Forum Home
Press F1
 
Thread ID: 54614 2005-02-17 08:51:00 XP SP2 firewall leaky ? tweak'e (69) Press F1
Post ID Timestamp Content User
325905 2005-02-17 08:51:00 a mates pc today was suffering the RPC shutdown (when on internet) even tho XP sp2 firewall was on.

no virus was found and zonealarm was install. all ok at the mo tho large amounts of alerts on a werid port (mayby new IM worm??).

anyone seen this at all ??
tweak'e (69)
325906 2005-02-17 09:16:00 there is a new IM worm keeping around, not sure of its name though.

anything suspicious under the processes?
Prescott (11)
325907 2005-02-17 09:18:00 Anyone relying on the SP2 firewall deserves to be infected. E|im (87)
325908 2005-02-17 09:40:00 Anyone relying on the SP2 firewall deserves to be infected.

to true :)

however it is strange as it should hide the ports blaster etc use to exploit the rpc. at the moment the only thought is that something has altered the firewall settings to open the port thats needed. the system was infected with a lot of spyware (includeing a couple adaware and spybot didn't detect) :(.
tweak'e (69)
1