Computing.Net > Forums > Security and Virus > Remote Computers trying to connect?

Computing.Net: Over 1,000,000 posts about all things technology related! Over 90% answered within 24 hours! Click here to sign up now, it's free!

Remote Computers trying to connect?

Reply to Message Icon

Original Message
Name: wacky_woodchuck
Date: January 4, 2005 at 12:18:47 Pacific
Subject: Remote Computers trying to connect?
OS: XP Home
CPU/Ram: 1700+ AMD/512mb
Comment:

As of a few weeks ago I found a remote network installed on my PC, that I didn't authorize (or authorized mistakingly). It led to a medical college in Texas. I'm sure it was using me as an FTP server of for some reason. I ended up blocking the IP's that we the culprits of getting into my PC. I pissed them off when I deleted the remote network (which I couldn't get into, just see and then deleted it off the net). So they were trying to infect me with everything, every which way into what ever port they could get into.

Now my question is: I get atleast 200 or more requests per day (from different IP's) to connect to a remote network hosted by me. This is rather annoying. I performed a Spybot, Adaware and a hijackthis and removed anything funny. Is there anyone who can help stop these people pinging me? Is there a program still on my PC somewhere or is my IP still labeled as active by what ever this remote network is?

I didn't find any extra files on my PC except for what was mine. I did delete a few extra folders that I didn't put there and were duplicates of my files.

Any help would be great. Thank you!

~Mike


Report Offensive Message For Removal


Response Number 1
Name: Martin Crandall
Date: January 4, 2005 at 15:21:14 Pacific
Reply:

Get used to it, a recent experiment discovered that the average PC is pinged over 400 times a day.

Seriously though, get a Router, they have firewalls built into them. You won't even notice the attempts afterwards, because they won't get past the Router to your PC.

PS, ask anyone here, a router is a heck of a lot better than the "firewall" you have in your XP.


_________________________
The internet is no longer a toy, it's a COMBAT ZONE!


Report Offensive Follow Up For Removal

Response Number 2
Name: wacky_woodchuck
Date: January 4, 2005 at 16:29:36 Pacific
Reply:

I am using NAV firewall and have been for quite some time. I have never had these pings until I had the above issue.

So hence why I am stumped. Something or somewhere has to have my PC still active.

I'm just looking for ideas.

Thanks again,

~Mike


Report Offensive Follow Up For Removal

Response Number 3
Name: wildcat
Date: January 5, 2005 at 07:09:39 Pacific
Reply:

Investing in a router with Firewall is ine way but another way is invest in a decent Internet security which has a really good firewall that comes with. I use a program called Panda internet security whcih blocks evrything that i have come across. I know my computer gets scanned for weaknesses 50 60 times a day but as yet no one has got in. the reason panda is so good is that it constantly updates itself when your online and so gives you 100% protection.

Have a look and see what you think:

http://www.pandasoftware.com/products/platinum_is2005/

there is also an online scan there that will pick adware and spware as well as viruses

I feel for you as there are some reall y nasty people out there who like nothing more than make some elses life hell online

Good Luck


Report Offensive Follow Up For Removal

Response Number 4
Name: JackG
Date: January 5, 2005 at 11:31:26 Pacific
Reply:

Get a hardware router ($40) and just block them. I have one and glad I do. Its blocking a steady stream of TCP and UDP traffic and there is no overhead on the system handling/blocking the requests. They can't even detect your system at the IP address.

My system was out for a week this summer due to storms. When it came back up I had a different dynamic IP address, and a host of "Bots" hitting port 21232 with GET requests. About 5000 a day from about 600 different IP addresses, plus the normal scans. Now over six months later with the same "dynamic" IP address, I am still getting about 350 hit per day from some of the same 140 IP addresses.

You would think these people would check their systems and remove such infections.

Not much I could do but let the firewall router handle them (and log them to my server). Seems I picked up the IP address of some infected system being used to service "Bots" for someone.

In tracking down the problem, I found partial UDP packets getting through the firewall router. They appear to be coming from a collage not far away. Sent the information to several groups, including Cisco who now owns Linksys. They soon released an update for their firewall router that takes care of this leak.

Late at night, the cable modem Receive LED has an almost steady glow of inbound packets. Most are not TCP packets, but UDP or "other". All are blocked by the router, so that a system based software firewall does not have to spend processor overhead handling them.


Report Offensive Follow Up For Removal

Response Number 5
Name: viaro
Date: January 5, 2005 at 19:19:03 Pacific
Reply:

Mike,

If you have DSL,

How about you turn off your computer, turn off your DSL modem, just turn everything off.

Leave everything off for a while - maybe a few hours.

Then when you turn the DSL modem and computer back on you should have a new IP address.

Unless you still have a trojan or something of the sort on your computer - this should fix the problem.

Because if they don't know your new IP, then they can't try to connect - can they? :D


Report Offensive Follow Up For Removal


Response Number 6
Name: wacky_woodchuck
Date: January 6, 2005 at 19:05:36 Pacific
Reply:

Yeah I'll look into a router and blocking the hits at that address.

I will also shut off the systems. I tried a different route of resetting the IP's etc... but I still get the hits. So maybe I do have a trojan on my PC. I have done a trojan scan, but nothing came up (Tauscan).

Maybe a better trojan scanner out there?

Thanks for the help. Looks like I have more to research!


Report Offensive Follow Up For Removal






Post Locked

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.


Go to Security and Virus Forum Home



Results for: Remote Computers trying to connect?

remote system trying to access PC
    Summary: This is also happening to me too after i was downloading using limewire. I heard some people on this forum say that a remote system is a system located on your area . And said tat if you were using pr...
www.computing.net/answers/security/remote-system-trying-to-access-pc/16092.html

my computer tries to conect to this
    Summary: Everytime I'm working off-line, my computer tries to conect to the internet to this site: www.irc.buy-on-line.com I guess this is some kind of spyware or something bad, I downloaded an antivirus Ava...
www.computing.net/answers/security/my-computer-tries-to-conect-to-this/6531.html

ISP tries to connect by itself
    Summary: Recently my computer has started trying to connect to the internet by itself. I use an SBC/Yahoo connection, so the connection manager window opens without the connection actually being made. I'm runn...
www.computing.net/answers/security/isp-tries-to-connect-by-itself/5839.html








Which MP3 player do you have?

iPod/iPhone
Zune
Something Else
None


View Results

Poll Finishes Today.
Discuss in The Lounge
Poll History






Data Recovery Software