Solved

ICMP Flood

Posted on 2003-11-18
3
936 Views
Last Modified: 2008-01-09
My computer is W2K, the problem is, my network adapter send a continous ICMP packet to all IP address starting with my IP address till 255.255.255.255.
This happened after 5 minutes i have turn on my computer,  My web surfing become hard

Can you give me any idea whats going on? Is it a virus?
0
Comment
Question by:ariefa
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
3 Comments
 
LVL 3

Accepted Solution

by:
izwiz earned 125 total points
ID: 9769694
It is most likely some form of worm scanning for hosts, perhaps Blaster/Welchia.

Try the removal tools at: http://securityresponse.symantec.com/

Get an up to date virus scanner, and also update yourself with the latest patches from Microsoft. Also use a personal firewall like zonealarm.
0
 
LVL 32

Expert Comment

by:LucF
ID: 9769758
I think you have a bot running in your computer. Install a firewall like zonealarm (http://www.za.com) and it'll show you wich program is sending those packages. Deny that program access to the network and search http://www.symantec.com/search with that filename, it could come up with some virusses, check them.

Do an online virusscan:

http://housecall.trendmicro.com/ 
http://security.symantec.com/
http://www.pandasoftware.com/activescan/com/activescan_principal.htm
http://www.pcpitstop.com/antivirus/default.asp 

LucF
0
 
LVL 7

Expert Comment

by:wtrmk74
ID: 9776284
This Anti-Virus is completely free for home users
it is stable and always stays up to date...always
I have used this for 2 years now and it detects everything
http://www.avast.com/i_idt_1016.html

This Firewall is completely free for home users
remember to download the .pdf manual
it is simply to install and it has a default learning mode !
so after you clean your system you will be able to see the packets and activities that go in and out of your PC and allow or disallow them!
http://www.kerio.com/kpf_download.html

So to answer your questions?
yes you have a virus or a worm!
and you need to install an Anti-Virus and Firewall

for detailed information on ICMP protocol
http://www.faqs.org/rfcs/rfc792.html
you will get the hang of it after you install and read the PDF file of Firewall

wtrmk74
0

Featured Post

Enterprise Mobility and BYOD For Dummies

Like “For Dummies” books, you can read this in whatever order you choose and learn about mobility and BYOD; and how to put a competitive mobile infrastructure in place. Developed for SMBs and large enterprises alike, you will find helpful use cases, planning, and implementation.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

NTFS file system has been developed by Microsoft that is widely used by Windows NT operating system and its advanced versions. It is the mostly used over FAT file system as it provides superior features like reliability, security, storage, efficienc…
First of all let me say that the only language that I speak is English, but in answering questions here I often come across people whose English skills are not the best and I’d like to be able to communicate better with them, and the following descr…
In this video we outline the Physical Segments view of NetCrunch network monitor. By following this brief how-to video, you will be able to learn how NetCrunch visualizes your network, how granular is the information collected, as well as where to f…
Do you want to know how to make a graph with Microsoft Access? First, create a query with the data for the chart. Then make a blank form and add a chart control. This video also shows how to change what data is displayed on the graph as well as form…

623 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question