| Forum Home | ||||
| Press F1 | ||||
| Thread ID: 45826 | 2004-06-04 06:46:00 | ShockRave Trojan / Nortons Firewall | Ladybug (3129) | Press F1 |
| Post ID | Timestamp | Content | User | ||
| 241643 | 2004-06-04 06:46:00 | Hi - Been getting this alot on our firewall. Practically every day, several times a day. The Security alert says Attempt to connect to local computer using the Shockrave Trojan horse blocked. Can someone explain this to me - is this outgoing from my computer not incoming? And do I need to do anything about it?? Thanks Bug |
Ladybug (3129) | ||
| 241644 | 2004-06-04 06:52:00 | Hello Ladybug :) > The Security alert says Attempt to connect to local > computer using the Shockrave Trojan horse blocked. > Can someone explain this to me - is this outgoing > from my computer not incoming? And do I need to do > anything about it?? How up to date is NAV on your computer? & Has NAV been funny at all? |
stu120404 (268) | ||
| 241645 | 2004-06-04 06:53:00 | > How up to date is NAV on your computer? & Has NAV > been funny at all? What I mean is has NAV been acting strange at all? |
stu120404 (268) | ||
| 241646 | 2004-06-04 08:02:00 | Hi Ladybug :) >Attempt to connect to local computer This is an incoming connection that is being blocked, nothing to worry about. I found looking at Firewall logs only makes you paranoid :D - you can set them only to alert you when there is a more significant event (can't remember the details of the alert settings available in the Norton Firewall). Jen |
Jen C (20) | ||
| 241647 | 2004-06-04 08:21:00 | Just to be sure that there is nothing on your computer do the following: Bring up your Task Manager by holding down Ctrl+Alt+Del. Under the Processes tab see if you have an item "shockrave.exe". If so, click on the End Process button. Please report back whether you found the shockrave.exe there or not. If it is not there now, wait until your firewall reports another attempt and then have a look. ;-) |
Fire-and-Ice (3910) | ||
| 241648 | 2004-06-04 08:56:00 | Hi No Stu nothing different with NAV. Jen C Thanks yes it does make you feel a bit like that. Thats the only alert that has been happening though nothing else so just thought I would check. Fire and Ice - Did what you suggested and no doesnt appear in that list but will try it again when I get another alert. Thanks all Bug :) |
Ladybug (3129) | ||
| 241649 | 2004-06-07 00:26:00 | Over the past fortnight I have worked on 5 different computers at 3 different sites. All have been attacked by ShockRave many times while online and been protected by Norton firewall. Guess there are just a lot of propagating units around. |
rodb (1561) | ||
| 241650 | 2004-06-23 01:50:00 | ** bump ** Ladybug is still having this problem with this :( Not all the time, but some time she is still getting that message from Nortons Firewall saying that it has block the ShockRave Trojan Does any one else have any more ideas? or is this something she has to live with? I am correct in saying that this Trojan is just scanning Ladybug computer ports? & northing else is going on???? Also here is a sal.neoburn.net ( screen shot that Ladybug sent me of that pop up message she gets… |
stu120404 (268) | ||
| 241651 | 2004-06-23 01:52:00 | Also here is a screen shot (sal.neoburn.net) that Ladybug sent me of that pop up message she gets… | stu120404 (268) | ||
| 241652 | 2004-06-23 02:04:00 | It appears to be a fairly common type of problem. Have a look through this thread (www.webuser.co.uk) and see if the files mentioned are on your system. You could also download and run a trojan detection program, eg The Cleaner (http://www.moosoft.com/) to ensure you do not actually have the trojan on your computer. Ensure that you update the program after installing before you run the scanner. |
tommy (2826) | ||
| 1 2 | |||||