Bots and Simulations > Internet Mode Commentary

What's going on with the DB server?

(1/7) > >>

Testlund:
I've been getting all sorts of strangeness over here. DB freeze and unauthorized access logged in the firewall from the DB server IP, and 5 ours ago some ftp from a similar IP tried access to my computer?  

Testlund:
I would also like to know if a program called 'WebFldrs XP' is needed for DB. It is a program I found as a HIDDEN install (doesn't show up in add/remove programs. It has to do with FTP sharing.

EricL:
Server's working just fine.  The server will never initiate communicaiton to you.  I've never heard of the program you mention although XP has code for accessing "Web Folders" via the DAV protocol so it might be part of Windows.

Testlund:
Well... I did the mistake of installing Bittorrent which I suspect started all sorts of nasties both inside and outside my computer. I have uninstalled it now and removed all associated files I could find. Still it appears someone has sniffed me out and tries a directed Denial of Service attack at me, coming from US.
It could have been some temporary glitch that caused my firewall to suddenly block access to DB. Usually it doesn't block anything I've allowed, unless that program's signature changes, or some strange behavior occur, like it tries to do another kind of access.
In any case it appears my own computer is also trying all sorts of accesses which my firewall blocks, like 'nbname, MS-ds, nbsess, http, snmp', which seems associated with my network card. I just hope I didn't get a rootkit installed or something.  

EricL:
Sounds like a spam bot.  Better run some AV and anti-spyware stuff soon.

Navigation

[0] Message Index

[#] Next page

Go to full version