We help IT Professionals succeed at work.

Save Internet

ashraf_t
ashraf_t asked
on
I get a nice programe called Zone Alarm , it stops all other trying to access to my computer when iam on the internet , i always get warning that the program stops a try from IP .... , i always check my computer with antivirus and i almost sure that i didnot have any trojans , so my question is if i hadnot had this programe all this access trying will be success , also is there are a program can just tell me that there are a trying and just watch it and tell me if it success or not in this case i will be sure if i had trojans or not , thanx
Comment
Watch Question

Top Expert 2004

Commented:
they may or may not have sucess. what you are seeing is a port scan. tcp/ip uses ports to allow applications to comunicate, and there are port scanners to allow another machine to scan your machine to see if there are any open ports. If the ports are open, then a malicious person could gain acess to your machine. as far as the program you want, you have it. Zone alarm is a personal firewall, it closes all ports, and won't let anything in or out, unless you allow it
you can go to www.bootdisk.com and get the trojan remove, and see if it finds anything

Commented:
How are you connected to the internet?  I have seen people who get this message from their DHCP servers using cable modems.  They see its persistance as a threat and end up killing their service.  OOPS.  Zone alarm works really well at blocking addresses from accessing your system but depending on how you do it you may have trouble allowing the "good" contacts back in if you should accidently block a friendly host from trying to access your machine.
     If you have a cable modem or DSL there are hardware firewalls that offer superior protection to these attacks.  Software firewalls work but their configuration can leaver your connection crippled if not set up properly.  Even certain dial-ups scan periodically for IP addresses in use.  If you block the access to these servers you may lose the address and someone else may be assigned the address you had been using.  This is not that uncommon.  The server will see your system as a non responder and assume that since your system did not respond to its requests that your system is not in use.  This becomes apparent in various ways.  You may see it as a dropped connection or when you dial out your system will report that it was not able to contact the server and shut the connection.
     I am certain that these programs have helped people and even have a personal list I maintain that I call "websites of Ill-repute".  If you know what a "house of Ill repute" is, you could understand why I use these vulgar terms.  I draw that comparison as they are places that impose high risks for spreading certain viruses either for your computer or you personally.  My warning is, if going to such places, use proper protection.
     As far as your computer goes, two services that impose the highest threats are Mirc and ICQ.  They are favortie spots for some of the internets most unsavory characters.  Unfortunately, even those who innocently use these services are accessible by those looking to have a "little fun" by attacking unsuspecting users of these services.  While not everyone that uses this is a "cracker", there are enough "crackers" out there who use the open ports that these services open up to attack their victims.

Author

Commented:
Did you say that ICQ itself works as trojan ? and my other question is there a program can just watch the hacking process and tell me if it sucess or not?

Commented:
ZoneAlarm is doing EXACTLY what you are asking for.  It says that some other computer is attempting to contact your computer and that is has been stopped.

I'm unclear what you are asking for above and beyond this.  If you want to be "exposed" then uninstall Zone Alarm.  In most cases having the reporting on in Zone Alarm is more information than your really want.  Since ZA stops everything you are quite safe from intrusion.

Realistically, there is not that much danger from not using ZA on most systems.  It's only when you have services running and enabled on your system that permit hackers to get something in that there is a danger.  In a Windows desktop (i.e. NON-server) system, the biggest security hole is SHARED FOLDERS.  If you DISABLE Windows folder sharing services, you are about as safe as you can be.  Of course the most common way of infection these days is via email.  So if you receive email at all and you are not using a virus scanner that scans emails as they come in, you are at risk.

Author

Commented:
What i mean exactly is i donot want the zone alarm just telling me that it stops the hackers but i want a program donot try to stop them just tell me if they are succed to enter to my computer or not and telling me what they are doing ( cpying file , delete ....) will be great addition

Author

Commented:
What i mean exactly is i donot want the zone alarm just telling me that it stops the hackers but i want a program donot try to stop them just tell me if they are succed to enter to my computer or not and telling me what they are doing ( cpying file , delete ....) will be great addition

Commented:
No, I'm sure that is NOT what you want.  Once a hacker is in you've lost control and any "good" hacker will be able to cover his tracks so that you won't easily detect his work.

Author

Commented:
at least i want just one sign that he succed in the moment he enter and i will disconect myself or restart my computer , and in this case i will be sure that i have a trojan in my computer , by the way is it must be an active trojan file in the computer to allow other to enter or the IP is enough ?

Commented:
I'm sorry but there is no such thing for your purposes.  Use ZoneAlarm and you're about as safe as you can be.

You want to keep hackers OUT, not detect them after they've been inside.  A locked door is the first line of defense!!

Author

Commented:
Ok , but u didnot tell me  .... is it necessary to have active trojan file in my computer to let the others go in or the ip address is enough?

Commented:
I really don't understand what you are asking or trying to accomplish.

What is it about Zone Alarm that is not satisfying your needs?

Why do you want to run without protection and just detect a hacker AFTER he's into your system?

Author

Commented:
ok i agree with you , zone alarm will be good , but i was asking if i must run a trojan file in my computer which will allowed to others to enter , or by the knowing my ip by the others will be enough , my question because it is easy to know the IP ( many programes can tell you if an ip address is active now or no )
Commented:
Certainly a trojan of some sort will make the job easier but there are some exploits that make use of verious vulnerabilities of Windows.  Most are related to FILE SHARING but others are via Internet Explorer and Outlook.

Most of these have pathces available to correct them but hackers are always looking for new holes.  

Author

Commented:
Ok, Thanx for ur help

Commented:
Please don't confuse hackers with crackers.

Explore More ContentExplore courses, solutions, and other research materials related to this topic.