»
 

Go Back   ResellerRatings Store Ratings > ResellerRatings Forums > Tech Support

Reply
 
LinkBack Thread Tools Display Modes
Old 09-19-2004, 07:17 AM   #1 (permalink)
Registered User
 
Join Date: Aug 2004
Posts: 29
Gelo_USA is on a distinguished road

Change IP
I just have i simple question:
Is there anyway to change my IP adress?
Its because I get what I think is a virus and it destroys all my explorer, every week I have to format my pc and today it messed up again, when I turn the pc on everything I tried to run opened a blank screen and there is some icons but with no names the task bar is crazy the icons on the tray change place when I try to click them the only thing I could open was the anivirus I ran a full scan and found nothing and my firewall was reporting more than 400 atacks a day from many different IPs

My antivrus is pccillin 2002 and its always up to date
Thanks

Gelo_USA is offline   Reply With Quote
Old 09-19-2004, 07:19 AM   #2 (permalink)
Registered User
 
Join Date: Aug 2004
Posts: 29
Gelo_USA is on a distinguished road
Here is picture of my desktop
messed up right?
Attached Images
File Type: jpg all i got.jpg (75.2 KB, 63 views)
Gelo_USA is offline   Reply With Quote
Old 09-19-2004, 09:46 AM   #3 (permalink)
Registered User
 
Join Date: Aug 2004
Posts: 307
johnnyis42 is on a distinguished road
how is your connection configured? are you behind a router? also, when you format, are you formatting your whole drive, or just the C: partition? do you have more than one hard drive? and do you notice this behavior right away, or does it take a few days for it to begin, like as soon as you start using certain aplications again?
johnnyis42 is offline   Reply With Quote
Old 09-19-2004, 05:35 PM   #4 (permalink)
Registered User
 
Join Date: Aug 2004
Posts: 29
Gelo_USA is on a distinguished road
I have just one hd
I connect by router
It works for a week and then when I turn it on again it wont work today I formatted my pc two times in the first I didnt instal nothing just the anti virus ( I didnt have time) the problem came again I think the virus is in the router and I dont know how to clean it because when I format I do like this I delete the old partition and format a new one then isntal windows again
Thanks
Gelo_USA is offline   Reply With Quote
Old 09-19-2004, 06:12 PM   #5 (permalink)
Registered User
 
Join Date: Aug 2004
Posts: 29
Gelo_USA is on a distinguished road
I just checked my firewall logs and found 39 logs from the same ip that my defalt gateway is all of them were blocked and it says that they are cloaking
thanks
Gelo_USA is offline   Reply With Quote
Old 09-19-2004, 06:32 PM   #6 (permalink)
Registered User
 
Join Date: Aug 2004
Posts: 307
johnnyis42 is on a distinguished road
out of curiosity, what ports does the ip attempt to attack? is it scanning or is it the same port each time?
johnnyis42 is offline   Reply With Quote
Old 09-20-2004, 01:07 PM   #7 (permalink)
Registered User
 
Join Date: Aug 2004
Posts: 29
Gelo_USA is on a distinguished road
its coming in a lot of different ports
and its coming from the source from a lot o different ports too
It trys 3 or four times at one port than 3 or 4 in another and keeps going

Last edited by Gelo_USA; 09-20-2004 at 01:13 PM.
Gelo_USA is offline   Reply With Quote
Old 09-20-2004, 03:29 PM   #8 (permalink)
Registered User
 
Join Date: Aug 2004
Posts: 307
johnnyis42 is on a distinguished road
you need to do a "who-is" on the ip address and find out who owns it. typically they have an e mail address for reporting abuse.

i used this mthod when i was getting regular attacks from an ip address in italy. i e mailed the isp that owned the ip range and told them what happened and what address it was, also sent them the logs of the scan. they e mailed me back and told me they would fix the problem, and i never got scanned from that ip again.
johnnyis42 is offline   Reply With Quote
Old 09-20-2004, 04:38 PM   #9 (permalink)
Registered User
 
Join Date: Aug 2004
Posts: 29
Gelo_USA is on a distinguished road
But all attacks are from the same ip and this ip is my Defalt Gateway I checked on the local connection the icon in the tray with the clock and there is the ip that is attacking and it says its my defalt gateway
Gelo_USA is offline   Reply With Quote
Old 09-20-2004, 11:17 PM   #10 (permalink)
Registered User
 
Join Date: Aug 2004
Posts: 307
johnnyis42 is on a distinguished road
ok, it's saying they are comming from your gateway on your computer's software firewall because that is where it gets all of its internet connectivity from. when your router sends the information to your computer, your computer only sees the originating ip address as the router. there is a very slight chance that your router has been comprimised through a remote administration flaw, so you may want to check your router's documentation, run a hard factory default reset on it, and then update your firmware and change the default password.

are you setting your system as the DMZ host? is there a log function on your router that you can check? this will give you a good idea of what you can do to figure out how this is hitting you through your router.
johnnyis42 is offline   Reply With Quote
Reply




Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On


Most Active Discussions

Recent Discussions

All times are GMT -6. The time now is 04:25 AM.