Re: Port 4750 activity

From: Bit Twister (BitTwister_at_localhost.localdomain)
Date: 11/26/04 

Date: Fri, 26 Nov 2004 17:29:33 GMT

On Fri, 26 Nov 2004 11:21:47 -0600, justNOSPAM@thisplace.net wrote:
> Does anyone know of a new virus or worm that is causing a flurry of
> activity on port 4750? when I logged on to the internet this morning
> at around 10:30 AM, I checked the traffic log of my firewall and in
> about two minutes, it had blocked around a hundred or more attempts to
> connect to my PC on that port.

Some places to look
http://www.dshield.org//port_report.php?port=4750
http://isc.sans.org/port_details.php?port=4750

Malware is changing at about 1 new one every hour.
After an eight hour sleep, your antivirus update is a little bit
behind. :(

That assumes your AV vendor has trapped the new malware,
generated/tested for it in the database and moved it into production
ready for you do download the new signatures.

Relevant Pages

  • Re: virus got past mcafee viruscan 8.7
    ... malware infection is likely to result in an unpleasant surprise. ... and has been sending out spam by making outbound connections on port 25. ... Mcafee viruscan 8.7 blocks programs from making outbound connections ... InfoSec Institute ...
    (Security-Basics)
  • Re: virus got past mcafee viruscan 8.7
    ... to be this year's problem) means that relying on anti-virus to prevent ... malware infection is likely to result in an unpleasant surprise. ... and has been sending out spam by making outbound connections on port 25. ... InfoSec Institute ...
    (Security-Basics)
  • Re: "Enabled"
    ... folder option/view to show hidden and system files. ... > whether or not it's malware. ... You could also use the free port mapping ... >> a notification when Windows Firewall blocks a program" so that you can ...
    (microsoft.public.windowsxp.security_admin)
  • Re: sudo without password
    ... unless you're setting up server process. ... If you're setting up an IMAP ... connection to a remote machine and it wants to talk to port 25. ... malware designed to attack Linux will start to ...
    (Ubuntu)
  • Re: UDP packet being blocked
    ... >> you might want to scan your system for malware and spyware. ... DNS query on port 53, it is software and software does not ...
    (comp.security.firewalls)