Results 1 to 4 of 4

Thread: Strange Probe Activity. Need Help!

  1. January 18th, 2002, 06:03 PM #1
    Megazoid
    Megazoid is offline
    Junior Member
    Join Date
    Dec 2001
    Posts
    4

    Strange Probe Activity. Need Help!

    This is the first time i have ever had so many probes in the one day.

    I have had over 700 Probes all in a 15 minute time-span (I am using ZoneALARM -
    Latest Versions). The VisualROUTE program is reporting 'KAZAA' as the source
    of the attacks (And Port 1214 As the Target - Kazaa Port).

    I am now getting around 1 probe a second, i have even
    shutdown the Kazaa program and still these attacks come. I am sick of this. Is this normal? can anyone give me any advice on this ?

    When i have KAZAA Running i dont get as many attacks (no TCP/IP probes - Just the 'odd' NETBios one, and quite a few ICMP Unreachable's). When i shut kazaa down i get tons of probes (i have over 500 in 10 mins). I dont know if this is spyware or just KAZAA, but why so many attacks when KAZAA is closed? Hopefully some has the answers!

    Thanks in advance guys!

    Regards,
    Dave
  2. January 18th, 2002, 06:17 PM #2
    dcongram
    dcongram is offline
    Senior Member
    Join Date
    Aug 2001
    Posts
    267

    of course

    Kazaa, like Morpheus, and other MP3 programs 'EXPECTS' you to open a port in your computer to allow others to access your MP3 files. ZoneAlarm has opened the port for Kazaa inbound and outbound.

    When you quit using Kazaa, it is no longer advertising your share, but your IP has been advertised on the net, and all those other Kazaa computers keep updating their database looking for you.

    Solution ? IF you can use Kazaa without sharing your files....you will no longer advertise your presence. Eventually (it will take some time) the 'probes' will diminish, then stop.

    OR leave Kazaa running (as they intended) and hope their is no exploit.
  3. January 18th, 2002, 06:38 PM #3
    Vorlin
    Vorlin is offline
    PHP/PostgreSQL guy
    Join Date
    Dec 2001
    Posts
    1,164
    I dont know if this is spyware or just KAZAA, but why so many attacks when KAZAA is closed? Hopefully some has the answers!
    Kazaa has known spyware, and, with the update, if you remove it from the registry (like with AdAware), it won't even run. I suggest getting rid of Kazaa and go with Audiogalaxy. Much more efficient and reliable (as I've found anyways), with no known spyware.
    We the willing, led by the unknowing, have been doing the impossible for the ungrateful. We have done so much with so little for so long that we are now qualified to do just about anything with almost nothing.
  4. January 18th, 2002, 07:08 PM #4
    antihaxor
    antihaxor is offline
    Banned
    Join Date
    Dec 2001
    Posts
    400
    Also make sure that you are not setup as a "supernode" In morpheus being set up as one can cause zonealarm and blackice to go crazy.
« Previous Thread | Next Thread »

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  

Forum Rules