Silicon Investor (SI) -- The First Internet Community

STOCKTALK

We've detected that you're using an ad content blocking browser plug-in or feature. Ads provide a critical source of revenue to the continued operation of Silicon Investor. We ask that you disable ad blocking while on Silicon Investor in the best interests of our community. If you are not using an ad blocker but are still receiving this message, make sure your browser's tracking protection is set to the 'standard' level.

Pastimes : Computer Learning -- Ignore unavailable to you. Want to Upgrade?

To: Larry S. who wrote (35626)	8/11/2003 11:20:15 PM
From: mr.mark	Respond to of 110652

"i still don't know how to read who is trying to access. eg: i am getting the message:" the firewall has blocked internet access to your computer (TCP Port 1080) from 67.75.137.62(TCP Port 0)[TCP FlagsLS]" first of all, if the access to your computer has been blocked, as in the port scan message above, then za has done its job completely, and you are not being asked to do anything yourself. my advice then, on the above alert, is forget about it. the above alert is a waste of your time. all it should do, if anything, is give you a warm fuzzy feeling that the firewall is doing what it's supposed to do. there are hundreds of these per day, or more. the alerts you need to watch for are the ones that ask you what you want to do, allow or not allow. (the above example, as i hope i have explained, is not asking you what it should do. it is telling you what it has already done.) these alerts (allow or don't allow) will tell you what process is asking permission. make sure the za program control is set to at least medium, then it will ask you for permission.

To: Larry S. who wrote (35626)	8/11/2003 11:57:29 PM
From: mr.mark	Respond to of 110652

"i still don't know how to read who is trying to access" two more things... one, i just installed the most recent version of za on one of my operating systems, and noted that zonelabs differentiates between these alerts by calling them program alerts and firewall alerts. the example you gave... the firewall has blocked internet access to your computer (TCP Port 1080) from 67.75.137.62(TCP Port 0)[TCP FlagsLS] is a firewall alert. the program alerts are what you should be paying close attention to. two, be advised that if you look in the zonelabs program folder you will find a zonealarm tutorial

To: Larry S. who wrote (35626)	8/12/2003 1:54:06 AM
From: chris714	Read Replies (1) \| Respond to of 110652

Larry.....I have been experiencing the exact same problem that you have. Mark is correct..it is the LovSan Virus or Blaster Worm I was finally able to download the "Patch" and now everything "appears okay" However I found nothing of interest in the Task Manager or the Registry. But for now my computer is running without unexpected reboots, shutdowns,programs opening or " NT Authority" proclamations. Very strange....never had a virus in my life....and today I have to extinguish two of them. Earlier today I found 7 infected files...infected by W32.Spybot.Worm---- Deleted them But I knew that my PC was still not completely healthy. Hours later the " NT Authority" starts popping up. My virus scan actually never found a virus related to this problem....but since I plugged in the patch....I have had no recurrences. Good Luck Chris