Over the weekend I installed a virus checker for the first time. I was pleased to be contacted with some
helpful advice by friendly E2-ers. Thanks guys. This place really is quite different from anywhere
else I've ever seen.
checking software is useful, but I was advised to install a personal firewall
is great. As soon as it was installed and I dialed up I immedietly saw loads of stuff being blocked and
logged. ('ICMP ECHO requests' (Ping
requests (lots of these) and, weirdly,
outbound requests to 6666 and 6667 on 188.8.131.52
. The other stuff I was expecting, but
unexpected outbound traffic worries me. I don't know what that IP address points at, and I don't even know
what those ports are used for. Can anyone help?
All this nonsense
has been very time consuming. It's prevented me from doing very much else in my free
time, and my weekend felt much shorter than it should have. I did not even load up the Quake bot
. That's partly because It's become boringly good
It was intruiging though. I think I'll visit the website
when I get some time and have a bit
more of a look into it.
Update (mid afternoon)...
You guys are amazing.
wonko says re May 27, 2002 : Ports 6666 and 6667 are IRC ports. If something is connecting to those ports without your permission, it's most likely a trojan being used for DDOS attacks or other such mischief. A good virus-scanner should be able to find and remove the trojan. I recommend Kaspersky Anti-Virus.
Thanks wonko. I'm really confused about how I got a virus though. I have not used IRC since I failed a unit (Nonlinear
electronics) in the first year of uni because of it. I don't even have an IRC client on this box. Oh well. At least the firewall is blocking it for now. I'll make sure I scan the box thoroughly tonight. It's a shame that none of the decent virus scanners are free.
< prev | next >