Ok. Decided id reminise and just re-read the famous 'Fed Up' topic in the news section once more and need some advice.
I read in there somewhere about portscanning, and how someone was trying to tap into CmptrWz's fake processes he had running. How can i prevent against such an obviously dangerous thing?
I have Kaspersky Internet Security 2009. I would hope it would prevent these kind of things but who knows?
Any pointers?
Yea, Kaspersky would prevent it, probably tell you to (at least in a log somewhere), but you are being scanned *all* the time, it is just that CmptrWz's was from a single point multiple times rather then just randomly all over the place. Do not worry about it.
(http://www.overminddl1.com/image_scripts/image_sig.php?type=ODL1signitures&image/sig.gif)
Generated by OvermindDL1's Signature Auto-Add Script (http://overminddl1.com) via GreaseMonkey (http://greasemonkey.mozdev.org/)
Port scanning is not as dangerous as it seems. A port scan simply looks for computer with gaping security vulnerabilities (no firewalling software, lack of windows updates, etc). Simply put
- Use a firewall. A firewall counts as an internet router, a security suite which provides a firewalling function, or windows firewall enabled. Decent firewalls (most of them) stealth most of your ports to the internet and some even block ping attempts or have the option to. Generally if you have one of these you're safe enough.
- Windows update. Make sure it runs every once in awhile (like every few days), if its not already set to run automatically. It patches security vulnerabilities that trojans use to get on your computer.
- Antivirus. The last defense against a successful worm attack. Providing you have good firewall and windows updates, this will rarely happen unless you introduce one onto your system by downloading a harmful file. Decent AV's will stop a worm before it can do damage.
thats ok then. just hoped i wouldn't suffer the wrath if i was to kick any annoying players.
Port scanning can be dangerous as it is gathering intel for an intruder to use if you seem like a juicy target. If you are behind a router like Linksys and don't use DMZ, the only ports they will find open are the ones you forwarded. Don't forward ports like Windows File Shares and what not to your system. Also take advantage of your local machines firewall such as the Windows Built in Firewall. It is smart enough to not let file sharing happen outside your network for one.
I personally use Symantec Endpoint Protection that catches port scan and auto-blocks the offended IP for a while. If I see the same IP multiple times, I block them at the router level. I had to block half of China once before...