Korean Job Discussion Forums

[scarneck]

This popped up today:

"A computer with the ip address of: 220.94.225.96 attempted to connect to your computer using Default Block Netbus Trojan Horse

I clicked the hyperlink on the IP address and it said it came from KORNET, Korea TELECOM.

I just had my Megapass premium changed to lite. (plus the bastards were charging me for an extra connection, I moved and had an extra wireless connection at the old place, they kept charging me)

This came from clicking the 'details' link


inetnum: 220.88.0.0 - 220.95.255.255
netname: KORNET
descr: KOREA TELECOM
descr: Network Management Center
country: KR
admin-c: DL248-AP
tech-c: GK40-AP
remarks: ***********************************************
remarks: KRNIC of NIDA is the National Internet Registry
remarks: in Korea under APNIC. If you would like to
remarks: find assignment information in detail
remarks: please refer to the NIDA Whois DB
remarks: http://whois.nida.or.kr/english/index.html
remarks: ***********************************************
status: ALLOCATED PORTABLE
notify: [email protected]
mnt-by: MNT-KRNIC-AP
changed: [email protected] 20021231
changed: [email protected] 20041007
source: APNIC


% APNIC database, last updated 20050721 23:00:32

Norton Internet Security picked it up..

Anyway, should I be worried about them using a TROJAN? or is this just usual business?

Thanks[/b]

[Bulsajo]

Someone with an infected computer and a kornet internet connection most likely.


What program 'popped up'?

[scarneck]

Norton Internet Security caught it. It just displayed a pop up dialogue box telling me it caught it. I was just curious if it was maybe a legit intrusion by KORNET because I just downgraded their service..

Thanks.

[Bulsajo]

You'd have to ask Korent and it's not unheard of for Norton to give a false-positive, but I'd say if it has 'Trojan' in the name it's nothing you want on your computer.