Re: Possible Trojan?

From: triton (dontspamme_at_aol.com)
Date: 07/23/03 

Date: Wed, 23 Jul 2003 21:40:13 GMT

If he just blocks that IP range, couldn't anyone else with the Sub 7 client
still connect to his system, depending of course if it wasn't password
protected?

I know we used to play around with that program a few years ago, and it was
incredible how many machines were open. Another port that Sub 7 used was
27374 or something like that. I never did any damage to anyones machines,
and most of the time I'd use the "remove server" feature to clean their
systems, or password protect it so no-one else got in.

"mto" <nobody@nowhere.com> wrote in message
news:vhkh8ue4o9p130@corp.supernews.com...
>
> <potkec@netscape.com> wrote in message
> news:5brSa.18240$7O.13278@nwrdny01.gnilink.net...
> > > As a temporary fix, if you don't have a software firewall installed,
get
> one
> > > such as ZA and in the FIREWALL ZONE tab, block the IP range of that
DSL
> > > company in Europe.
> > >
> > > R Green
> > > Technical Service Advisor
> > > ---------------------------
> > > WoWsat.com
> > > ---------------------------
> >
> > Personally, I don't know if it would make much sense to block off a
> > range since you may block ranges of sites he visits. Security thru'
> > obscurity is never a fix for anything.
> >
> > I know you stated 'as a temporary fix' and I also notice you included
> > technical service advisor, I just hope you don't give any clients
> > that advice.
>
> That actually isn't bad advice, you know. The IP range in question
provides
> DSL service rather than web hosting so it is unlikely that he will be
> missing a site or two. The block is easily undone at the click of a
button
> and meanwhile the block will prevent both outgoing and incoming
connections
> from something that appears to be an ongoing problem while he figures out
> exactly what the problem is.
>
>

Loading