Thread: Trojan horse
View Single Post
  #4  
Old 28-07-2002, 00:46
KerSpank KerSpank is offline
Junior Member
 
Join Date: Jul 2002
Posts: 2
Thanks: 0
Thanked 0 Times in 0 Posts
KerSpank
Ok, at least we have a start here...
oh, by the way, when you write "didn't start until I visited your sight!!", to whom are you referring? GameCopyWorld site? My site (of which I have no site, lol)? The guys site from which you downloaded some software? You need to understand about what and about whom you are posting. So just to be clear: I do not work for GameCopyWorld, I'm a user of the site and message boards, just like you...what I'M trying to do is help you to prepare a post that makes sense so that someone might could give you a hand.

Ok so you've got some scans, how EXACTLY did this happen (as in what all software did you have running at the time)? Which mirror site did you visit?
Also can you answer some of the other questions that were put to you? i.e. :
-Did you email the abuse@ email of the offending IPs ISP?
-Did your virus scan tell you that you had a Trojan?
-If so which one and what was the name of the file that was so infected?

Those IPs are from all over the Net (Korea, NY, PA, OH) and they are indicative of just a scan, not an "attack", its showing that there are probably different wanna be coolios trying to see if you are infected with a Trojan, you aren't are you? were you using any other software at the time? Do you go on IRC? Have you been lately? Did you know that when you do go onto/into IRC there are some jackarses that harvest hostmasks and scan for infection so that they can try to exploit you?

All in all it comes down to this, you are going to be scanned when you connect to the Internet, if you want to further protect yourself get yourself a hardware router (linksys, smc, netgear, whatever, they are cheap these days and can be found on special for 50bucks!) and use it in conjunction with your software firewall as well as your updated virus scanner...as well follow safe practices when using files from unknown locations.

My logs don't show any type of strange activity that coincides with the visitation of this site...do I get scanned? Yes, all the time. Is it a coordinated attack because I'm visiting somewhere? Don't know, don't worry too much about it because I do the things that need to be done to try and protect my system (nothings perfect though!)

another 2cents thrown in there
KerSpank