Re: TCP/IP and Viruses

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

From: Miha Pihler (mihap-news_at_atlantis.si)
Date: 10/17/04

  • Next message: Shenan Stanley: "Re: After the update, I got hacked by the ads company" 
    Date: Sun, 17 Oct 2004 10:14:10 +0200

    Scott,

    If you have e.g. LAN on which you have more then a few computers, it is
    possible that one of them is infected and is spreading viruses. If this is
    so the only thing that your computer needs is a valid IP on the network and
    it can get infected.

    DNS doesn't play any role in this since it is not your computer that is
    connecting to the infected computer at e.g. xy.domain.com, but is actually
    infected computer that is randomly looking for IP addresses to connect to
    and infect the computer. E.g. SQL Slammer worm needed about 11 minutes to
    infect about 75000 servers.

    Invalid default gateway will only prevent access to the internet or other
    subnets, but will not prevent computer from connecting to other computers in
    same LAN.

    How to setup your computer in secure way. Well, you install the server off
    the network and install the patches and AV with latest definitions from a
    CD.
    Another option would be to install your computer off the network and after
    first boot enable personal firewall. After firewall is enabled you can go on
    the internet and download the patches and AV updates. Firewall can prevent
    infected computers from connecting to your computer and infecting it.

    I hope this helps,

    Mike

    "scott" <sbailey@mileslumber.com> wrote in message
    news:uFsVD59sEHA.2124@TK2MSFTNGP11.phx.gbl...
    > so if the ip, subnet are correct, but the gateway and dns ip's are wrong,
    a
    > pc is still at risk?
    >
    > i don't understand how a pc can be at risk if it can't connect to
    internet.
    >
    > if this is true, how can a user setup a pc and get virus software on it
    > without taking a risk? what i mean is there will always be some time
    between
    > setup and anti-virus install from the domain controller on the network.
    >
    >
    > "Andrew Lomakin" <lomakin@e-solutions.lv> wrote in message
    > news:OeNhDC9sEHA.2956@TK2MSFTNGP12.phx.gbl...
    > > yes, computer is vulnerable if DNS is set to wrong IP
    > > more than that: it's vulnerable even if gateway is set to wrong IP.
    > >
    > >
    > >
    > > "scott" <sbailey@mileslumber.com> wrote in message
    > > news:uKEBLx8sEHA.2668@TK2MSFTNGP12.phx.gbl...
    > >> I setup a server with my TCP/IP settings and quit for the day. Because
    I
    > >> didn't have time to install virus protection, i just changed the
    > >> preferred
    > >> DNS server to a non-working ip address. I forgot to change the Gateway
    to
    > > be
    > >> sure internet access wouldn't be possible.
    > >>
    > >> the server stayed that way for 18 hours until i could finish seting up
    > >> anti-virus software.
    > >>
    > >> my question is a computer open to attacks if the gateway ip is correct,
    > > but
    > >> the DNS ip address is wrong?
    > >>
    > >>
    > >
    > >
    >
    >

  • Next message: Shenan Stanley: "Re: After the update, I got hacked by the ads company"

    Relevant Pages

    • Re: Hard drive crashed
      ... Because of this tendency of attachments to infect, ... Cannot Open E-Mail Attachments in Outlook Express After You Install SP1 ... , then wasted space is generated in that file, and the folder must be ... Turn off email scanning in your antivirus software. ...
      (microsoft.public.windows.inetexplorer.ie6_outlookexpress)
    • Re: Virus - 100% CPU resources utilized
      ... Most current Malware seems to infect IE through the BHO weakness, ... try following some of the malware removal threads ... > 3) Hope that Stinger cleans up the machine enough to be able to> reinstall your av or install a new, ... Do not install drivers from Windows Update. ...
      (microsoft.public.security.virus)
    • Re: All the symptoms no worm yet
      ... but not infect the system. ... By all means, install the patch. ... > the computer restarts, the generic host process for Win32 ...
      (microsoft.public.security)
    • Re: Scanning from a CD
      ... If you have an infected system and then install a drive into it that ... contains the OS files for another, the virus can replicate itself onto it. ... a surface exploit could infect your PC>> ... risk and hope you don't get caught. ...
      (microsoft.public.security.virus)
    • Re: Activation period Expired
      ... I assumed you were internet savvy. ... most cracking sites install pornographic stuff on your system. ... > You advised people to do a google search for wpa_kill.exe. ... > sites that google found tried to infect my computer. ...
      (microsoft.public.windowsxp.general)