Hacker or Spy

[Guest]

Hello,

I have been dealing with someone I believe has hacked
into my computer. My computer is a laptop and I keep it
with me all the time so...no could have gotten into it.
Here is what happens: I get a pop up window that says
Security Alert/Attempt to connect to local computer using
the NetBus Trojan Horse detected/Do you want to view the
Alert Assistant?/No Recommended/Show
Details/Time:12:35/Date:2/4/05/Protocol:TCP
(Inbound)/Remote Address 172.175.134.55:2347

I have Norton Internet Security with Firewall. I use
Spybot and I have downloaded the Service Pack 2. How can
I get rid of this HACKER? Any help would be greatly
appreciated! I just subscribed to PC World in hopes of
keeping up with new technology! I hope it helps!

Frustrated

 

[Guest]

heres the skinny on this trojan

http://securityresponse.symantec.com/avcenter/venc/data/net
bus.160.w95.html

the access attempt is coming from a dumb AOLer who
probably has a zombie for a computer (ip address goes back
to an aol netblock, provided its not spoofed).
ACAF8637.ipt.aol.com = [ 172.175.134.55 ] the additional 4
numbers represent the port the zobmie is broadcasting from

use a trojan scanner (many are available, but pick a real
one, not one that adds more malware to your computer.. in
short pick one then google it to see what folks are saying
about it.)

 

[Bill Sanderson]

Your advice highlights a big problem in this area. If you look up a given
piece of commercial adware or spyware, you'll get descriptive hits from a
number of web sites. Unfortunately, a fair number of such sites and removal
products touted therein are run by the spyware vendors themselves. This is
yet another reason why we need some help from the big gorillas in the
industry to maintain the library of information that provides the basis for
identification and removal. When I need to find a removal tool, I usually
search on the name of the object to be removed and symantec, knowing that
Symantec provides removal tools for significant problems, and that those
tools are available to everyone, not just their existing customers, and are
safe--if you don't have the threat in place, running the tool won't break
anything.

There are a number of highly reputable small vendors and apps in this field,
but there are even more that are in the questionable category--and the
beauty of the HTML at the web site is no guide.

The other thing that this thread illustrates which is also common,
unfortunately, is the thinking that a firewall or an antivirus app will
prevent trojans. There are trojans that infect via vulnerabilities in the
OS or individual apps--browsers, for example. However, most of them are
invited in by the user of the PC, thinking that they are something benign.
The Norton writeup mentions that this trojan may be included as part of a
downloaded game.
--
FAQ for MS AntiSpy http://www.geocities.com/marfer_mvp/FAQ_MSantispy.txt

heres the skinny on this trojan

http://securityresponse.symantec.com/avcenter/venc/data/net
bus.160.w95.html

the access attempt is coming from a dumb AOLer who
probably has a zombie for a computer (ip address goes back
to an aol netblock, provided its not spoofed).
ACAF8637.ipt.aol.com = [ 172.175.134.55 ] the additional 4
numbers represent the port the zobmie is broadcasting from

use a trojan scanner (many are available, but pick a real
one, not one that adds more malware to your computer.. in
short pick one then google it to see what folks are saying
about it.)

-----Original Message-----
Hello,

I have been dealing with someone I believe has hacked
into my computer. My computer is a laptop and I keep it
with me all the time so...no could have gotten into it.
Here is what happens: I get a pop up window that says
Security Alert/Attempt to connect to local computer using
the NetBus Trojan Horse detected/Do you want to view the
Alert Assistant?/No Recommended/Show
Details/Time:12:35/Date:2/4/05/Protocol:TCP
(Inbound)/Remote Address 172.175.134.55:2347

I have Norton Internet Security with Firewall. I use
Spybot and I have downloaded the Service Pack 2. How can
I get rid of this HACKER? Any help would be greatly
appreciated! I just subscribed to PC World in hopes of
keeping up with new technology! I hope it helps!

Frustrated


.

 

[Guest]

Just because someone is scanning for netbus on your
computer, it doesn't mean that you are infected. Someone
is looking for people who are infected to access their
computer.

 

[Bill Sanderson]

You're right! I didn't read the original post carefully enough, I'm afraid.
This is Norton advertising what a good job it is doing, and the best course
of action is to tell it to shut up and stop interrupting you--just do the
job.