Forum Home
Press F1
 
Thread ID: 44408 2004-04-18 05:14:00 Have I got a virus? Miami Steve (2128) Press F1
Post ID Timestamp Content User
230294 2004-04-18 05:14:00 Hi all,

Well the new machine has been built (all up it took around 3 hours, although elapsed time was over a week :D). As soon as I had Windows (XP Pro) loaded I installed Norton SystemWorks 2003 Pro, then connected to the internet (56k dialup) to download all the LiveUpdates for Nortons.

Within seconds of it starting to download the 15Mb of updates, I had contracted the Blaster virus (teekids.exe version). I forgot to load a firewall :(. I cleaned the virus off and applied the windows patch to keep it out.

Normally I use Kerio Personal Firewall, but I keep hearing about Sygate and decided to use that instead. Ever since it was installed, every time I restart the PC, or when I connect to the internet, Sygate pops up a window informing me that xxxxxxxxxx is trying to broadcast to [224.0.0.22]. Do you want to allow this program to access the network?, where xxxxxxxxxx is a seemingly random application. It has been Windows Explorer, Messenger, WinFox II amongst others.

I have run (the latest) Ad-Aware, SpyBot and Nortons over the machine and can find nothing. A search on Google shows that other people have had a similar thing happen (specifically with Sygate) but no real resolution.

Is this a virus? Is it the remnants of MSBlast? Is it simply Sygate Firewall moaning about something that other firewalls ignore?

Cheers
Miami
Miami Steve (2128)
230295 2004-04-18 06:15:00 IP 224.0.0.22 is a "multicast address" for routers reserved for local purpose, it belongs to ICMP v3 (Internet Control Message Protocol version 3). (look it up on Google for pages of reading)

It's probably OK, if you went to the trouble of analysing the TTL (Time To Live) of the responses you would likely find they would "die" after 1 hop anyway.

Paranoia material I suspect?
godfather (25)
230296 2004-04-18 06:43:00 >Well the new machine has been built (all up it took around 3 hours, although elapsed time was over a week ).

A bit OT here, but I just wanted to say "congrats" on building your first machine :). I was wondering how it went. I bet you are pleased that you decided to build it yourself now rather than have it assembled for you :D
Jen C (20)
230297 2004-04-18 08:28:00 Building my first machine was very daunting, but now that I've done it, I have no fears for the next time. In fact I'm quite looking forward to it. Hope that doesn't mean I've become a geek! :O

Cheers
Miami
Miami Steve (2128)
230298 2004-04-18 08:32:00 I should add to that, that anybody who is considering building a computer should definitely have a go. I would thoroughly recommend it as a way of learning all about the inner workings of the machine, which can only help with using it.

And of course, the good people of PressF1 are never far away.

So thanks to all who gave advice during the recent birth of my new PC.

Cheers
Miami
Miami Steve (2128)
1