My ports are stealthed, so how can Trojans be attacking?

A

Antrobus

I keep getting alerts that various Trojans (Sockets de Trois, Backdoor
Seven, as I recall) are attempting to do whatever it is they do. What I
can't fathom is how they can see my computer, which has its ports
stealthed, and Symantec's security check says that's so. Is it possible
they are on my system, but the Anti-virus program can't find them while
the Firewall does? Completely clueless about this... can some
knowledgeable person clear it up? Using Symantec AV and Firewall,
ZoneAlarm plus and Pest Patrol. They all think all is swell.
 
O

optikl

Antrobus said:
I keep getting alerts that various Trojans (Sockets de Trois, Backdoor
Seven, as I recall) are attempting to do whatever it is they do. What I
can't fathom is how they can see my computer, which has its ports
stealthed, and Symantec's security check says that's so. Is it possible
they are on my system, but the Anti-virus program can't find them while
the Firewall does? Completely clueless about this... can some
knowledgeable person clear it up? Using Symantec AV and Firewall,
ZoneAlarm plus and Pest Patrol. They all think all is swell.

You're probably getting intrusion detection alerts that indicate ports
associated with Sockets de Trois are being scanned. Write down the exact
wording of the alert and post here.
 
D

David

Because stealthing simply keeps your computer from responding to the
various probes and that is all.
 
M

mzlindyone

I keep getting alerts that various Trojans (Sockets de Trois, Backdoor
Seven, as I recall) are attempting to do whatever it is they do. What I
can't fathom is how they can see my computer, which has its ports
stealthed

They can't, they're scanning semi-randomly by IP#. "Stealthed" means
they get no answer back. Your computer still receives the incoming
packets, obviously, or your firewall couldn't "detect" them.

You can safely ignore Norton's overreaction to these port scans. It's
bragging about stopping something that isn't a threat to you as long
as you aren't infected. In fact I'd disable any popup notifications
of blocked incoming packets you're getting and just let it do its job
SILENTLY.

The next time you have a firewall question, alt.comp.security is
thataway --------->>>

Carol
 
G

Gigi

I keep getting alerts that various Trojans (Sockets de Trois, Backdoor
Seven, as I recall) are attempting to do whatever it is they do. What I
can't fathom is how they can see my computer, which has its ports
stealthed, and Symantec's security check says that's so. Is it possible
they are on my system, but the Anti-virus program can't find them while
the Firewall does? Completely clueless about this... can some
knowledgeable person clear it up? Using Symantec AV and Firewall,
ZoneAlarm plus and Pest Patrol. They all think all is swell.

If the firewall stops them, they never get as far as the anti-virus
program.
Gigi
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Similar Threads


Top