Tweet
Yesterday I was presented with an attempted RPC auto-restart dialog but luckily it did not succeed. I engaged ZA's internet lock and investigated but found nothing suspicious.
Today I found 9 entities trying to access the net through my firewall, one of which requested server rights. Each 9 objects were named "Object: 8000xxxx" with varying chars in place of x's.
This smells like another blaster in the brew. Perhaps a premature release of the dirty bastard virus. To date there are only 2 search results for the above object name; both outline users experiences in discovering these objects via zone-alarm alerts.
It may be trivial, might not. Thought I'd just give yas a heads up.
Regardless, I've denied access to the net for all 9 entities without anything going screwy. I just wish I knew which port they accessed my computer on (prolly 135 with RPC process).
Any similar experiences or thoughts out there?
Today I found 9 entities trying to access the net through my firewall, one of which requested server rights. Each 9 objects were named "Object: 8000xxxx" with varying chars in place of x's.
This smells like another blaster in the brew. Perhaps a premature release of the dirty bastard virus. To date there are only 2 search results for the above object name; both outline users experiences in discovering these objects via zone-alarm alerts.
It may be trivial, might not. Thought I'd just give yas a heads up.
Regardless, I've denied access to the net for all 9 entities without anything going screwy. I just wish I knew which port they accessed my computer on (prolly 135 with RPC process).
Any similar experiences or thoughts out there?
Comment