Default Block Bla Trojan horse

[chelsea86]

hi i am a newbie so don't hurt me please, both in basic internet security and bluetack terms, i am just getting fricking annoyed because I keep on getting this default bloack bla trojan horse alert from my norton whenever i log onto the internet. I have a wireless network set up with two desktops, the problems are with my main computer which all other computers access the internet from, I have norton on this computer and everything is secure with wep oand mac filtering on my network. However, whenever i connect to the internet it comes up with this warning, that a computer with ip address 88.105.190.85 has tried to access your computer using default block bla trojan horse. I have the security loogs from these attacks:

for 23/01/09:
Details: Rule "Default Block Bla Trojan horse" blocked (DELL(192.168.0.1),1042).
Inbound UDP packet.
Local address,service is (localhost,1042).
Remote address,service is (DELL(192.168.0.1),1042).
Process name is "N/A".

for 24/01/09:
Details: Rule "Default Block Bla Trojan horse" blocked (88.105.190.85,1042).
Inbound UDP packet.
Local address,service is (localhost,1042).
Remote address,service is (88.105.190.85,1042).
Process name is "N/A".

what does this mean am i under attack by a trojan horse, norton is making me think that i have a trojan on my system and every time i access the internet it is trying to transmit my information to its server. I have scanned with norton and adware they found nothing, but i know that they dont check everything anyway, should i do yet another system restore factory settings like i always do, what does everyone think it is.

any help gratefully recieved
danny

[wige]

Do you have a VPN running on port 1042? I think that is the most common cause of this alert.

Beyond that, there is absolutely nothing you need to do internally on your network. No extra scans, and no system restore. This message is telling you that it detected and successfully blocked a suspicious incoming message. It does not indicate a problem on your network.

This could be as simple as the router attempting to connect to a service on the computer (as indicated by the IP in the first message) or an external port scan. If the network is on a dynamic IP address, it could also be an indication that a previous computer on that IP was infected by the Trojan.

You might want to check your router though.