HydrogenAudio

Misc. => Off-Topic => Topic started by: Latexxx on 2003-12-28 09:12:55

Title: New virus spreading?
Post by: Latexxx on 2003-12-28 09:12:55
My firewall has blocked about 3000 attemps to connect to my pc just in 11 minutes. Is there a new virus spreading or is somebody trying to take over my pc? 
Title: New virus spreading?
Post by: Latexxx on 2003-12-28 10:12:33
Interesting. It has stopped now.
Title: New virus spreading?
Post by: WILU on 2003-12-28 11:19:13
It may be. Due to the CERT Poland:
http://www.cert.pl/index2.html?action=show...ws_more&nid=487 (http://www.cert.pl/index2.html?action=show_news_more&nid=487)
there is last time big activity on the 445tcp port. Maybe Blaster2 is incoming?
Title: New virus spreading?
Post by: ScorLibran on 2003-12-29 10:29:33
(Nie mówię po polsku.)    But I'll try checking the English language CERT website shortly.

I've checked my Norton Personal Firewall regularly since I installed it last week, and I've had 0 intrusion attempts.  It's blocked a lot of web content, but hasn't detected anyone trying to "push their way in".....yet.  I'll watch it even closer now.
Title: New virus spreading?
Post by: WILU on 2003-12-29 12:55:53
Quote
(Nie mówię po polsku.)    But I'll try checking the English language CERT website shortly.

Yeah sorry but I had only a link to the info in my native language. But most important is a graph, which shows bigger activity on this port than usually.
Title: New virus spreading?
Post by: Andavari on 2003-12-29 16:23:10
You need to block some ports, not all firewalls are pre-set to block certain ports.

Block Incoming Common Ports - TCP and UDP:
21,22,23,25,42,53,67,68,69,79,80,98,110,113,135,137,139,143,389,443,500,1002,1024-1030,1720,1900,5000,8080

Block Incoming Trojan Horse Ports - TCP and UDP:
1-79,5500-65535,12345,12346,12456,20034,31337,54320,54321

Block Incoming and Outgoing RPC (Remote Procedure Call) - TCP and UDP:
135,139,445,4444
Title: New virus spreading?
Post by: yq on 2003-12-30 19:50:20
Blaster? Not again. Well, when my avaluation version of windows 2003 (PL B)) expires I change to linux.


p.s.
ok, ok, it's not really on topic, but this is off topic forum after all, and I have to test my new settings somewhere 

p.p.s
edit:grammar
Title: New virus spreading?
Post by: Latexxx on 2003-12-30 20:27:44
Quote
avaluation version of windows 2003 (PL B)) expires I change to linux.

I also have one  . It just isn't installed currently.