Banda Ancha EU

Comunidad de usuarios
de fibra, móvil y ADSL

Fibra/Cable

creo que la red está infectada por un virus o gusano

D0MINGO

tengo instalado un firewall y cada 2 minutos tengo un ataque lovesan, abajo está la explicación de que es, la cuestión es que no tengo ningun virus metido o el kaspersky no lo pilla, pero lo curioso es que cada 2 min tengo un ataque y cada vez la ip es diferente y siempre son ips de retecal. Es posible que circule algun virus por la red de retecal? o que cojones pasa ?

The Lovesan attack attacks a vulnerability in the DCOM RPC service of Windows NT 4.0/NT 4.0 Terminal Services Edition/2000/XP/Server (tm) 2003 operating systems of your computer. When the vulnerability is detected, the worm, which includes malware allowing the sender to perform any desired manipulations on your computer, is downloaded to the victim machine.

30/03/2004 21:53:06 Your computer has been attacked from

cable64a103.usuarios.retecal.es. Attack - Lovesan. The attack has

been successfully repulsed.
30/03/2004 22:04:29 Your computer has been attacked from

cable82a042.usuarios.retecal.es. Attack - Lovesan. The attack has

been successfully repulsed.
30/03/2004 22:06:56 Your computer has been attacked from

cable74a175.usuarios.retecal.es. Attack - Lovesan. The attack has

been successfully repulsed.
31/03/2004 7:14:14 Your computer has been attacked from

cable77a071.usuarios.retecal.es. Attack - Lovesan. The attack has

been successfully repulsed.
31/03/2004 7:52:45 Your computer has been attacked from

cable76a075.usuarios.retecal.es. Attack - Lovesan. The attack has

been successfully repulsed.
31/03/2004 8:08:16 Your computer has been attacked from

cable76a027.usuarios.retecal.es. Attack - Lovesan. The attack has

been successfully repulsed.
31/03/2004 9:04:05 Your computer has been attacked from

cable77a083.usuarios.retecal.es. Attack - Lovesan. The attack has

been successfully repulsed.
31/03/2004 10:27:41 Your computer has been attacked from

cable80a116.usuarios.retecal.es. Attack - Lovesan. The attack has

been successfully repulsed.
31/03/2004 11:01:54 Your computer has been attacked from

cable68a238.usuarios.retecal.es. Attack - Lovesan. The attack has

been successfully repulsed.
31/03/2004 11:17:29 Your computer has been attacked from

cable75a187.usuarios.retecal.es. Attack - Lovesan. The attack has

been successfully repulsed.
31/03/2004 11:28:57 Your computer has been attacked from

cable80a074.usuarios.retecal.es. Attack - Lovesan. The attack has

been successfully repulsed.
31/03/2004 11:34:25 Your computer has been attacked from

cable72a226.usuarios.retecal.es. Attack - Lovesan. The attack has

been successfully repulsed.
31/03/2004 11:38:10 Your computer has been attacked from

cable70a018.usuarios.retecal.es. Attack - Lovesan. The attack has

been successfully repulsed.
31/03/2004 11:56:25 Your computer has been attacked from

cable67a125.usuarios.retecal.es. Attack - Lovesan. The attack has

been successfully repulsed.
31/03/2004 11:59:07 Your computer has been attacked from

cable80a175.usuarios.retecal.es. Attack - Lovesan. The attack has

been successfully repulsed.
31/03/2004 13:19:56 Your computer has been attacked from

cable77a006.usuarios.retecal.es. Attack - Lovesan. The attack has

been successfully repulsed.
31/03/2004 13:59:44 Your computer has been attacked from

cable77a079.usuarios.retecal.es. Attack - Lovesan. The attack has

been successfully repulsed.
31/03/2004 14:07:32 Your computer has been attacked from

cable80a184.usuarios.retecal.es. Attack - Lovesan. The attack has

been successfully repulsed.
31/03/2004 14:25:21 Your computer has been attacked from

cable78a247.usuarios.retecal.es. Attack - Lovesan. The attack has

been successfully repulsed.
31/03/2004 14:53:55 Your computer has been attacked from

cable80a116.usuarios.retecal.es. Attack - Lovesan. The attack has

been successfully repulsed.
31/03/2004 14:58:17 Your computer has been attacked from

cable72a226.usuarios.retecal.es. Attack - Lovesan. The attack has

been successfully repulsed.
31/03/2004 15:07:53 Your computer has been attacked from

cable65a248.usuarios.retecal.es. Attack - Lovesan. The attack has

been successfully repulsed.
31/03/2004 15:10:08 Your computer has been attacked from

cable70a211.usuarios.retecal.es. Attack - Lovesan. The attack has

been successfully repulsed.
31/03/2004 15:18:34 Your computer has been attacked from

cable71a142.usuarios.retecal.es. Attack - Lovesan. The attack has

been successfully repulsed.
31/03/2004 15:20:00 Your computer has been attacked from

cable79a052.usuarios.retecal.es. Attack - Lovesan. The attack has

been successfully repulsed.

EDITADO: uso como firewall el kaspersky anti-hacker, a pesar de ser muy simple, me ha sorprendido su eficacia y solo consume 700 KB de ram 100% recomendado

Este tema está cerrado a nuevas respuestas. Abre un nuevo tema para retomar la conversación.
D0MINGO

no tengo mucha idea pero creo que lo del RPC es lo del blaster, pero yo siempre me he preocupado de tener el windows bien actualizado y suelo escanear todo el pc con el kaspersky de vez en cuando, tampoco tengo spyware ni ad-ware ni mierda de esa escaneo tambien con el ad-aware 6 con la lista de mierda siempre actualizada xD

🗨️ 1
BocaDePez
BocaDePez

el blaster y algunos virus mas tipo gusano se expande por si solitos, en auna pasa lo mismo toda la red de auna esta infectada, pero no por culpa de ellos si no de los usuariosque no saben que lo tienen. asi cada ordenador dentro de la red interna de cada isp se dedica a mandar ataques a puertos a ver si cuela. el problema es de gente despreocupada dentro de tu misma red, que no tienen sus ordenadores desinfectados!

lo mejor? un buen firewall y los puertos tcp y udp 445 135 al 139 666 593 y 60 cerrados entre otros!

BocaDePez
BocaDePez

acabas de descubrir America, internet esta lleno por completo de virus que hacen ataques aleatorios, lo que pasa es que si nunca te instalas un firewall no lo sabes... pero es asi...
Salu2