My ports are stealthed, so how can Trojans be attacking?

  • Thread starter Thread starter Antrobus
  • Start date Start date
A

Antrobus

I keep getting alerts that various Trojans (Sockets de Trois, Backdoor
Seven, as I recall) are attempting to do whatever it is they do. What I
can't fathom is how they can see my computer, which has its ports
stealthed, and Symantec's security check says that's so. Is it possible
they are on my system, but the Anti-virus program can't find them while
the Firewall does? Completely clueless about this... can some
knowledgeable person clear it up? Using Symantec AV and Firewall,
ZoneAlarm plus and Pest Patrol. They all think all is swell.
 
Antrobus said:
I keep getting alerts that various Trojans (Sockets de Trois, Backdoor
Seven, as I recall) are attempting to do whatever it is they do. What I
can't fathom is how they can see my computer, which has its ports
stealthed, and Symantec's security check says that's so. Is it possible
they are on my system, but the Anti-virus program can't find them while
the Firewall does? Completely clueless about this... can some
knowledgeable person clear it up? Using Symantec AV and Firewall,
ZoneAlarm plus and Pest Patrol. They all think all is swell.
Click to expand...

You're probably getting intrusion detection alerts that indicate ports
associated with Sockets de Trois are being scanned. Write down the exact
wording of the alert and post here.
 
Because stealthing simply keeps your computer from responding to the
various probes and that is all.
 
I keep getting alerts that various Trojans (Sockets de Trois, Backdoor
Seven, as I recall) are attempting to do whatever it is they do. What I
can't fathom is how they can see my computer, which has its ports
stealthed
Click to expand...

They can't, they're scanning semi-randomly by IP#. "Stealthed" means
they get no answer back. Your computer still receives the incoming
packets, obviously, or your firewall couldn't "detect" them.

You can safely ignore Norton's overreaction to these port scans. It's
bragging about stopping something that isn't a threat to you as long
as you aren't infected. In fact I'd disable any popup notifications
of blocked incoming packets you're getting and just let it do its job
SILENTLY.

The next time you have a firewall question, alt.comp.security is
thataway --------->>>

Carol
 
I keep getting alerts that various Trojans (Sockets de Trois, Backdoor
Seven, as I recall) are attempting to do whatever it is they do. What I
can't fathom is how they can see my computer, which has its ports
stealthed, and Symantec's security check says that's so. Is it possible
they are on my system, but the Anti-virus program can't find them while
the Firewall does? Completely clueless about this... can some
knowledgeable person clear it up? Using Symantec AV and Firewall,
ZoneAlarm plus and Pest Patrol. They all think all is swell.
Click to expand...

If the firewall stops them, they never get as far as the anti-virus
program.
Gigi
 
Back
Top