Firewall, loads of attacks?
Firewall, loads of attacks?
Author
Discussion

Byff

Original Poster:

4,427 posts

288 months

Saturday 25th January 2003
quotequote all
I ran Zonealarm firewall since getting ADSL two years ago, but recently, I cleansed my system with a complete reformat and reinstall.

I didn't get round to putting zonealarm back on and have been running the internet etc with no firewall for about 2-3 weeks.

I've just reinstalled it and by jingo - i've had my computer attacked nearly every 3-4mins with different IP addys.

How can I tell if these are real attacks (they are classified as high risk) or are programs that are just routinely scanning for open ports?

I used to get very few alerts but now its getting serious - did I shoot myself in the foot not putting ZA back on straight away?

tuffer

8,996 posts

294 months

Saturday 25th January 2003
quotequote all
Have you got Norton Anti-Virus or similiar? Carry out a scan and see if you have any trojans etc. Be on the safe side, backup data, wipe and re-install.....firewall first internet second!!!

deltaf

1,384 posts

284 months

Saturday 25th January 2003
quotequote all
Er byff matey, if i were you, id do a virus scan immediately.
An experiment was carried out on a virgin pc, ie, it had NEVER been connected to the net.
So they connected it and let it sit there switched on with no firewall software, and it was attacked something like 100 times in 1 day!
Never run your pc without the firewall, it gives access to anyone who wants to get in.
I too run Zonealarm pro and often get these alerts, but i like to do a whois check etc.
If they keep attacking you and you have the ip of theirs, report it to their isp.

alan_driver

1,281 posts

284 months

Saturday 25th January 2003
quotequote all
How do I used a firewall through a small home networking system? If there is any type of fire wall on the server, I cannot use my MSN and some websites.

P*Ting

5,618 posts

285 months

Saturday 25th January 2003
quotequote all
What do these 'attacks' actually do?

My pc is on broadband, on 24-7, with no virus software at all.

I'm not sure if I have a firewall as I didn't set up the network, but msn etc works fine.

I can hence only presume my computer is utterly unprotected yet its never had a problem (touch wood).

Anyone explain?

*ps, aside from a few mp3s I store nothing but a few uni word documents on here - its a strictly games + email + PH machine, hence I never invested in anti-virus.



Edited coz spelyng iznt mi strong poynt.

>> Edited by P*Ting on Saturday 25th January 23:26

alan_driver

1,281 posts

284 months

Saturday 25th January 2003
quotequote all
Same here, havent noticed anyhting wrong in particular, could do witha format a re install of everything but that I like to do every so often anyway.
just on this site now, searching for viruses http://housecall.trendmicro.com/housecall/start_corp.asp
used it before when I had a virus, and basicly it said there was nothing that could be done.

alan_driver

1,281 posts

284 months

Saturday 25th January 2003
quotequote all
Of Fcuk, not looking good. PE Weired virus X22 (so far) - cleanable
Troj Engela x 1 - non cleanable

julianhj

8,867 posts

289 months

Saturday 25th January 2003
quotequote all
OK. Now I'm worried.

I've been on broadband for a year with no protection.

How common are these attacks? How do people find your machine?

What is the best/most economical solution?

alan_driver

1,281 posts

284 months

Saturday 25th January 2003
quotequote all
61 Virus in total, All from the net i presume. One trojen, think from kazzaa. It cleaned 60 of them, the infected non cleanable was sucsesfully deleted. Just searching agian for just incase it missed one. This is from broadband almost 24/7.

smeagol

1,947 posts

311 months

Saturday 25th January 2003
quotequote all

alan_driver said: How do I used a firewall through a small home networking system? If there is any type of fire wall on the server, I cannot use my MSN and some websites.

Alan use either zone alarm pro or the one I use Tiny software. Both I believe allow you to allocate settings for different programs. You install on your server, let it notify you and as you use all the Internet stuff you enable a rule. After all of that you can turn notification off and your system is secure with access for all.

Julian if you've got broadband definetly get a firewall they are relatively cheap and well worth it. I've turned notification off and it simply sits in the background and lets me get on with work.

I can also recommend eTrust EZ antivirus. It updates everyday sits and monitors my machine as well for viruses. so far (touching head for wood ) no viruses, and attacks are bounced nicely.

alan_driver

1,281 posts

284 months

Sunday 26th January 2003
quotequote all

smeagol said:

alan_driver said: How do I used a firewall through a small home networking system? If there is any type of fire wall on the server, I cannot use my MSN and some websites.

Alan use either zone alarm pro or the one I use Tiny software.


The thing is, im a bit sceptical about this program, we had it installed and my brother got a virus, a major one. And it caused lots of general file sharing problems.

P*Ting

5,618 posts

285 months

Sunday 26th January 2003
quotequote all



just on this site now, searching for viruses http://housecall.trendmicro.com/housecall/start_corp.asp
used it before when I had a virus, and basicly it said there was nothing that could be done.




Think I'll try this...

tuffer

8,996 posts

294 months

Sunday 26th January 2003
quotequote all
All you people not using a firewall or AV especially with broadband are asking for trouble, Kazaa is full of trojans, kiddies hide them in juicy looking downloads for the unsuspecting!!! Ever downloaded the latest game or Kylie video clip????????? Feel free to email me your IP address via my profile and I will tell you just how wide open you are.

>> Edited by tuffer on Sunday 26th January 00:11

fatsteve

1,143 posts

304 months

Sunday 26th January 2003
quotequote all
Whoah,

Let's just get things straight, you actually need 2 lines of defenses:

1. A firewall (ie ZoneAlarm - can't recommend it enough)
2. A virus scanner (McAfee online, for example).

I too have broadband (although currently in transition phase between BTOpenshite and f2s, so its back to 56k modem time - yawn!).

The FW product stops people from port scanning and thus finding security holes, eg; guest accounts and accessing via UDP plus other Windows specific ports. Hence FW stops the buggers getting in.
The Virus scanner, on the other hand, ensures that any breach (or dodgy files you've copied onto your HD from email etc) don't unleash their whares.

Thus, to be double sure, I would recommend both (I have a yearly subsription with McAfee for about £30 and I get daily reports and patches to install - automatically - like windows update)

It is a sobbering issue, and until I got broadband a year ago, I was dismisive about 'over hyping' hackers. And never really worried about home PC's (work PCs on the other hand - well thats part of my job).

Hopefully Marshy or CarZee will add their tuppenth since that's their specialist areas.

Steve

smeagol

1,947 posts

311 months

Sunday 26th January 2003
quotequote all
alan a firewall is not a virus checker. What it does is stop people from attacking (hacking) into your computer.

A virus is a program that is downloaded and opened by yourself. This can be a simple operation such as opening an email. This is where you need a good virus checker. This will check any files incomming into your computer.

To make your system secure you should run both programs at the same time (background) and let them get on with protecting your computer. Also go regularly to M$ site and download any security warnings/updates. I would also recommend switching to Outlook rather than outlook express and turn off the preview window.

Hope that helps.

edited to say that fatsteve is a quicker typer than I am

>> Edited by smeagol on Sunday 26th January 00:20

fatsteve

1,143 posts

304 months

Sunday 26th January 2003
quotequote all

edited to say that fatsteve is a quicker typer than I am



, that maybe true, but what the hell are we all doing talking about viruses and alike at 00:15 on a Saturday morning??!!

Alan, I hope this thread clears up your understanding, since its not really widely know unless you're an IT bod or just a PC enuthsiast.

Steve

alan_driver

1,281 posts

284 months

Sunday 26th January 2003
quotequote all
Good point, Guess I was missing the point / went off on one.

P*Ting

5,618 posts

285 months

Sunday 26th January 2003
quotequote all
Me again.

That site found nothing on my machine. Looks like I'v saved myself almost 100quid in subscrptions then...

mcecm

674 posts

294 months

Sunday 26th January 2003
quotequote all
I asked about the large number of 'attacks' on a different thread a while back and the general response was that it was mainly 'background noise' that was caused by worms infecting servers etc. Basically, you should never leave your comp connected to the internet without decent defense.

>> Edited by mcecm on Sunday 26th January 00:34

alan_driver

1,281 posts

284 months

Sunday 26th January 2003
quotequote all



, that maybe true, but what the hell are we all doing talking about viruses and alike at 00:15 on a Saturday morning??!!


You had a few? its sunday



Alan, I hope this thread clears up your understanding, since its not really widely know unless you're an IT bod or just a PC enuthsiast.

Steve



Not as into computers as I used to be. I tent to let/get my brother to sort things out when they go wrong, mainly because he wants to. But thanks for all you help, I will get it sorted asap.
Tar guys!