Re: Couple of newbie Firewall questions

From: Bill Matherly Jr (bmatherlyjr_at_cox.net)
Date: 08/18/03


Date: Mon, 18 Aug 2003 20:33:23 GMT

Cheddar wrote:
> Ok so I just installed Sygate Personal Firewall after using
> the standard XP pro version.
>
> I don't have a clue whats happening, so far I have allowed
> IE, Outlook and GrabIT access to the internet. Every couple
> of minutes though a warning box keeps popping up with the
> following message:
>
> F30002 DCE/RPC DCOM Buffer overflow exploit attempt
> detected.
>
> Is this the blaster virus that has caused so much hassle? I
> am not worried because I always do a windows update every
> week but I was just curious. It's very disconcerting having
> this firewall tell me everytime my PC is getting attacked.
> With the XP Firewall it never used to say anything.
>
> I'm getting more paranoid by the minute :-)
>
>

I would immediately go to http://windowsupdate.microsoft.com and obtain
the security RPC DCOM patch, then I would then update your virus
signatures with your antivirus program, and do a complete scan for
viruses and trojans.

Just for added security, block ports 69, 135-139, 445 and 4444

- bhm



Relevant Pages

  • Re: I am having connectivity problems
    ... firewall and turned ON Windows firewall. ... When I tried to install SP2 I was unable to get it thru Windows Update. ... does the connection problem persist? ...
    (microsoft.public.windows.inetexplorer.ie6.browser)
  • Re: I am having connectivity problems
    ... Are you telling me that the ZA firewall AND the Windows Firewall was enabled when you installed SP3 via Windows Update? ... This Service "protects" Windows and disallows certain changes to be made (e.g., the changes install SP3 will make), so it should have been disabled prior to installing SP3. ... does the connection problem persist? ...
    (microsoft.public.windows.inetexplorer.ie6.browser)
  • Re: Buy a PC at Best Buy today and plug it in - how long till I get a virus?
    ... Using cablemodem, router, dedicated PC NAT firewall, Win98SE. ... regarding ZA Pro while running windows update, ... In another case of 98SE on same computer, there is no software protection ...
    (microsoft.public.security.virus)
  • Re: mcafee firewall exception in CPD.exe
    ... I scanned all drives with Stinger and with Mcafee, both on Safe Mode, ... firewall for them to do ... closing the browser or disconnecting from the net. ... >> All windows update applied to OS and browser ...
    (comp.security.firewalls)
  • Re: AOL Servers Probing ???
    ... I use Kerio Personal Firewall 2.1.5. ... later Allowed that is for Windows Update so they may be the same cause. ... Inbound UDP packet ... Remote address,service is ...
    (microsoft.public.security)