
  5. Archived from groups: microsoft.public.windowsxp.help_and_support (More info?)

    I am still a bit concerned. Since I posted this last, they have been coming
    almost everyday. They are not coming from random locations. At least half
    are coming from Korea. Why do these keeping coming, and from the relative
    same location. I don't have a static IP. I am assuming not everyone gets
    4-5 a week, so why am I getting so many?
    I am still concerned there is something on my system that is making me a
    target. I have used spybot and ad-aware again, and still found nothing more
    than cookies. Does anyone have any suggestions for any other programs?

    "pcbutts1" wrote:

    > That is correct.
    >
    > --
    >
    >
    > The best live web video on the internet http://www.seedsv.com/webdemo.htm
    > NEW Embedded system W/Linux. We now sell DVR cards.
    > See it all at http://www.seedsv.com/products.htm
    > Sharpvision simply the best http://www.seedsv.com
    >
    >
    >
    > "Bigdaddyhen" <Bigdaddyhen@discussions.microsoft.com> wrote in message
    > news:DFB5C5F9-6A96-499B-A057-B7604AE0FFCE@microsoft.com...
    > > So it is nothing on my system trying to connect out, but someone trying to
    > > get in?
    > >
    > > "pcbutts1" wrote:
    > >
    > >> There is no problem, your firewall is doing it's job by blocking it.
    > >> Someone
    > >> is trying to hack into your system.
    > >>
    > >> --
    > >>
    > >>
    > >> The best live web video on the internet http://www.seedsv.com/webdemo.htm
    > >> NEW Embedded system W/Linux. We now sell DVR cards.
    > >> See it all at http://www.seedsv.com/products.htm
    > >> Sharpvision simply the best http://www.seedsv.com
    > >>
    > >>
    > >>
    > >> "Bigdaddyhen" <Bigdaddyhen@discussions.microsoft.com> wrote in message
    > >> news:F66B19B5-D3D5-4D63-A922-B94044C11174@microsoft.com...
    > >> >I may have a problem with a netbus Trojan horse, I think.
    > >> >
    > >> > Once or twice a week Norton Internet Securities detects a possible
    > >> > netbus
    > >> > torjan horse attack. This has been happening for months. They are
    > >> > usually
    > >> > from different IP's, mostly from Europe or Asia. I have run Ad-aware
    > >> > and
    > >> > spybot, but have found nothing, and it keeps happening.
    > >> >
    > >> > What could the problem be, and how can I possibly fix it?
    > >> >
    > >> > Thanks
    > >>
    > >>
    > >>
    >
    >
    >
  6. Archived from groups: microsoft.public.windowsxp.help_and_support (More info?)

    Go here and run ShieldsUP
    http://grc.com/
    This will show if you have any ports that are not hidden............then do
    a google for ZoneAlarm and install it.
    Go back and run ShieldsUP again ......you should see a difference unless you
    are already using a good firewall.
    Also notify your Internet Service provider about these attacks.
    peterk

    --
    Never trust a computer you can't throw out the window. - Steve Wozniak
    "Bigdaddyhen" <Bigdaddyhen@discussions.microsoft.com> wrote in message
    news:D43D0C1B-409C-494F-AF4D-A99C38827F51@microsoft.com...
    >I am still a bit concerned. Since I posted this last, they have been
    >coming
    > almost everyday. They are not coming from random locations. At least
    > half
    > are coming from Korea. Why do these keeping coming, and from the relative
    > same location. I don't have a static IP. I am assuming not everyone gets
    > 4-5 a week, so why am I getting so many?
    > I am still concerned there is something on my system that is making me a
    > target. I have used spybot and ad-aware again, and still found nothing
    > more
    > than cookies. Does anyone have any suggestions for any other programs?
    >
    > "pcbutts1" wrote:
    >
    >> That is correct.
    >>
    >> --
    >>
    >>
    >> The best live web video on the internet http://www.seedsv.com/webdemo.htm
    >> NEW Embedded system W/Linux. We now sell DVR cards.
    >> See it all at http://www.seedsv.com/products.htm
    >> Sharpvision simply the best http://www.seedsv.com
    >>
    >>
    >>
    >> "Bigdaddyhen" <Bigdaddyhen@discussions.microsoft.com> wrote in message
    >> news:DFB5C5F9-6A96-499B-A057-B7604AE0FFCE@microsoft.com...
    >> > So it is nothing on my system trying to connect out, but someone trying
    >> > to
    >> > get in?
    >> >
    >> > "pcbutts1" wrote:
    >> >
    >> >> There is no problem, your firewall is doing it's job by blocking it.
    >> >> Someone
    >> >> is trying to hack into your system.
    >> >>
    >> >> --
    >> >>
    >> >>
    >> >> The best live web video on the internet
    >> >> http://www.seedsv.com/webdemo.htm
    >> >> NEW Embedded system W/Linux. We now sell DVR cards.
    >> >> See it all at http://www.seedsv.com/products.htm
    >> >> Sharpvision simply the best http://www.seedsv.com
    >> >>
    >> >>
    >> >>
    >> >> "Bigdaddyhen" <Bigdaddyhen@discussions.microsoft.com> wrote in message
    >> >> news:F66B19B5-D3D5-4D63-A922-B94044C11174@microsoft.com...
    >> >> >I may have a problem with a netbus Trojan horse, I think.
    >> >> >
    >> >> > Once or twice a week Norton Internet Securities detects a possible
    >> >> > netbus
    >> >> > torjan horse attack. This has been happening for months. They are
    >> >> > usually
    >> >> > from different IP's, mostly from Europe or Asia. I have run Ad-aware
    >> >> > and
    >> >> > spybot, but have found nothing, and it keeps happening.
    >> >> >
    >> >> > What could the problem be, and how can I possibly fix it?
    >> >> >
    >> >> > Thanks
    >> >>
    >> >>
    >> >>
    >>
    >>
    >>
  7. Archived from groups: microsoft.public.windowsxp.help_and_support (More info?)

    ShieldsUP found nothing at all. I am running NIS with their firewall.

    "peterk" wrote:

    > Go here and run ShieldsUP
    > http://grc.com/
    > This will show if you have any ports that are not hidden............then do
    > a google for ZoneAlarm and install it.
    > Go back and run ShieldsUP again ......you should see a difference unless you
    > are already using a good firewall.
    > Also notify your Internet Service provider about these attacks.
    > peterk
    >
    > --
    > Never trust a computer you can't throw out the window. - Steve Wozniak
    > "Bigdaddyhen" <Bigdaddyhen@discussions.microsoft.com> wrote in message
    > news:D43D0C1B-409C-494F-AF4D-A99C38827F51@microsoft.com...
    > >I am still a bit concerned. Since I posted this last, they have been
    > >coming
    > > almost everyday. They are not coming from random locations. At least
    > > half
    > > are coming from Korea. Why do these keeping coming, and from the relative
    > > same location. I don't have a static IP. I am assuming not everyone gets
    > > 4-5 a week, so why am I getting so many?
    > > I am still concerned there is something on my system that is making me a
    > > target. I have used spybot and ad-aware again, and still found nothing
    > > more
    > > than cookies. Does anyone have any suggestions for any other programs?
    > >
    > > "pcbutts1" wrote:
    > >
    > >> That is correct.
    > >>
    > >> --
    > >>
    > >>
    > >> The best live web video on the internet http://www.seedsv.com/webdemo.htm
    > >> NEW Embedded system W/Linux. We now sell DVR cards.
    > >> See it all at http://www.seedsv.com/products.htm
    > >> Sharpvision simply the best http://www.seedsv.com
    > >>
    > >>
    > >>
    > >> "Bigdaddyhen" <Bigdaddyhen@discussions.microsoft.com> wrote in message
    > >> news:DFB5C5F9-6A96-499B-A057-B7604AE0FFCE@microsoft.com...
    > >> > So it is nothing on my system trying to connect out, but someone trying
    > >> > to
    > >> > get in?
    > >> >
    > >> > "pcbutts1" wrote:
    > >> >
    > >> >> There is no problem, your firewall is doing it's job by blocking it.
    > >> >> Someone
    > >> >> is trying to hack into your system.
    > >> >>
    > >> >> --
    > >> >>
    > >> >>
    > >> >> The best live web video on the internet
    > >> >> http://www.seedsv.com/webdemo.htm
    > >> >> NEW Embedded system W/Linux. We now sell DVR cards.
    > >> >> See it all at http://www.seedsv.com/products.htm
    > >> >> Sharpvision simply the best http://www.seedsv.com
    > >> >>
    > >> >>
    > >> >>
    > >> >> "Bigdaddyhen" <Bigdaddyhen@discussions.microsoft.com> wrote in message
    > >> >> news:F66B19B5-D3D5-4D63-A922-B94044C11174@microsoft.com...
    > >> >> >I may have a problem with a netbus Trojan horse, I think.
    > >> >> >
    > >> >> > Once or twice a week Norton Internet Securities detects a possible
    > >> >> > netbus
    > >> >> > torjan horse attack. This has been happening for months. They are
    > >> >> > usually
    > >> >> > from different IP's, mostly from Europe or Asia. I have run Ad-aware
    > >> >> > and
    > >> >> > spybot, but have found nothing, and it keeps happening.
    > >> >> >
    > >> >> > What could the problem be, and how can I possibly fix it?
    > >> >> >
    > >> >> > Thanks
    > >> >>
    > >> >>
    > >> >>
    > >>
    > >>
    > >>
    >
    >
    >
Ask a new question

Read More

Trojan Microsoft Windows XP