Printable View
no, its not enough,
the anti-virus program made a "boot disk"
that is so if you get a virus that wont allow you to boot windows, it contains some system files that will allow you to boot into windows and remove the virus.
if your scared to format your hard drive, I am sure if you bring it to a copmuter store, they will happy to do all that for you.. for a small fee.....
Matthew, there will probably be more than one person snooping around your PC with Sub Seven if you haven't yet removed the server. I've got firewall software running and I get scanned on average about 3 times an hour by different users on the ports that Sub Seven operates on.
You don't need to re-install windows. Just invest in some Firewall software. Get Norton Personal Firewall (about £30 from amazon.co.uk). It blocks connection attempts on most ports known for trojan use, including Sub Seven. The worst trojan in my view is Back orifice. People scan me about 4-5 times an hour using this trojan sometimes. bloody annoying.
Anyway, once you have the firewall software running, invest in an antivirus program and remove the suspected Sub Seven Server from your HD.
(I would not recomend connecting to the internet until you have firewall software installed (so you can block connection attempts), or have removed the server using an antivirus program)
I hope I explained this clearly, and i hope you get your PC sorted out. In future, don't run ANY executable files from anyone you do not COMPLETELY trust, this includes friends you are not sure of. Better safe than sorry :)
Anyway, post back if you need more advice. hope i helped.
Later
REM
Actually, I have been using netstat to see if anyone's connected to me, but it's only me. Weird thing though: When I go on to icq, anyone who speaks to me is connected to me. I know that when you chat with each other, you have to send messages to each other. ICQ does not tell the person your IP address, but when I use netstat, the other person has connected to me, so I assume this okay, correct? I will try to find a good firewall, just hope it won't screw up my computer by creating a conflict or anything.
Well, i just looked through my firewall logs and the last attempt on connecting to m PC via Sub Seven was at: 10:12pm GMT. Check the log details below:
Bastard.Quote:
Date: 10/08/00 Time: 22:12:24
Rule "Default Block Backdoor/SubSeven Trojan" blocked (la8g9,27374).
Details: Inbound TCP connection
Local address,service is (la8g9,27374)
Remote address,service is (213.1.0.197,1093)
Process name is "N/A"
Later
REM
Matthew, If i were you I would seriously disconnect from the net and not come back online until i got the subseven thing sorted. DUde, this is serious. Some 10 year old from TaiWan could be screwing your Windows Folder over as you read this.
As for buying FireWall software, i would recommend Norton Personal Firewall. Go get it tomorrow if you can. Then at least you can block connection attempts until you get antivirus software.
Disconnect now!
Later
REM
Ok, I download the program, http://www.zonelabs.com, that Sophtware gave. And I really like it. Plus, it's for a reasonable price. Now I feel much safer because when I tried to connect to icq or even use Internet Explorer, it had alerted me that something was trying to connect. Now I feel better. Thanks for your help guys. Think this post'll go on and on? Maybe :D. Anyway, SubSeven does look cool from the User's point of view (not the victim's). It's neat, but again, it's used for wrong! At least we have some good programmers out there. Especially, here on Vb-World :). Helping each other out answering questions and stuff. Wish the world could be like that. *Hugs a tree*..hehe, jk ;].