Hi
This thread was gonna be called Rage Against the Virus(i lov Rage Against The Machine),
but my dam ISP is more IRETATING
than the worst kind of virus(damn ISP)

It all began when i installed ZONEALARM,ZoneAlarm kept picking up Intrusions from variuas
ports mostly NetBOIS UDP,
-IT has already picked up 70 INTRUSIONS wich of 59 is HIGH rated.

So I thought i would ask my ISP,before i ask you guyz(and gulz).
My ISP wich is the "GREAT" South African ISP, M-WEB ,told me(via E-MAIL)
AND THIS IS THEIR DAMN REPLY(and I qoute):

---"
Good day
Thank you for contacting us.

I cannot give you any real advise on this as we do not support 3rd party software accept that all these calls are coming in via udp port, configer your firewall to block udp calls.
Please do not hesitate to contact us or our Technical Support Helpline on 0860 11 22 52 should you require any additional assistance. If you only have the one line you can contact us on 08216100 via your cellphone.

Kind regards

Veon Battista
M-Web Dial Services
Customer Service Representative"

So I phoned that "SUPPORT" "HELP"-line,and i was put through to the "advanced" "SUPORT"
department.
I told him that its NOT the software that is the prob(so its not a 3rd-party thing) and that
there is traffic and intrusins on my PC.

The guy said:" THERE IS ABSALUTELY NOW WAY ANYONE COULD HACK OR GAIN ACCESs TO YOUR COMPUTER,
NOT EVEN ME,BECAUSE M-WEB HAVE GOT A FIREWALL(does he think i dont know that ****) THAT PROTECTS
YOU."
He also said:"ITS YOUR FIREWALL THAT IS THE PROBLEM,YOU NEED TO INTSALL IT AGAIN(dumbass).
GOODBYE"

Now where does that leave me?->****en nowhere,so the only ones that could help me is YOU AO

HERE IS a few logs(parts only,cause putting the whole log on would be un-ending):

I am jus masking the DESTINATION(PARANOIA REASONS)

type,date,time,source,destination,transport
FWIN,2003/06/12,22:47:34 +2:00 GMT,196.7.205.238:1027,255.255.255.255:137,UDP
FWIN,2003/06/12,23:38:40 +2:00 GMT,196.7.205.238:1027,255.255.255.255:137,UDP
FWIN,2003/06/12,23:43:30 +2:00 GMT,196.7.205.238:1025,255.255.255.255:137,UDP
FWIN,2003/06/12,23:49:18 +2:00 GMT,68.75.249.230:1028,255.255.255.255:137,UDP
FWIN,2003/06/12,23:50:56 +2:00 GMT,196.7.206.59:1028,255.255.255.255:137,UDP
FWIN,2003/06/12,23:57:54 +2:00 GMT,196.7.205.238:1026,255.255.255.255:137,UDP
FWIN,2003/06/13,00:04:12 +2:00 GMT,196.7.206.59:1026,255.255.255.255:137,UDP
FWIN,2003/06/13,00:15:16 +2:00 GMT,196.7.206.59:1027,255.255.255.255:137,UDP
FWIN,2003/06/13,00:20:00 +2:00 GMT,196.7.206.59:1029,255.255.255.255:137,UDP

and another

FWIN,2003/06/14,17:07:28 +2:00 GMT,24.220.133.101:1413,255.255.255.255:139,TCP (flags:S)
FWIN,2003/06/14,17:27:14 +2:00 GMT,63.226.202.88:1025,255.255.255.255:137,UDP
FWIN,2003/06/14,17:34:00 +2:00 GMT,61.100.122.38:1029,255.255.255.255:137,UDP
FWIN,2003/06/14,17:54:34 +2:00 GMT,65.81.134.245:50023,255.255.255.255:137,UDP
FWIN,2003/06/14,18:26:14 +2:00 GMT,24.232.131.144:1038,255.255.255.255:137,UDP
FWIN,2003/06/14,18:26:44 +2:00 GMT,61.218.63.164:1026,255.255.255.255:137,UDP
FWIN,2003/06/14,18:33:12 +2:00 GMT,196.7.204.38:1057,255.255.255.255:137,UDP

Can anyone PLEASE tell me why is this happening??
Or is my ISP right??


I got ZoneAlarm's link here on AO so YOU guyz oughta know more,
and if this is NORMAL.
None of my other firewalls picks it uo and i have re-installed ZoneAlarm
and oh-yeah My CONECTION is slower(that i know is always a BAAAAAD sign)



*************************AO VIRUS WARNING************************
*In the SECURITY TOOLS in VIRUS-SCANNERS there is a scanner *
*named *
* BACK-WORK- IT is a TROJAN *
* *
* *
* *
* *
*****************************************************************


Thank You for reading this post,if you need more details ->I'll gladly supply.
And PLEASE DO ENJOY YOUR DAY.