Topic: Zone Alarm

[TR]

Last night I checked the number of times my ZA has clocked up intrusions.. it stood at 10539
and tonight it is now 10991 and rising wrapidly.. is this the MSblaster doing the rounds  :'(

Hookstar

[Adept]

Probably, Hookstar. I've had 270 tonight

Have a look at ZA's log file. Anything attacking your port 135 is probably MSBlast.

Most of the post 135 probes I'm getting are from other Demon Internet hosts. Demon's Abuse Department is going to be busy this month

[Adept]

By the way, how long have you had that version of ZA?

The log file is normally cleared when ZA is upgraded. 10000 seem like a lot of items to have in the log

The latest version of ZA Free is 3.7.202 AFAIK.

[TR]

Yep.. thats the one I have 3.7.202..

the fig has now gone to 11009

30/07/03 registered


Hookstar

[Adept]

the fig has now gone to 11009

Bloody Hell!

Aren't you glad you have a firewall?

[TR]

Sure is

11021 now

[Camstop]

I aint had any...

But i know Nortons updated when i logged on tonight...

[TR]

11038 now


B*llox.. Im getting paranoid  .. not going to look anymore  8)

[Adept]

What ISP are you on Hookstar?

[TR]

V21..  .. damn I looked..11048 now

[TR]

Adept.. should I contact V21 and ask whats going on .. have attached another pic showing log this time.

Now at 11068.. nearly 400 this session

[Adept]

Are they all from the same address Hookstar? It looks like someone is PINGing your address. It has nothing to do with MSBlast.

[TR]

Looks all different .. I will have a rummage about in the log text and see what I can come up with  .

Cheers anyway  

[Adept]

I've just doen some "further reading" and it looks like it could be the MSBlast worm looking for hosts to exploit.

Sorry to mislead you

Either way, ZA is blocking it - so don't worry, unless you notice a signigficant drop in bandwidth

[Simon]

I've only had three or four attempted intrusion alerts over the past couple of days, and thankfully have not been 'blasted'.  I have Sygate Pro and Norton AV Pro, which I have been updating daily since the Blaster scare.  I also downloaded the MS patch, so hopefully I should be well protected.