You might also want to check out Back Officer Friendly from the NFR folks.
It can emulate Trojans and capture any attempts to activate a Trojan on your
system. It is not a free product though.
And BlackIce (if configured to block /intercept the Trojan) will intercept
any attempts to connect to your box ... Though I don't know for sure that it
will if the Trojan is already installed. Guess it comes down to whoever gets
the port first...
> ----- Original Message -----
> From: <[EMAIL PROTECTED]>
> To: <[EMAIL PROTECTED]>
> Sent: Wednesday, March 01, 2000 8:56 PM
> Subject: RE: Quick qeustion about BlackIce Defender.
>
>
> It generally doesn't block outbound traffic, but shouldn't it look for
> the incoming connection to the Trojan? The literature for the product
> boasts a vaunted intrusion detection algorithm that can identify
> malicious incoming traffic, presumably including traffic for known
> Trojans.
>
> -----Original Message-----
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED]]On Behalf Of Steve Riley (MCS)
> Sent: Tuesday, February 29, 2000 8:20 PM
> To: 'Fogel, Avi'; '[EMAIL PROTECTED] '; '[EMAIL PROTECTED] '
> Subject: RE: Quick qeustion about BlackIce Defender.
>
>
> Correct. BID doesn't perform any kind of outbound protection.
>
> I've been playing with Zone Alarm from ZoneLabs. It does offer outbound
> protection, plus it's free. You might consider taking a look at it.
> http://www.zonelabs.com.
>
> ___________________________________________________________
> Steve Riley
> Microsoft Telecommunications Consulting in Denver, Colorado
> e-mail: mailto:[EMAIL PROTECTED]
> call/page: +1 303 521-4129 (cellular)
> SMS: mailto:[EMAIL PROTECTED] (100 characters)
> For MS Internet info see http://www.microsoft.com/isn/
> Applying computer technology is simply finding the right wrench to pound
> in
> the correct screw.
>
>
> -----Original Message-----
> From: Fogel, Avi [mailto:[EMAIL PROTECTED]]
> Sent: Sunday, February 27, 2000 7:48 AM
> To: '[EMAIL PROTECTED] '; '[EMAIL PROTECTED] '
> Subject: RE: Quick qeustion about BlackIce Defender.
>
>
> For a host based filter to block Trojans from doing their damage it
> needs
> the ability to be configured such that it blocks specific outbound
> services
> / ports.
> I do not believe Black Ice has this capability.
>
> Avi
>
> -----Original Message-----
> From: [EMAIL PROTECTED]
> To: [EMAIL PROTECTED]
> Sent: 2/27/00 2:02 AM
> Subject: Quick qeustion about BlackIce Defender.
>
> Hi everyone. Im pretty new to the whole Firewall scenario. I am now
> running
> BlackIce Defender on my pc (win95). My question is: If i somehow get
> infected with a trojan such as Netbus or BO2k which opens a backdoor in
> my
> computer and allows access for others, will BlackIce stop the attacker
> from
> getting into my computer using that backdoor?
>
> Thanx in advance.
>
> Dxfrost
> -
> [To unsubscribe, send mail to [EMAIL PROTECTED] with
> "unsubscribe firewalls" in the body of the message.]
> -
> [To unsubscribe, send mail to [EMAIL PROTECTED] with
> "unsubscribe firewalls" in the body of the message.]
> -
> [To unsubscribe, send mail to [EMAIL PROTECTED] with
> "unsubscribe firewalls" in the body of the message.]
>
> -
> [To unsubscribe, send mail to [EMAIL PROTECTED] with
> "unsubscribe firewalls" in the body of the message.]
>
>
>
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
