Firewall Alert for Virus ! - Page 3

Originally posted by: vijay

Hey,

If you watch the IP and its location you will notice that its coming from the same IP range starting with 117.232.xxx.xxx and it has nothing to do with any website but your network.

So first thing I would suggest if you are on a cable internet or something then disable Windows File Sharing.

Originally posted by: vijay

Well on further checking I feel that this is NOT coming from any website cause:

Your alert shows that its trying to download the file in the following Folder:

C:\Documents and Settings\Network Service

Where as all the temporary internet files are normally stored in:

C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\


And normally this particulr Worm spreads through LAN using ill formatted RPC calls or USB Drives (through autorun.inf)

Hope this helps you find more about the same.

Regards,
Vijay

Originally posted by: ishan.k

Hi Vijay I checked it out by typing that path physically and found out that my temporary files are stored in C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files path.

Originally posted by: vijay

Hey,

Which Operating System you are using?

Then try to see which is the site that is setting it. If possible provide the IP address and Port Number so that we can check it at our end.

Cheers,
Vijay

Originally posted by: ishan.k

Its windows XP professional . How to check IP address and port number ?? Also it keeps on closing in between automatically. So currently i am online from my Laptop !!!