1. Computer problem? Tech Support Guy is completely free -- paid for by advertisers and donations. Click here to join today! If you're new to Tech Support Guy, we highly recommend that you visit our Guide for New Members.

Bla Trojan... Unsure

Discussion in 'Virus & Other Malware Removal' started by SkieLok, Feb 8, 2003.

Thread Status:
Not open for further replies.
Advertisement
  1. SkieLok

    SkieLok Thread Starter

    Joined:
    Feb 8, 2003
    Messages:
    9
    I have Norton Internet Security (2002) and am using its firewall ability, and it has given me several alerts over the past few days that I have been suffering attacks from the backdoor "bla trojan". I know that programs have a nasty habit of labelling events incorrectly if they dont really know whats happening, so my Questions is, should I be concerned?

    I have been through the stages of finding out if it really is one, Ive logged my bootup sequence, been through my registry, checked my system.ini and startup. Ive used numerous trojan scanners and am currently using a system monitor to see what programs are running at all times. I have yet to pinpoint the trojan if that is truly what it is, but i still keep getting the warning from norton. What should I do from here?

    I have reason to believe that Norton is incorrectly labelling an event as the Bla Trojan, because it is a different IP each time. I have come across other posts of people claiming the same thing. Am I right in my assumptions that norton is wrong and this is just a result of me pinging a server and norton picking up on it returning information?
     
  2. $teve

    $teve

    Joined:
    Oct 9, 2001
    Messages:
    9,396
    welcome to T.S.G SKieLOK.

    norton is probably just doing its job.
    your a/v would have pick it up as well im sure.
    ive never use nortons firewall so i wouldnt know why it should actually tell you what is knocking at the door. but your always right to be suspicious......thats what keeps us bug free.

    there would definately be a suspicious registry entry here:
    HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
    someone else will add there comments im sure,someone with experience of NPF.

    good luck
    ;)
     
  3. SkieLok

    SkieLok Thread Starter

    Joined:
    Feb 8, 2003
    Messages:
    9
    Yea ive been there and i dont see anything unusual, Im more convinced than ever that norton is mislabeling this. Otherwise I would have found it by now, it only happens when im playing NWN connected to their servers.
    They really shouldnt say its a trojan unless it is :rolleyes:
     
  4. $teve

    $teve

    Joined:
    Oct 9, 2001
    Messages:
    9,396
    well backdoor.bla is undoubtably a trojan but you dont have it;)

    no idea as to why you should get the message.maybe notifying symantec of this would help.
     
  5. TOGG

    TOGG

    Joined:
    Apr 2, 2002
    Messages:
    5,899
    Skie Lok,

    Your first post suggests that your firewall is notifying you of 'attacks' ie: something attempting to get into, not out of, your system. If that's right you would seem to be OK but you might want to reconsider playing that particular online game or at least report the problem to the site concerned with a copy of your firewall log.

    However, if you're receiving notifications of something in your computer trying to get out, you may have a problem. You say you have tried numerous trojan scans. Here's one you might want to take a look at, if you haven't already. It's a 30 day trial program;
    http://www.simplysup.com/tremover/details.html
     
  6. TonyKlein

    TonyKlein Malware Specialist

    Joined:
    Aug 26, 2001
    Messages:
    10,392
  7. Sponsor

As Seen On
As Seen On...

Welcome to Tech Support Guy!

Are you looking for the solution to your computer problem? Join our site today to ask your question. This site is completely free -- paid for by advertisers and donations.

If you're not already familiar with forums, watch our Welcome Guide to get started.

Join over 733,556 other people just like you!

Loading...
Thread Status:
Not open for further replies.

Short URL to this thread: https://techguy.org/117664

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice