Dsy Network>  www | forum | my | didattica | howto | wiki | el goog | stats | blog | dona | rappresentanti
Homepage
 Register   Calendar   Members  Faq   Search  Logout 
.dsy:it. : Powered by vBulletin version 2.3.1 .dsy:it. > Community > Forum De Bell Tolls > [AIUTO] Tentativo di Intrusione
Pages (2): [1] 2 »   Last Thread   Next Thread
Author
Thread    Expand all | Contract all    Post New Thread    Post A Reply
Collapse
dan
..: Dottore :..

User info:
Registered: Oct 2002
Posts: 2446 (0.29 al dì)
Location: MI
Corso: Info
Anno: 3
Time Online: 11 Days, 7:56:39 [...]
Status: Offline

Post actions:

Edit | Report | IP: Logged
 Exclamation [AIUTO] Tentativo di Intrusione

C'è l'IP 82.48.204.208 che cerca di attaccarmi con l'attacco MS_Windows_LSASS_RPC_DS_Request alla porta microsoft-ds(445).

Qualcuno mi sa dire che cosa cavolo è?

C'è il mio PC che non mi fa più connettere ad Internet nè scaricare la posta!
28-10-2004 13:46
Click Here to See the Profile for dan Click here to Send dan a Private Message Visit dan's homepage! Find more posts by dan Add dan to your buddy list Printer Friendly version Email this Article to a friend Reply w/Quote
Collapse
Alf
°o.mini sayan.o°

User info:
Registered: Jun 2003
Posts: 5381 (0.65 al dì)
Location: Mediolanum
Corso: Informatica
Anno: FINITOOOO!
Time Online: 155 Days, 9:46:05: [...]
Status: Offline

Post actions:

Edit | Report | IP: Logged
 Re: [AIUTO] Tentativo di Intrusione

Originally posted by dan
C'è l'IP 82.48.204.208 che cerca di attaccarmi con l'attacco MS_Windows_LSASS_RPC_DS_Request alla porta microsoft-ds(445).

Qualcuno mi sa dire che cosa cavolo è?

C'è il mio PC che non mi fa più connettere ad Internet nè scaricare la posta!


Probabilmente Worm Sasser :shock:

__________________
(\ /)
( . .)
c('')('') This is Bunny!
Help her succeed in world domination by copy and pasting her in
your signature.
28-10-2004 13:50
Click Here to See the Profile for Alf Click Here to See the Blog of Alf Click here to Send Alf a Private Message Find more posts by Alf Add Alf to your buddy list Printer Friendly version Email this Article to a friend Reply w/Quote
Collapse
DeepBlue
tired guy

User info:
Registered: Sep 2003
Posts: 4258 (0.52 al dì)
Location: CSN
Corso: Info tlc
Anno:
Time Online: 52 Days, 8:40:31 [...]
Status: Offline

Post actions:

Edit | Report | IP: Logged

Non ti attaccano, è solo Sasser. Se sei su rete Fastweb è normale: ho MB di log di pacchetti filtrati sulla 445.

Se non riesci più a collegarti significa che è troppo tardi e che sei infetto.

Se non riesci a debellarlo e dovrai reinstallare Win, ti consiglio di farlo con il cavo di rete scollegato e di attaccarlo solo quando avrai installato un firewall.

__________________
~ get Debian! ~ get FreeBSD! ~ get OpenBSD! ~

28-10-2004 13:51
Click Here to See the Profile for DeepBlue Click Here to See the Blog of DeepBlue Click here to Send DeepBlue a Private Message Find more posts by DeepBlue Add DeepBlue to your buddy list Printer Friendly version Email this Article to a friend Reply w/Quote
Collapse
dan
..: Dottore :..

User info:
Registered: Oct 2002
Posts: 2446 (0.29 al dì)
Location: MI
Corso: Info
Anno: 3
Time Online: 11 Days, 7:56:39 [...]
Status: Offline

Post actions:

Edit | Report | IP: Logged

Cioè qualcuno che cerca se cel'ho installato?
28-10-2004 13:51
Click Here to See the Profile for dan Click here to Send dan a Private Message Visit dan's homepage! Find more posts by dan Add dan to your buddy list Printer Friendly version Email this Article to a friend Reply w/Quote
Collapse
DeepBlue
tired guy

User info:
Registered: Sep 2003
Posts: 4258 (0.52 al dì)
Location: CSN
Corso: Info tlc
Anno:
Time Online: 52 Days, 8:40:31 [...]
Status: Offline

Post actions:

Edit | Report | IP: Logged

E' un worm!

__________________
~ get Debian! ~ get FreeBSD! ~ get OpenBSD! ~

28-10-2004 13:52
Click Here to See the Profile for DeepBlue Click Here to See the Blog of DeepBlue Click here to Send DeepBlue a Private Message Find more posts by DeepBlue Add DeepBlue to your buddy list Printer Friendly version Email this Article to a friend Reply w/Quote
Collapse
dan
..: Dottore :..

User info:
Registered: Oct 2002
Posts: 2446 (0.29 al dì)
Location: MI
Corso: Info
Anno: 3
Time Online: 11 Days, 7:56:39 [...]
Status: Offline

Post actions:

Edit | Report | IP: Logged

Originally posted by DeepBlue
Non ti attaccano, è solo Sasser. Se sei su rete Fastweb è normale: ho MB di log di pacchetti filtrati sulla 445.

Se non riesci più a collegarti significa che è troppo tardi e che sei infetto.

Se non riesci a debellarlo e dovrai reinstallare Win, ti consiglio di farlo con il cavo di rete scollegato e di attaccarlo solo quando avrai installato un firewall.


E' il firewall che non mi fa collegare ad internet (forse per proteggermi), non il worm! :sad:
28-10-2004 13:52
Click Here to See the Profile for dan Click here to Send dan a Private Message Visit dan's homepage! Find more posts by dan Add dan to your buddy list Printer Friendly version Email this Article to a friend Reply w/Quote
Collapse
Alf
°o.mini sayan.o°

User info:
Registered: Jun 2003
Posts: 5381 (0.65 al dì)
Location: Mediolanum
Corso: Informatica
Anno: FINITOOOO!
Time Online: 155 Days, 9:46:05: [...]
Status: Offline

Post actions:

Edit | Report | IP: Logged

Originally posted by dan
Cioè qualcuno che cerca se cel'ho installato?



Si' un'anima pia che vuole eliminare i worm dal tuo pc :asd:

No e' sasser che cerca di infettarti da quel pc probabilmente.


README

__________________
(\ /)
( . .)
c('')('') This is Bunny!
Help her succeed in world domination by copy and pasting her in
your signature.
28-10-2004 13:53
Click Here to See the Profile for Alf Click Here to See the Blog of Alf Click here to Send Alf a Private Message Find more posts by Alf Add Alf to your buddy list Printer Friendly version Email this Article to a friend Reply w/Quote
Collapse
Napolux
-29 Kg da Settembre 2005

User info:
Registered: Jun 2002
Posts: 3666 (0.42 al dì)
Location: Giussano (MI)
Corso: F28
Anno: ???
Time Online: 21 Days, 19:29:36 [...]
Status: Offline

Post actions:

Edit | Report | IP: Logged

Le patch...

Queste sconosciute... :asd:

__________________
Napolux.com
28-10-2004 13:55
Click Here to See the Profile for Napolux Click Here to See the Blog of Napolux Click here to Send Napolux a Private Message Visit Napolux's homepage! Find more posts by Napolux Add Napolux to your buddy list Printer Friendly version Email this Article to a friend Reply w/Quote
Collapse
DeepBlue
tired guy

User info:
Registered: Sep 2003
Posts: 4258 (0.52 al dì)
Location: CSN
Corso: Info tlc
Anno:
Time Online: 52 Days, 8:40:31 [...]
Status: Offline

Post actions:

Edit | Report | IP: Logged

Originally posted by dan
E' il firewall che non mi fa collegare ad internet (forse per proteggermi), non il worm! :sad:


??

quale SO?
quale firewall?

__________________
~ get Debian! ~ get FreeBSD! ~ get OpenBSD! ~

28-10-2004 13:55
Click Here to See the Profile for DeepBlue Click Here to See the Blog of DeepBlue Click here to Send DeepBlue a Private Message Find more posts by DeepBlue Add DeepBlue to your buddy list Printer Friendly version Email this Article to a friend Reply w/Quote
Collapse
dan
..: Dottore :..

User info:
Registered: Oct 2002
Posts: 2446 (0.29 al dì)
Location: MI
Corso: Info
Anno: 3
Time Online: 11 Days, 7:56:39 [...]
Status: Offline

Post actions:

Edit | Report | IP: Logged

Originally posted by Alf
Si' un'anima pia che vuole eliminare i worm dal tuo pc :asd:

No e' sasser che cerca di infettarti da quel pc probabilmente.


README


'sto figlio di puttana!

quindi prima o poi il firewall riprenderà a farmi collegare??
28-10-2004 13:55
Click Here to See the Profile for dan Click here to Send dan a Private Message Visit dan's homepage! Find more posts by dan Add dan to your buddy list Printer Friendly version Email this Article to a friend Reply w/Quote
Collapse
dan
..: Dottore :..

User info:
Registered: Oct 2002
Posts: 2446 (0.29 al dì)
Location: MI
Corso: Info
Anno: 3
Time Online: 11 Days, 7:56:39 [...]
Status: Offline

Post actions:

Edit | Report | IP: Logged

Originally posted by DeepBlue
??

quale SO?
quale firewall?


Win Xp
Norton PF
28-10-2004 13:56
Click Here to See the Profile for dan Click here to Send dan a Private Message Visit dan's homepage! Find more posts by dan Add dan to your buddy list Printer Friendly version Email this Article to a friend Reply w/Quote
Collapse
DeepBlue
tired guy

User info:
Registered: Sep 2003
Posts: 4258 (0.52 al dì)
Location: CSN
Corso: Info tlc
Anno:
Time Online: 52 Days, 8:40:31 [...]
Status: Offline

Post actions:

Edit | Report | IP: Logged

Non conosco il norton, comunque se impedisce al pc di collegarsi a Internet è veramente una boiata di FireWall. Sicuro che non si possa eliminare questa feature?

__________________
~ get Debian! ~ get FreeBSD! ~ get OpenBSD! ~

Last edited by DeepBlue on 28-10-2004 at 14:04
28-10-2004 13:59
Click Here to See the Profile for DeepBlue Click Here to See the Blog of DeepBlue Click here to Send DeepBlue a Private Message Find more posts by DeepBlue Add DeepBlue to your buddy list Printer Friendly version Email this Article to a friend Reply w/Quote
Collapse
CLod
JAILED

User info:
Registered: May 2002
Posts: 2688 (0.31 al dì)
Location: una delle 2 torri
Corso: Master ICT Sec
Anno: security
Time Online: 14 Days, 23:35:35 [...]
Status: Offline

Post actions:

Edit | Report | IP: Logged

togli norton che ti ciucia risorse e basta

__________________
Se il pugno e' chiuso la mano e' vuota. Solo se la mano e' aperta puoi possedere tutto
28-10-2004 14:11
Click Here to See the Profile for CLod Click Here to See the Blog of CLod Click here to Send CLod a Private Message Find more posts by CLod Add CLod to your buddy list Printer Friendly version Email this Article to a friend Reply w/Quote
Collapse
dan
..: Dottore :..

User info:
Registered: Oct 2002
Posts: 2446 (0.29 al dì)
Location: MI
Corso: Info
Anno: 3
Time Online: 11 Days, 7:56:39 [...]
Status: Offline

Post actions:

Edit | Report | IP: Logged

Originally posted by CLod
togli norton che ti ciucia risorse e basta


Così mi inculano definitivamente il computer! :evil:
28-10-2004 14:12
Click Here to See the Profile for dan Click here to Send dan a Private Message Visit dan's homepage! Find more posts by dan Add dan to your buddy list Printer Friendly version Email this Article to a friend Reply w/Quote
Collapse
fulminato1
aLTeRaZioNeGuiTaRVoiCe

User info:
Registered: Oct 2003
Posts: 2809 (0.34 al dì)
Location: a casa.
Corso: comunicazio digital
Anno: secondo?
Time Online: 30 Days, 8:54:34 [...]
Status: Offline

Post actions:

Edit | Report | IP: Logged

togli norton e metti zone alarm, ti colleghi ti scarichi le patch e sei a posto! poi se non sbaglio c'è il tool per rimuovere il sasser!

__________________
www.alterazione.com www.andreaforzani.com
www.myspace.com/alterazione
www.myspace.com/festaincravilla

28-10-2004 14:14
Click Here to See the Profile for fulminato1 Click Here to See the Blog of fulminato1 Click here to Send fulminato1 a Private Message Visit fulminato1's homepage! Find more posts by fulminato1 Add fulminato1 to your buddy list Printer Friendly version Email this Article to a friend Reply w/Quote
All times are GMT. The time now is 19:05.    Post New Thread    Post A Reply
Pages (2): [1] 2 »   Last Thread   Next Thread
Show Printable Version | Email this Page | Subscribe to this Thread | Add to Bookmarks

Forum Jump:
Rate This Thread:

Forum Rules:
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts 		HTML code is OFF
vB code is ON
Smilies are ON
[IMG] code is ON
 

Powered by: vBulletin v2.3.1 - Copyright ©2000 - 2002, Jelsoft Enterprises Limited
Mantained by dsy crew (email) | Collabora con noi | Segnalaci un bug | Archive | Regolamento | Licenze | Thanks | Syndacate
Pagina generata in 0.086 seconds (48.70% PHP - 51.30% MySQL) con 25 query.