Suspicious Activity

Status
This thread has been Locked and is not open to further replies. The original thread starter may use the Report button to request it be reopened but anyone else with a similar issue should start a New Thread. Watch our Welcome Guide to learn how to use this site.

NRG478

Thread Starter
Joined
Aug 31, 2001
Messages
18
HI THERE I GO TO CHATROOMS AS WELL AS DO OTHER STUFF LIKE GO TO INFO SITES/SOFTWARE SITES ECT. A FEW MONTHS AGO I WHILE I WAS IN A CHATROOM I KEPT GETTING DC LIKE 30 40TIMES IN AN HOURS TIME EVERYDAY IT WOULD SHOW UP AS CONNECTION RESET BY PEER SO AFTER AWHILE OF THAT HAPPENING I DECIDED TO GET MORE INFO ON IT I FOUND OUT THAT WHEN SOMEONE ATTACKS YOUR COMP AND YOUR IN A CHATROOM IT SHOWS AS A REGULAR CONNECTION RESET MSG SO I WENT AND GOT ZA AFTER I HAD THAT FOR BOUT A WEEK AND LEARNED THE CONTROLS A BIT I THEN WENT BACK TO THAT CHATROOM I NOTICED WITH IN 10-15MINS THAT 3DIFF IPS HAD ATTEMTPED TO GET THROUGH MY PORTS 50TIMES EACH AND ONCE I HAD THE FIREWALL I STOPPED LEAVING THE CHAT SERVER ITS BEEN THREE MONTHS I HAVE NO MORE PROBS AS FAR AS BEING DC BUT THE ATTEMTPS HAVNT STOPPED ON MY COMPUTER NOW THIS PERSON OR PEOPLE ARE TRYING TO SEND ME (SSh) (ftp) (html) among other things all on port 111 this happens day in and day out and they dont try just once they try hundreds of times i mean it got so bad i had to uncheck the alert box cuz it kept popping up so many times SO I WENT GOT A TRACER PROGRAM I THOUGHT ID TRACE THIS IP BUT THEN WHEN I WENT TO TRACE IT I GOT THE HOST IS UNREACHABLE OTHER TIMES ON A DIFF IP I GOT A NETWORK LOCATION IN VA,PA,CANADA,ENGLAND,CHINA,GERMANY,RUSSIA FOR THAT SAME IP BUT NONE GAVE ANY INFO SO I FIGURED IT WAS SPOOFED NOW I DO ADMIT I SHOULDNT WORRY BOUT THIS SENSE THE FIREWALL IS DOING ITS JOB BUT THE RATE THIS HAS BEEN KEPT UP SOMEDAY THEY WILL PROBLY FIND A WAY ROUND THE WALL CUZ THEIR PRETTY PERSISTENT AND THEN NOW IN THAT CHATROOM THERE HAS BEEN 55 ATTACKS ON OTHER PPL IN THE PAST MONTH FROM ONE OF THOSE IPS THATS BEEN ATTACKING ME I KNOW ITS A POSSIBILITY THAT ITS JUST AD IPS OR WHATEVER BUT THEN AGAIN IM NOT BUYING THAT CUZ IT HAPPENS TO MUCH THE IPS DONT COME UP AS IF THEIR MENT TO BE HIDDEN AND MORE ATTACKS HAVE HAPPENED ANY IDEAS?
THANX FOR YOUR TIME
 

eddie5659

Moderator
Malware Specialist
Joined
Mar 19, 2001
Messages
37,334
Hiya

The problem with tracing is that they can be an infected machine and you will only be getting the innocent party in trouble.

If you are having all those IP's hitting you, you say 3, then you may have a trojan.

Go here: http://housecall.antivirus.com/housecall/start_corp.asp

and run an online virus scan. Also, go here: www.moosoft.com and download The Cleaner ( 30 day demo)

Also, go here: http://home.earthlink.net/~rmbox/Reticulated/Toys.html

and download Startup Log. Install and run it, allow the DOS window to close then copy/paste the results here.

The IP's may be useful to have a look at. But first, see if you're infected.

Regards

eddie
 
Status
This thread has been Locked and is not open to further replies. The original thread starter may use the Report button to request it be reopened but anyone else with a similar issue should start a New Thread. Watch our Welcome Guide to learn how to use this site.

Users Who Are Viewing This Thread (Users: 0, Guests: 1)

As Seen On
As Seen On...

Welcome to Tech Support Guy!

Are you looking for the solution to your computer problem? Join our site today to ask your question. This site is completely free -- paid for by advertisers and donations.

If you're not already familiar with forums, watch our Welcome Guide to get started.

Join over 807,865 other people just like you!

Latest posts

Staff online

Top