Seriously...what the hell?

[GT40FIED]

For the past couple days I've been getting a notification message from Norton that it's blocking an internet worm. Apparently it's called "TransScout". From what I've been able to gather it's a remote access tool and there's no way in hell I'm letting anything remotely like that onto my PC. I even did on Whois search on ARIN and it came back as RIPE Networks...some network in Amsterdam. I don't have a clue what to do (if anything) about getting this to stop. It's hitting on port 2000 (or sometimes 1047...give or take a few ports in either instance) so I know it's not some generic or spam port probe like it would be if it were on port 80, 1026, or 1027. I want to give this backdoor bastard the finger...thoughts?

[blind34_1]

wow. google turns up this, and some other site in russian. :

Port:
1999
Protocol:
TCP / UDP
Name:
tcp-id-port
OS:
Not Specified
Description:
cisco identification port
Known Trojans:
TransmissionScout (aka TransScount), Backdoor
Security Focus:
Not Specified

hows that for not helpful? At least norton is doing its job. Unfortunatly I don't have much experience dealing with worms. I've got no solutions as of yet, but I'll be asking/searching around. I'll get back to you if I find anything.