Newsgroup: it.comp.sicurezza.windows
Titolo: AIUTO-qualcuno mi ha preso di mira....

ciaoo
qualcuno sta cercando di bucare il mio pc
ho scaricato il prog lockdown2000
e questi sono i log...
per favore non so che fare....aiuto!!!!
questo e' di oggi...:((
[06/03/00 23.02.20] Incoming hack attempt from IP Address:
195.191.2.199
[06/03/00 23.02.20] Hacker is attempting to gain access using the
Netbus trojan.
[06/03/00 23.02.20] Hacker's connection was terminated by Lockdown
2000.
[06/03/00 23.02.20] Log auto-saved to: 03062000.LOG
[06/03/00 23.02.20] Attempting trace route... Please stand by...
[06/03/00 23.02.20] Attempting to trace hacker's connection... Please
stand by...
[06/03/00 23.02.20] 06/03/00 23.02.20-[From 195.191.2.199]-
[06/03/00 23.02.21]  => 
lo1.nas-06-rm.flashnet.it
[06/03/00 23.02.21]  => 
ip190.pool-02.flashnet.it
[06/03/00 23.02.21] =========================================
[06/03/00 23.03.47] Incoming hack attempt from IP Address:
195.191.2.199
[06/03/00 23.03.47] Hacker is attempting to gain access using the
Netbus trojan.
[06/03/00 23.03.47] Hacker's connection was terminated by Lockdown
2000.
[06/03/00 23.03.47] Log auto-saved to: 03062000.LOG
[06/03/00 23.03.47] Attempting trace route... Please stand by...
[06/03/00 23.03.47] Attempting to trace hacker's connection... Please
stand by...
[06/03/00 23.03.47] 06/03/00 23.03.47-[From 195.191.2.199]-
[06/03/00 23.03.48]  => 
lo1.nas-06-rm.flashnet.it
[06/03/00 23.03.48]  => 
ip190.pool-02.flashnet.it
[06/03/00 23.03.48] =========================================
[06/03/00 23.17.36] Incoming hack attempt from IP Address:
195.191.2.199
[06/03/00 23.17.36] Hacker is attempting to gain access using the
Netbus trojan.
[06/03/00 23.17.36] Hacker's connection was terminated by Lockdown
2000.
[06/03/00 23.17.36] Log auto-saved to: 03062000.LOG
[06/03/00 23.17.36] Attempting trace route... Please stand by...
[06/03/00 23.17.36] Attempting to trace hacker's connection... Please
stand by...
[06/03/00 23.17.36] 06/03/00 23.17.36-[From 195.191.2.199]-
[06/03/00 23.18.38]  - Connection made locally!
[06/03/00 23.18.38] =========================================
questo di domenica....
[04/03/00 20.36.50] Incoming hack attempt from IP Address:
212.210.240.113
[04/03/00 20.36.50] Hacker is attempting to gain access using the
Netbus trojan.
[04/03/00 20.36.50] Hacker's connection was terminated by Lockdown
2000.
[04/03/00 20.36.50] Log auto-saved to: 03042000.LOG
[04/03/00 20.36.50] Attempting trace route... Please stand by...
[04/03/00 20.36.50] Attempting to trace hacker's connection... Please
stand by...
[04/03/00 20.36.50] 04/03/00 20.36.50-[From 212.210.240.113]-
[04/03/00 20.36.55]  => 
dlr01-rm-fa-2-0.flashnet.it
[04/03/00 20.36.55]  => 
clr02-rm-fa-1-0.flashnet.it
[04/03/00 20.36.55]  => 
interbusiness.mix.aiip.it
[04/03/00 20.36.55]  => 
r-mi16-fe6.interbusiness.it
[04/03/00 20.36.55]  => 
r-rm40-fa6.interbusiness.it
[04/03/00 20.36.55]  => 
gw-customers.telvia.it
[04/03/00 20.36.55]  => 212.210.240.113
[04/03/00 20.36.55] =========================================

 ho scaricato il prog lockdown2000
Ecco, ora toglilo così dormi piu' tranquillo.
Xbug


Il troiano netbus e` un viruz, se non ce l'hai non ti possono `bucare'.
Lockdown ti comunica il tentativo, ma anche se non lo installavi non
riuscivano a bucarti ugualmente perche` non sei infetto da netbus (per 
ora).
Procurati un antiviruz molto aggiornato per rilevare le backdoorz 
(netbuz e backorifice o BO) e magari l'avp syswatcher/netagent da 
www.avp.it
Soprattutto non eseguire filez sulla cui provenienza non sei sicuro
al 200%, altrimenti il viruz ti fottera` e tutti i lamer della rete te lo 
metteranno in culo!! :-))
-- 
    Ciao
        Pardo