Nbblock block-tcp

March 1, 2010 at 16:30:18
Specs: Windows XP SP2, NA

Hi,

So I have a firewall that detected GUI%GUICONFIG#SRULE@NBBLOCK#BLOCK-UDP for ntoskrnl.exe (Windows file). I also get infinitely many connections with different IP adresses all the time.. what's weird is that the remote MAC adress of all that is only one digit different than my router's MAC address! I find it weird that this 'attack' was from this MAC address. What does this mean if it 'was' from my router? Why's my router attempting to block things? I just recently added this firewall, but just to throw this out there, over time, the computer says i'm connected to the internet, but nothing works online, like the internet or programs. Are they somehow related?


See More: Nbblock block-tcp

Report •


#1
March 1, 2010 at 23:51:21

pepanee, I smell a rat. Me and my paranoia would scan anyway just 'cuz.
Be aware that a virus and a Trojan are similar, but not the same. Many times, an AV detects one it can't clean, other times, it gets missed entirely.
If you need to clean one, Superantispyware (info only. I’m not paid for recommendation) can do the job and you can get it free @:
http://www.superantispyware.com/
among other places. They have a Vista compatible version if needed Dunno about Windows 7..
If it turns out that you need to use it, be sure to update Superantispyware prior to running and disable 'restore' (restart after cleaning) so the nasty doesn't get put back. They just released a new update recently and it changes all the time. Things are in a constant state of flux.
The restore thing is critical. May not be your deal at all, but won't hurt anything to try.
HTH.
Ed in Texas.

Report •
Related Solutions


Ask Question