Internet Worm

[HazardousToking]

I keep gettin pop ups that say a high risk nternet worm attempted an intrusion but was blocked

Intrusion: MS ASN1 Integer Overflow TCP.
Intruder: 67.5.181.135
Risk Level: High
Protocol: TCP
Attacked IP: ************
Attacked Port: netbios-ssn(***)


Anyone have a clue what someone was trying to do??
Anything I can do back to him??
Pops up every 30 mins

[mrdevious]

Try the following programs in the following order. If you find it right away great, but by all means check out the rest because they may find stuff the other programs didn't.

routinely go into internet explorer>tools>internet options>delete files. this whipes cached files which have no use, but are a prime area for malware to store its self.

Also, you can do a Hijack This scan with saved log results, which you can post here and I can tell you if you should remove anything.

http://www.merijn.org/files/hijackthis.zip,


Anti-Malware Programs:

http://www.ewido.net/en/download/ for malware (a must have)


www.free-av.com for viruses (note: upon installation, disable automatic protection to avoid program conflicts with Norton anti-virus and other programs)


http://free.grisoft.com/doc/2/lng/us/tpl/v5 for viruses


http://housecall.trendmicro.com/ free online malware scan


http://www.download.com/Ad-Aware-SE-Personal-Edition/3000-8022_4-10045910.html?part=dl-ad-aware&subj=dl&tag=top5 for adware and spyware (essential program really)


http://www.download.com/Spybot-Search-Destroy/3000-8022_4-10122137.html for spyware. low detection rate, but takes up very little resources and memory, so just good to scan with once and a while



http://www.winpatrol.com/download.html lists all running processes in your computer. have to know enough to recognize malicious programs for it to be of use.


http://www.emsisoft.com/en/software/download/ for malware


Keep in mind that no one program gets everything. download what you want, if they fail to get it, try something else from the list.

[flamingskullballs]

a worm, i believe, is an automatic internet hack machine, that tries many passwords a second till its the right one...but im not sure, so check with mr. devious up there.

[mrdevious]

a worm, i believe, is an automatic internet hack machine, that tries many passwords a second till its the right one...but im not sure, so check with mr. devious up there.

The defining characteristic of a worm is a virus that rapidly multiplies and takes up system resources. But yes, as a secondary (and ever more common) function they can perform the actions you're talking about.

Regardless, the worm isn't the root cause, only a symptom. You most likely have a Trojan and possibly Spyware which is importing stuff like the worms.

[HazardousToking]

Quit downloading porn from limewire. Lesson learned.


Fuck off, I reformated my drive yesterday....


Only prog like that ive got is BitComet...

Your a jerkoff

[HazardousToking]

Just got another blocked worm

Same deal, but it was 67.5.181.135(2624)

same person?

[HazardousToking]

I was kidding, dude.


A classic example of Internet Miscommunication:thumbsup:

[beachguy in thongs]

I keep gettin pop ups that say a high risk nternet worm attempted an intrusion but was blocked

Intrusion: MS ASN1 Integer Overflow TCP.
Intruder: 67.5.181.135
Risk Level: High
Protocol: TCP
Attacked IP: ************
Attacked Port: netbios-ssn(***)


Anyone have a clue what someone was trying to do??
Anything I can do back to him??
Pops up every 30 mins

Great. Now it popped up on my screen. Thanks.

[HazardousToking]

Anytime man, anytime....

[D.Boone]

0-1pool181-135.nas25.tukwila2.wa.us.da.qwest.net

thats where the worm came from

[D.Boone]

http://www.geobytes.com/IpLocator.htm?GetLocation

this is the ip location

Country: USA
State: Washington
City: Bremerton
Longitude: -122.6790
Certainty: 99%

[HazardousToking]

Thanks for that link

Neato!