Trojan removal

[Nukemall]

My firewall keeps giving me this msg Rule
"Default Block Backdoor/SubSeven Trojan horse" blocked (151.198.145.49,27374)

From which i can safely infer that i have a trojan, but i cant seem to find it. Crappy norton antivirus dosent seem to function in cooperation with the firewall and delete the virus when that happens and a full system scan reveals nothing. Any suggestions? I must say the worst thing about norton tho is that it dosent scan my registry or at least i cant get it to do so, which makes it pritty ****ty.

[Kendan]

I am pretty sure the firewall is just telling you that it blocked a subseven scan. Which is someone scanning IP's searching for subseven infected computers.

[pik4chu]

Originally posted by Kendan
I am pretty sure the firewall is just telling you that it blocked a subseven scan. Which is someone scanning IP's searching for subseven infected computers.
Thats what it sounds like to me too. was it blocked inbound or outbound? Thats what will tell you.

[nahmus]

you can get "the cleaner" there are eval version available on download.com Its like nortons but for trojans. it seems to be very reliable. I've used it for over 2 years now and still clean.

[Nukemall]

Yep sure enough the cleaner found one that norton missed. Tho its seems all the backdoor requests are inbound not outbound so no ones getting thru.

[nahmus]

chances are that the trojan got through once and reported back to wherever. now that you have tightened up security its trying to re-establish contact. Do you have a stadic IP? If so you might want to try to get it changed.