[Lewitt]

I recently upgraded to Service Pack 3 and two days later I had an infection called Vundo.gen!R. (It's gone now). I think that Service Pack 3 disabled my Windows Firewall and put it on some kind of group policy. I struggled with it for three days and could not enable the firewall. I left it disabled and installed Sygate and it seems to be doing the job.
I am still learning all the features of Sygate and I have a question about one of these features called Back Trace. I used the 'whois' directory on a blocked item and found out it is coming from an organization called "Internet Assigned Numbers Authority" in Marina Del Rey, CA.
It tried 20 times to access my computer and was blocked by Sygate every time.
In some instances it took several 'hops', which I take to mean it accessed (or tried to) other computers before it got to mine.
Can enyone enlighten me on how to treat this incident? I can download the complete report if you are interested. I haven't checked todays log to see if is still trying to get in.

Thanks, Lewitt

[TOGG]

Have a look at this; http://www.iana.org/abuse/ The fact that these attempts are being blocked by your firewall is a good thing but there could be something else going on.

If you want to go into this further, head over to the 'Malware Removal and HJT Logs' Forum and follow the instructions on downloading HijackThis and posting a log If you do that, it would be a good idea to use the 'Report' feature and ask a Moderator to transfer this thread to Malware Removal in case your trojan has left some nasty surprises behind.

You should also be aware that they are very busy over there and it could be some time before you receive a response.

[Lewitt]

Thanks Togg,
I read the item on iana.abuse, and found it interesting. I have
Malware's program on board and I'll run a scan to see if anything is getting through.
Believe me I will keep a close watch on this since IANA claims it isn't coming from them. I have a stand alone computer, not connected to anything but the net, so it can't be coming from something on my network.
Thanks again, and if I find out anything I will certainly post it for all to see.

Lewitt