I feel special
Fortunatly I’m not even on a server and my firewall blocked it (Go ZoneAlarm!).
Just my MPSIMS for the day
I feel special
Fortunatly I’m not even on a server and my firewall blocked it (Go ZoneAlarm!).
Just my MPSIMS for the day
Is this spam?
Naah! Zone Alarm is free.
Like Doug said I am not trying to sell a free product
Yay, my machine got hit by this over the weekend.
The last few days my firewall has been blocking HTTP traffic to my machine. I hadn’t thought too much of it, apart from interest in the increased activity towards my machine.
Anyway… I’d been meaning to install win2k server on my machine to play with and get a better handle on things. Off I went, installed it all, when not long after the install, things slowed to a crawl. I looked at the cable modem and the traffic light was going ballistic. How interesting, thinks I - maybe win2k is trying to update an external DNS server (not unusual when first installed, I’ve seen this many times before). So I trashed the root zone on the machine’s DNS server, set it up as a forwarder and all the traffic stopped. Yay, I think to myself, now I can go ahead and install the firewall and antivirus software so I can get on with the rest of my little experiments. As it turns out, too late - I’d already been hit with the bollocky code red worm!
By this stage (after addressing the DNS issue, which did kill most outbound traffic - for about five minutes), I’m thinking… hmmm… code red… oh damn. So I got a hold of ZoneAlarm, which promptly reported what I’d suspected, which is that IIS was initiating traffic to the outside world. 500 attempts in the space of about 30 seconds. Yowsa.
I installed the patch from MS and everything is fine now. Interesting little beast, this worm. I can see how it could cause problems in the real world It managed to completely clog my 400K/s cable connection, not to mention chew 100% CPU time on my machine.
I suppose in hindsight I should’ve installed zonealarm before connecting the machine to the cable connection… but couldn’t download it without connecting! D’oh!
Anyways… just my 2c worth.
Max
hmmmm - I think I was being hit on also. We had over 80 hits before a power burp restarted the computer. Then we had an additional 130+ hits. I was wondering if it was worm-related. Apparently Zone Alarm saved me too…
My comp’s been getting hammered a bit, too. Annoying.