Merged: W32 Blaster Virus - Page 11

BenH · 13-08-2003, 21:00

Quote:

Originally posted by grum1978

Can we please try and keep this on topic as it is an important and informative thread at the moment

I don't think people should have to go through pages of off topic remarks as the thread is getting big enough as it is

sorry missed this.

By your command.

13-08-2003, 21:00

I've had 156 hits on 135 since 18.30 & 15 on 445

BenH · 13-08-2003, 21:18

Quote:

Originally posted by homealone
I've had 156 hits on 135 since 18.30 & 15 on 445

Still no hits here. I was playing about with a 2k machine earlier today using zone alarm as a firewall. I activated the stealth option and that seemed to dramatically reduce the number of hits.

Prehaps worth a try.

Best,

Ben

ian@huth · 13-08-2003, 21:48

Quote:

Originally posted by BenH
Still no hits here. I was playing about with a 2k machine earlier today using zone alarm as a firewall. I activated the stealth option and that seemed to dramatically reduce the number of hits.

Prehaps worth a try.

Best,

Ben

Lol. If an unprotected system gets infected and tries to infect yours it will not know whether you have a firewall or not. All you can do is prevent hits from getting through your firewall, not prevent them from hitting it.

carlingman · 13-08-2003, 21:53

Related note.

As I have the alerts turned off in Zone Alarn and usually just let it do its job etc.

Where can you see the port number the hits are attacking.

ian@huth · 13-08-2003, 21:58

Quote:

Originally posted by carlingman
Related note.

As I have the alerts turned off in Zone Alarn and usually just let it do its job etc.

Where can you see the port number the hits are attacking.

I use a program called Visual Zone which is free from

http://visualize.phenominet.com/

Try it, you'll like it.

danielf · 13-08-2003, 21:59

Quote:

Originally posted by carlingman
Related note.

As I have the alerts turned off in Zone Alarn and usually just let it do its job etc.

Where can you see the port number the hits are attacking.

Not quite sure if this is what you're after, but under 'alerts' you have the option of showing the popup window, or logging alerts to a file. Enable either.

carlingman · 13-08-2003, 22:06

Thx people but have turned of the alert pop ups as it get quite annoying but however found if i look at the alerts in zone alarm the bottom box shows the port.

Only had 10 or so in the last couple of hours so not too bad.

Ramrod · 13-08-2003, 22:10

Quote:

Originally posted by Incognitas
So why is W32 Blaster Virus the main part of the thread title?

Incog

Fu*k knows....this threads got nothing to do with it

Ramrod · 13-08-2003, 22:12

Quote:

Originally posted by ianathuth
I use a program called Visual Zone which is free from

http://visualize.phenominet.com/

Try it, you'll like it.

McAfee firewall does much the same

ian@huth · 13-08-2003, 22:18

Quote:

Originally posted by carlingman
Thx people but have turned of the alert pop ups as it get quite annoying but however found if i look at the alerts in zone alarm the bottom box shows the port.

Only had 10 or so in the last couple of hours so not too bad.

If you load Visual Zone you can keep the popups turned off. Visual Zone just takes the log file from Zone Alarm and produces a much better and more detailed report. Just leave its icon sitting in the system tray and use it to open visual zone up every now and then to see what is happening. Mine is showing over a thousand hits of various types today. You can rearrange the output in many ways and call up attack details on each attack including whois and location of attacker. Go on and give it a try.

13-08-2003, 22:19

Quote:

Originally posted by BenH
Still no hits here. I was playing about with a 2k machine earlier today using zone alarm as a firewall. I activated the stealth option and that seemed to dramatically reduce the number of hits.

Prehaps worth a try.

Best,

Ben

Thanks Ben

sorry - I should have said attempted hits - I'm behind a NAT router & was just relaying my log results.

I do, also run Zone Alarm Pro - which, so far shows no activity.

Gaz

carlingman · 13-08-2003, 22:39

Quote:

Originally posted by ianathuth
If you load Visual Zone you can keep the popups turned off. Visual Zone just takes the log file from Zone Alarm and produces a much better and more detailed report. Just leave its icon sitting in the system tray and use it to open visual zone up every now and then to see what is happening. Mine is showing over a thousand hits of various types today. You can rearrange the output in many ways and call up attack details on each attack including whois and location of attacker. Go on and give it a try.

Thx for that, where do i find this visual zone ??

Running ZA Pro Version 3.5.169.002

Thx again.

13-08-2003, 22:50

Quote:

Originally posted by carlingman
Thx for that, where do i find this visual zone ??

Running ZA Pro Version 3.5.169.002

Thx again.

http://www.visualizesoftware.com/

latest ZoneAlarm Pro is 4.0.123.012

ian@huth · 13-08-2003, 22:51

Quote:

Originally posted by carlingman
Thx for that, where do i find this visual zone ??

Running ZA Pro Version 3.5.169.002

Thx again.

http://visualize.phenominet.com/

EDIT. Homealone beat me to it. Both addresses lead to same info.