Sub7 Help !

[werewolf]

Hey,

I think im infected with a sub7 trojan.

I was not using a virus scanner, and I got infected with the sub7.

But now ive formatted and re-installed xp, and now using a fully updated norton 2004 internet security and all the xp hotfixes.

But I think the sub7 is still on my computer! Because sometimes the firewall is coming up that it blocked a subseven trojan attempt, which would meen its on my system?! How do i get rid of it?

Help please!

You are in breach of the forum rules and are being issued with a formal warning. Please desist from starting
new threads for the same problem.
/ Moderator offline

[offline]

I have not heard of sub7 for years. Try this link below:


http://www.geocities.com/merijn_bellekom/new/sub7guide/

are u sure you are still infected? Could just be a "friend" who
zapped you in the 1st place, trying to connect by the sub7 server
protocol - i.e. the firewall is stopping an outside attack.

[werewolf]

I don't think it was a friend that installed it, it was someone I didn't know very well from msn messanger.

But I deleted my c: drive, formatted and re-installed xp! It should be away...but ive had it come up a few times people have been trying to connect to me with sub7.

I think I also have open ports that should not be open

Any ideas?

[offline]

Go here: http://scan.sygate.com/

and select "Scan Now".

Then select "Trojan Scan" when the 1st test has finished.

[werewolf]

Ok ill do that.

Why did I get a warning though, where did I start a new thread for the same problem?

[werewolf]

Operating System = Windows XP
Browser = Microsoft Internet Explorer 6.0

Trying to find out your computer name...

Unable to determine your computer name!


Trying to find out what services you are running...

Unable to detect any running services!




You have blocked all of our probes! We still recommend running this test both with
and without Sygate Personal Firewall enabled... so turn it off and try the test again.


Thats what it said for the first test, then the trojan test.
But, i tryed it again with norton firewall off and...

Trojan 5000 OPEN Bubbel, Back Door Setup, Sockets de Troie
You are not fully protected:
We have detected that some of our probes connected with your computer.

[offline]

You are clean then. Nothing to worry about. Disregard the
report about port 5000. That is what everybody gets with
out a firewall. Bubbel, Back Door & Sockets de Troie are
all past trojans that try to explot port 5000 which must remain open.
With a firewall enabled and an active update antivirus, you should be protected.