Go Back   PCMech Forums > Help & Discussion > Internet, Web Applications, & The Cloud

Need Some Help? Type Your Keywords Here:

Reply
 
LinkBack Thread Tools Search this Thread Rate Thread Display Modes
Old 05-26-2002, 12:08 PM   #1
Member (10 bit)
 
Join Date: Nov 2001
Location: San Francisco
Posts: 687
Keep receiving alerts on ZoneAlarm. How unusual is this!?

Here's my sad story.
I always keep zonealarm running in background and about 4 days ago I checked it and saw that I was receiving 120 access attempt alerts in 2 hours.. That was clearly not normal! All of them coming from 2 or 3 ip addresses.
I scanned my pc for viruses and it was found that I had JS.Exception.exploit trojan!!! I was so horrified! because I didn't have viruses before! Well, I deleted it using my AV program and alerts stopped to come at such large levels.

BUT, I still keep getting them from different IP addresses. Now I get about 15 per hour on average. I trace those IPs and see that they come from all over the world Cairo, Bulgaria, Netherlands, Russia, China, Korea, Israel, London, USA, you pick!!!

So, what do you think? is this normal to receive 15 alarms per hour from such locations? does it look like I may have another trojan hidden somewhere, and which my AV can't detect? (ran Norton 2002 AV 3 times) Give me your thoughts, what is going on?! Although I am not a newbie, I am still very scared.
__________________
I Like Jesus
calmius is offline   Reply With Quote
Old 05-26-2002, 12:12 PM   #2
Member (10 bit)
 
Join Date: Nov 2001
Location: San Francisco
Posts: 687
a note

these alarms are not Morpheus related because they happen when it's off.
calmius is offline   Reply With Quote
Old 05-26-2002, 12:17 PM   #3
Red-eyed Moderator
Staff
Premium Member
 
HAL9000's Avatar
 
Join Date: Dec 1999
Location: Regina, Saskatchewan, Canada
Posts: 17,576
1) You've done the virus scan, so that's clean
2) Do an Ad-Aware scan next
3) The rest is normal, ZA is doing it's job, don't worry about it.
__________________
-At Ford, quality is job #1, job #2 is making them explode. ~Norm MacDonald, SNL News

-Switching to Glide..Balancing in my head..inside of me...
taking the glide path instead.
HAL9000 is offline   Reply With Quote
Old 05-26-2002, 01:12 PM   #4
Member (10 bit)
 
Join Date: Nov 2001
Location: San Francisco
Posts: 687
yes

I forgot to mention I regularly use Ad-Aware, and scanned with it too, no spyware except some cookies, so I guess that's clean too. However, I am still worried. What if someone tries to acccess my comp and ZA fails!?!? OH NO!!!
calmius is offline   Reply With Quote
Old 05-26-2002, 01:17 PM   #5
Red-eyed Moderator
Staff
Premium Member
 
HAL9000's Avatar
 
Join Date: Dec 1999
Location: Regina, Saskatchewan, Canada
Posts: 17,576
Then paranoia is going to get the best of you, don't go on the internet. The only other thing you can do is to get a router to use as a first line of defense, ZA as a second line. Other than that, you just have to trust it.
HAL9000 is offline   Reply With Quote
Old 05-26-2002, 01:27 PM   #6
RJ
Member (14 bit)
 
Join Date: Feb 2000
Location: Offenbach/Main (Germany)
Posts: 8,485
Send a message via ICQ to RJ
Well, calmius, that's what a firewall is good for. . .
There are millions of people worldwide who use ZoneAlarm. I and my friends also get hundreds of access trials logged.
ZA works well. If you're really worried. . well then don't go online

RJ
RJ is offline   Reply With Quote
Old 05-26-2002, 04:00 PM   #7
glc
Forum Administrator
Staff
Premium Member
 
glc's Avatar
 
Join Date: May 2000
Location: Joplin MO
Posts: 37,771
You might want to run The Cleaner from Moosoft to make sure you don't have another Trojan that the AV didn't pick up on.
glc is offline   Reply With Quote
Old 05-26-2002, 11:46 PM   #8
Member (9 bit)
 
KR0316's Avatar
 
Join Date: Nov 2001
Location: Billings, Montana
Posts: 468
HAHAHA..............Don't let the paranoia get the best of you. I use ZA and I get hundreds of hits so I just regularly use Norton's AV. No problems as of yet. The computer tech where I work said it is just doing its job and told me just to trust it, like HAL said.
KR0316 is offline   Reply With Quote
Reply

Bookmarks

Still Need Help? Type Your Keywords Here:


Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes Rate This Thread
Rate This Thread:

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is On
Trackbacks are On
Pingbacks are On
Refbacks are On



All times are GMT -5. The time now is 06:21 AM.
Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2012, vBulletin Solutions, Inc.
SEO by vBSEO 3.6.0 PL2