Re: Thicko here needs help please....

From: ELE OLO (dingtan_at_eleolo.com)
Date: 09/30/03 

Date: 30 Sep 2003 08:33:05 -0700

HI,

1) Go to the following link to find out steps to disable your Windows
XP
firewall

http://www.microsoft.com/windowsxp/home/using/howto/homenet/icf.asp

2) Ping noises could be other than the attacks on the perimeter. Same
or similar thing happened to me before. It was not due to attacks from
internet.
For instance, you can use the real time "Alerts & Log" page
information
to track to see if the times when you hear the loudest Pings are the
times when you are receiving the highest level of attacks (check the
count column, and make sure that the direction is Incoming)

3) It could be normal, but it requires a checking of the exact log to
determine who, want, and why these are there. Sometimes, it may not
be
an attack, but merely some application that is running on your PC that
you are not aware of, maybe a spyware or vpn application or
something....

4) you can tell sometimes by using the info shown on the "alerts and
log" page
on your zone alarm firewall.

Dean, NCSA,CCSA,SANS GSEC, EIT
www.eleolo.com

"Tids" <waihi@dsl.pipex.com> wrote in message news:<3f78b4f5$0$246$cc9e4d1f@news.dial.pipex.com>...
> I am currently running windows XP professional. I understand it has
> its own firewall but yesterday whilst the computer was on but not
> being used I heard several "ping" sounding noises and wondered
> if these were due to my PC being hacked. I downloaded Zone Alarm
> and installed it but I have a some questions I need answers for.
>
> 1) How do I disable the XP in-built firewall?
> 2) Any idea what the "ping" noises are?
> 3) In less than 24 hours I have had over 1500 access attempts (96 high)
> Is that a lot? Or is it pretty normal?
> 4) How can I tell who has been trying to access my PC?
>
> Thanks for your help.
>
>
>
>
> ---
> Outgoing mail is certified Virus Free.
> Checked by AVG anti-virus system (http://www.grisoft.com).
> Version: 6.0.522 / Virus Database: 320 - Release Date: 29/09/2003

Relevant Pages

  • Re: Please help me...
    ... your advice and I am in the process of doing what you ... >> the appropriate software that blocks these attacks. ... a "Windows" operating ... firewall can be found ...
    (microsoft.public.security)
  • Re: Hacking to Xp box
    ... I think there was a misunderstanding in the firewall point: ... you need to find some vulnerability that could be exploited to run ... > restricts most of the attacks that use anonymous connections. ... > Audit your website security with Acunetix Web Vulnerability Scanner: ...
    (Pen-Test)
  • ZA Logs as requested
    ... I keep Windows updated. ... > firewall to prevent this from happening again: ... attach so he could monitor attacks and my ports. ... > 6) Create a rule to drop any and all IGMP protocol packets. ...
    (comp.security.firewalls)
  • Re: Hacking to Xp box
    ... I think there was a misunderstanding in the firewall point: ... you need to find some vulnerability that could be exploited to run ... > restricts most of the attacks that use anonymous connections. ... > Audit your website security with Acunetix Web Vulnerability Scanner: ...
    (Pen-Test)
  • RE: Hacking to Xp box
    ... I think there was a misunderstanding in the firewall point: ... Regarding ICMP backdoors, this technique was first use by some skilled guy ... you need to find some vulnerability that could be exploited to run ... > restricts most of the attacks that use anonymous connections. ...
    (Pen-Test)