Banda Ancha EU

Comunidad de usuarios
de fibra, móvil y ADSL

hosting en interdominios
31 lecturas y 3 respuestas
  • Cerrado

    [Editado 31/03/04 15:46]

    creo que la red está infectada por un virus o gusano

    tengo instalado un firewall y cada 2 minutos tengo un ataque lovesan, abajo está la explicación de que es, la cuestión es que no tengo ningun virus metido o el kaspersky no lo pilla, pero lo curioso es que cada 2 min tengo un ataque y cada vez la ip es diferente y siempre son ips de retecal. Es posible que circule algun virus por la red de retecal? o que cojones pasa ?

    The Lovesan attack attacks a vulnerability in the DCOM RPC service of Windows NT 4.0/NT 4.0 Terminal Services Edition/2000/XP/Server (tm) 2003 operating systems of your computer. When the vulnerability is detected, the worm, which includes malware allowing the sender to perform any desired manipulations on your computer, is downloaded to the victim machine.

    30/03/2004 21:53:06 Your computer has been attacked from

    cable64a103.usuarios.retecal.es. Attack - Lovesan. The attack has

    been successfully repulsed.
    30/03/2004 22:04:29 Your computer has been attacked from

    cable82a042.usuarios.retecal.es. Attack - Lovesan. The attack has

    been successfully repulsed.
    30/03/2004 22:06:56 Your computer has been attacked from

    cable74a175.usuarios.retecal.es. Attack - Lovesan. The attack has

    been successfully repulsed.
    31/03/2004 7:14:14 Your computer has been attacked from

    cable77a071.usuarios.retecal.es. Attack - Lovesan. The attack has

    been successfully repulsed.
    31/03/2004 7:52:45 Your computer has been attacked from

    cable76a075.usuarios.retecal.es. Attack - Lovesan. The attack has

    been successfully repulsed.
    31/03/2004 8:08:16 Your computer has been attacked from

    cable76a027.usuarios.retecal.es. Attack - Lovesan. The attack has

    been successfully repulsed.
    31/03/2004 9:04:05 Your computer has been attacked from

    cable77a083.usuarios.retecal.es. Attack - Lovesan. The attack has

    been successfully repulsed.
    31/03/2004 10:27:41 Your computer has been attacked from

    cable80a116.usuarios.retecal.es. Attack - Lovesan. The attack has

    been successfully repulsed.
    31/03/2004 11:01:54 Your computer has been attacked from

    cable68a238.usuarios.retecal.es. Attack - Lovesan. The attack has

    been successfully repulsed.
    31/03/2004 11:17:29 Your computer has been attacked from

    cable75a187.usuarios.retecal.es. Attack - Lovesan. The attack has

    been successfully repulsed.
    31/03/2004 11:28:57 Your computer has been attacked from

    cable80a074.usuarios.retecal.es. Attack - Lovesan. The attack has

    been successfully repulsed.
    31/03/2004 11:34:25 Your computer has been attacked from

    cable72a226.usuarios.retecal.es. Attack - Lovesan. The attack has

    been successfully repulsed.
    31/03/2004 11:38:10 Your computer has been attacked from

    cable70a018.usuarios.retecal.es. Attack - Lovesan. The attack has

    been successfully repulsed.
    31/03/2004 11:56:25 Your computer has been attacked from

    cable67a125.usuarios.retecal.es. Attack - Lovesan. The attack has

    been successfully repulsed.
    31/03/2004 11:59:07 Your computer has been attacked from

    cable80a175.usuarios.retecal.es. Attack - Lovesan. The attack has

    been successfully repulsed.
    31/03/2004 13:19:56 Your computer has been attacked from

    cable77a006.usuarios.retecal.es. Attack - Lovesan. The attack has

    been successfully repulsed.
    31/03/2004 13:59:44 Your computer has been attacked from

    cable77a079.usuarios.retecal.es. Attack - Lovesan. The attack has

    been successfully repulsed.
    31/03/2004 14:07:32 Your computer has been attacked from

    cable80a184.usuarios.retecal.es. Attack - Lovesan. The attack has

    been successfully repulsed.
    31/03/2004 14:25:21 Your computer has been attacked from

    cable78a247.usuarios.retecal.es. Attack - Lovesan. The attack has

    been successfully repulsed.
    31/03/2004 14:53:55 Your computer has been attacked from

    cable80a116.usuarios.retecal.es. Attack - Lovesan. The attack has

    been successfully repulsed.
    31/03/2004 14:58:17 Your computer has been attacked from

    cable72a226.usuarios.retecal.es. Attack - Lovesan. The attack has

    been successfully repulsed.
    31/03/2004 15:07:53 Your computer has been attacked from

    cable65a248.usuarios.retecal.es. Attack - Lovesan. The attack has

    been successfully repulsed.
    31/03/2004 15:10:08 Your computer has been attacked from

    cable70a211.usuarios.retecal.es. Attack - Lovesan. The attack has

    been successfully repulsed.
    31/03/2004 15:18:34 Your computer has been attacked from

    cable71a142.usuarios.retecal.es. Attack - Lovesan. The attack has

    been successfully repulsed.
    31/03/2004 15:20:00 Your computer has been attacked from

    cable79a052.usuarios.retecal.es. Attack - Lovesan. The attack has

    been successfully repulsed.

    EDITADO: uso como firewall el kaspersky anti-hacker, a pesar de ser muy simple, me ha sorprendido su eficacia y solo consume 700 KB de ram 100% recomendado

    Este tema es antiguo y puede contener información obsoleta. Abre un nuevo tema para publicar tu mensaje.
    1
    • Cerrado

      BocaDePez BocaDePez
      6

      acabas de descubrir America, internet esta lleno por completo…

      acabas de descubrir America, internet esta lleno por completo de virus que hacen ataques aleatorios, lo que pasa es que si nunca te instalas un firewall no lo sabes... pero es asi...
      Salu2

    • Cerrado

      [Editado 31/03/04 16:01]

      no tengo mucha idea pero creo que lo del RPC es lo del…

      no tengo mucha idea pero creo que lo del RPC es lo del blaster, pero yo siempre me he preocupado de tener el windows bien actualizado y suelo escanear todo el pc con el kaspersky de vez en cuando, tampoco tengo spyware ni ad-ware ni mierda de esa escaneo tambien con el ad-aware 6 con la lista de mierda siempre actualizada xD

      • Cerrado

        BocaDePez BocaDePez
        6

        el blaster y algunos virus mas tipo gusano se expande por si…

        el blaster y algunos virus mas tipo gusano se expande por si solitos, en auna pasa lo mismo toda la red de auna esta infectada, pero no por culpa de ellos si no de los usuariosque no saben que lo tienen. asi cada ordenador dentro de la red interna de cada isp se dedica a mandar ataques a puertos a ver si cuela. el problema es de gente despreocupada dentro de tu misma red, que no tienen sus ordenadores desinfectados!

        lo mejor? un buen firewall y los puertos tcp y udp 445 135 al 139 666 593 y 60 cerrados entre otros!