Security

Ask something
Discussion Locked

BO 2000

0 helpful
9 replies

by rasta1980

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

I have Norton internet security installed on my computer, I have a DSL connection to the internet. When ever I access the web I get a report that BO is trying to access my computer. My firewall is set upi to block Back Orifice..
Those that mean that I have the this trojan on my computer. I have run a virus scan and it did not detect it, is there another way I can look for it.
Thanks for your help

9 replies

by zero2nine

Actually yes... However back when we had fun installing it on eachother's machines on a closed LAN we found that it creates a directory in windows , windows\system or windows\system32 with "no name" and no extension... Try looking manually in stead of looking for nothing...

But... (seems that it HAS to be in all my posts) it could be NetBus. As I recall the guys who makes these "programs" also makes an uninstall-feature... You could also try to look for that.

Good luck mate, I fear you might need it =)

Zero2ninE

by goldjag

It simply means that someone is attempting a Back Orifice (BO) attack on your system. The person initiating the attack is doing so by sweeping the internet for any computers that have the virus onboard. Since you do not have the trojan resident on your machine, you have nothing to worry about. Also, since your firewall is set up to block any BO attacks, his sweep resulted in no response from your machine. As far as he is concerned, you don't exist.

To more thoroughly answer your question, to find any incidence of BO infection, you need to use a program like BODETECT v3.5 (available from many download sites). There is a manual method of detecting BO but that only works if the person who sent you the trojan in the first place, didn't modify the original file at all. The automatic method is far easier. Hope that helps!

This discussion is closed to new replies.