ashraf_t
asked on
Save Internet
I get a nice programe called Zone Alarm , it stops all other trying to access to my computer when iam on the internet , i always get warning that the program stops a try from IP .... , i always check my computer with antivirus and i almost sure that i didnot have any trojans , so my question is if i hadnot had this programe all this access trying will be success , also is there are a program can just tell me that there are a trying and just watch it and tell me if it success or not in this case i will be sure if i had trojans or not , thanx
How are you connected to the internet? I have seen people who get this message from their DHCP servers using cable modems. They see its persistance as a threat and end up killing their service. OOPS. Zone alarm works really well at blocking addresses from accessing your system but depending on how you do it you may have trouble allowing the "good" contacts back in if you should accidently block a friendly host from trying to access your machine.
If you have a cable modem or DSL there are hardware firewalls that offer superior protection to these attacks. Software firewalls work but their configuration can leaver your connection crippled if not set up properly. Even certain dial-ups scan periodically for IP addresses in use. If you block the access to these servers you may lose the address and someone else may be assigned the address you had been using. This is not that uncommon. The server will see your system as a non responder and assume that since your system did not respond to its requests that your system is not in use. This becomes apparent in various ways. You may see it as a dropped connection or when you dial out your system will report that it was not able to contact the server and shut the connection.
I am certain that these programs have helped people and even have a personal list I maintain that I call "websites of Ill-repute". If you know what a "house of Ill repute" is, you could understand why I use these vulgar terms. I draw that comparison as they are places that impose high risks for spreading certain viruses either for your computer or you personally. My warning is, if going to such places, use proper protection.
As far as your computer goes, two services that impose the highest threats are Mirc and ICQ. They are favortie spots for some of the internets most unsavory characters. Unfortunately, even those who innocently use these services are accessible by those looking to have a "little fun" by attacking unsuspecting users of these services. While not everyone that uses this is a "cracker", there are enough "crackers" out there who use the open ports that these services open up to attack their victims.
If you have a cable modem or DSL there are hardware firewalls that offer superior protection to these attacks. Software firewalls work but their configuration can leaver your connection crippled if not set up properly. Even certain dial-ups scan periodically for IP addresses in use. If you block the access to these servers you may lose the address and someone else may be assigned the address you had been using. This is not that uncommon. The server will see your system as a non responder and assume that since your system did not respond to its requests that your system is not in use. This becomes apparent in various ways. You may see it as a dropped connection or when you dial out your system will report that it was not able to contact the server and shut the connection.
I am certain that these programs have helped people and even have a personal list I maintain that I call "websites of Ill-repute". If you know what a "house of Ill repute" is, you could understand why I use these vulgar terms. I draw that comparison as they are places that impose high risks for spreading certain viruses either for your computer or you personally. My warning is, if going to such places, use proper protection.
As far as your computer goes, two services that impose the highest threats are Mirc and ICQ. They are favortie spots for some of the internets most unsavory characters. Unfortunately, even those who innocently use these services are accessible by those looking to have a "little fun" by attacking unsuspecting users of these services. While not everyone that uses this is a "cracker", there are enough "crackers" out there who use the open ports that these services open up to attack their victims.
ASKER
Did you say that ICQ itself works as trojan ? and my other question is there a program can just watch the hacking process and tell me if it sucess or not?
ZoneAlarm is doing EXACTLY what you are asking for. It says that some other computer is attempting to contact your computer and that is has been stopped.
I'm unclear what you are asking for above and beyond this. If you want to be "exposed" then uninstall Zone Alarm. In most cases having the reporting on in Zone Alarm is more information than your really want. Since ZA stops everything you are quite safe from intrusion.
Realistically, there is not that much danger from not using ZA on most systems. It's only when you have services running and enabled on your system that permit hackers to get something in that there is a danger. In a Windows desktop (i.e. NON-server) system, the biggest security hole is SHARED FOLDERS. If you DISABLE Windows folder sharing services, you are about as safe as you can be. Of course the most common way of infection these days is via email. So if you receive email at all and you are not using a virus scanner that scans emails as they come in, you are at risk.
I'm unclear what you are asking for above and beyond this. If you want to be "exposed" then uninstall Zone Alarm. In most cases having the reporting on in Zone Alarm is more information than your really want. Since ZA stops everything you are quite safe from intrusion.
Realistically, there is not that much danger from not using ZA on most systems. It's only when you have services running and enabled on your system that permit hackers to get something in that there is a danger. In a Windows desktop (i.e. NON-server) system, the biggest security hole is SHARED FOLDERS. If you DISABLE Windows folder sharing services, you are about as safe as you can be. Of course the most common way of infection these days is via email. So if you receive email at all and you are not using a virus scanner that scans emails as they come in, you are at risk.
ASKER
What i mean exactly is i donot want the zone alarm just telling me that it stops the hackers but i want a program donot try to stop them just tell me if they are succed to enter to my computer or not and telling me what they are doing ( cpying file , delete ....) will be great addition
ASKER
What i mean exactly is i donot want the zone alarm just telling me that it stops the hackers but i want a program donot try to stop them just tell me if they are succed to enter to my computer or not and telling me what they are doing ( cpying file , delete ....) will be great addition
No, I'm sure that is NOT what you want. Once a hacker is in you've lost control and any "good" hacker will be able to cover his tracks so that you won't easily detect his work.
ASKER
at least i want just one sign that he succed in the moment he enter and i will disconect myself or restart my computer , and in this case i will be sure that i have a trojan in my computer , by the way is it must be an active trojan file in the computer to allow other to enter or the IP is enough ?
I'm sorry but there is no such thing for your purposes. Use ZoneAlarm and you're about as safe as you can be.
You want to keep hackers OUT, not detect them after they've been inside. A locked door is the first line of defense!!
You want to keep hackers OUT, not detect them after they've been inside. A locked door is the first line of defense!!
ASKER
Ok , but u didnot tell me .... is it necessary to have active trojan file in my computer to let the others go in or the ip address is enough?
I really don't understand what you are asking or trying to accomplish.
What is it about Zone Alarm that is not satisfying your needs?
Why do you want to run without protection and just detect a hacker AFTER he's into your system?
What is it about Zone Alarm that is not satisfying your needs?
Why do you want to run without protection and just detect a hacker AFTER he's into your system?
ASKER
ok i agree with you , zone alarm will be good , but i was asking if i must run a trojan file in my computer which will allowed to others to enter , or by the knowing my ip by the others will be enough , my question because it is easy to know the IP ( many programes can tell you if an ip address is active now or no )
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
Ok, Thanx for ur help
Please don't confuse hackers with crackers.
you can go to www.bootdisk.com and get the trojan remove, and see if it finds anything