SubSeven/Backdoor trojan?

Factual Questions
1

The firewall I have installed, Norton Personal Firewall, keeps giving me security alerts, blocking the same trojan all the time: the SubSeven or Backdoor trojan. What does this trojan hide in? I haven’t downloaded anything in a while.

2

You can find info on the trojan as well as which software can eliminate it here .

3

Thanks, DMC. I’ll check it out.

4

I’m using Norton Firewall and Norton anti-virus (both 2002 versions), and I get the BackDoor/SubSeven alert all the time. However, the anti-virus doesn’t pick it up.

I can’t figure out if

  1. I have this trojan and NAV can’t see it
    or
  2. Norton Firewall is misinterpreting something as a trojan
    or
  3. Norton Firewall is giving me fake alert after fake alert so I don’t feel I’ve wasted my money.

Any ideas?

5

Hm, maybe it’s a bug in the system then. Pretty weird bug though.

6

glilly,

For Norton AV, use these instructions (this assumes you have the Backdoor.SubSeven trojan and not another version of SubSeven.

7

If it reports it’s incoming, it means that some other computer is scanning for computers infected with SubSeven. It’s doesn’t necessarily mean you’re infected. They scan thousands of addresses and aren’t targeting you specifically nor trying to infect you with Subseven.