Trojans coming through FTP!! Please make it stop! :(

[candiflip]

I am being attacked by Trojans through my WS-FTP Pro.. Can you please make this stop??? Norton is blocking them but what if one gets through that I am not protected against :confused:

Candice

[Croc Hunter]

What on earth are you FTP'ing to?. Install update and run Adaware (http://www.lavasoftusa.com/support/download/) on your computer.

[stevel]

You are misunderstanding the report. Norton is seeing a pattern of FTP access that it mistakenly believes is caused by a trojan. You can disable recognition of this trojan (I forget the name, but Norton tells you), or upgrade to a newer version of Norton that does not make this mistake.

[candiflip]

These are not trojans?

http://groups.msn.com/CandiceW80/pictures.msnw?action=ShowPhoto&PhotoID=12

EDIT:

When I took off info for my powweb site off of Ws ftp they stopped.

[IanS]

These are not trojans?

http://groups.msn.com/CandiceW80/pictures.msnw?action=ShowPhoto&PhotoID=12

EDIT:

When I took off info for my powweb site off of Ws ftp they stopped.I don't know if they are or are not trojans - but they're unlikely to be coming from Powweb. I'd follow the excellent advice given by Steve, update your Norton to the latest version and do a full system scan.

I'm not sure about the advice to 'allow communications' however - only do that if you are CERTAIN they're false positives. I've never encountered false positives except after installing communication software.

[stevel]

What stopped was the warning, because the Norton firewall no longer saw the pattern of FTP references it thought was suspicious. In past versions of the Norton firewall products, I would get these false alerts from time to time. I have not seen them with the 2005 versions.

[candiflip]

I do have 2005.

[jorgfe]

Stevel is right. I too have NIS 2005. I do a lot of FTPing to various accounts at PowWeb, and have never seen it come from PowWeb. In each case an examination of the NIS2005 error message that popped up in the lower right had my own PCs IP address. In other words, NIS was confused and thought my PC was attacking itself. That has probably happened 4-5 times this year. Could even be when I switched between DSL and dial-up, since I have both. I can pretty well assure you that it is nothing PowWeb is doing :)

[cyberCrank]

Getting the latest updates normally helps with both Norton firewall and Norton AV. Checking and cleaning your system of spyware is a good thing too IMO as Croc mentions, but maybe not related to your specific problem.

WS_FTP is good, but you may want to try the command-line FTP and maybe SmartFTP or CuteFTP to see if you get the same firewall response, if that is indeed what you are experiencing as likely the case and noted by Stevel and jorgfe.

Good Luck!
cyberCrank