Problem solve Get help with specific problems with your technologies, process and projects.

Information on Trojan backdoor g-1

My firewall has detected infection by Trojan backdoor-g-1. It uses port 1243. Neither Symntec nor McAfee has a definition or recognition of this Trojan. Have you heard of it? What do you know of it?

My general rule of thumb when confronted with a new virus, Trojan or worm, is to take a look at what a number of antivirus companies are saying about it.

Searching on Google is a good way to find out if someone has written something, and most antivirus and other malware-detection companies now offer online encyclopedias one can search. One problem that arises is that antivirus companies, after complaints from users for more than 10 years, still do not use the same name for each critter. Maybe the user community needs to start a petition?

In any case, you should be aware that antivirus software is not generally the best at detecting Trojans. There are more specialized companies working in this arena, such as PestPatrol and Spybot.

Not knowing which firewall you are using, it would seem that it has detected "Backdoor/SubSeven Trojan". Here is some info on it: http://www.europe.f-secure.com/v-descs/subseven.shtml

For more information on this topic, visit these other SearchSecurity.com resources:
  • Ask the Expert: Removing Trojan not detected by antivirus software
  • Ask the Expert: Finding a Trojan horse on a home computer
  • Virus Prevention Tip: Backdoor Trojan making the rounds

  • This was last published in February 2003

    Dig Deeper on Malware, virus, Trojan and spyware protection and removal

    Start the conversation

    Send me notifications when other members comment.

    Please create a username to comment.