Worm Attack Attempt

[Norman Hitt]

Just curious if anyone else has been getting this while on the forum here?

For the last three days while I have been on the forum at night, I get a message from Norton Antivirus that says it has blocked a Worm Intrusion Attempt. I'm wondering if it is coming from someones computer that is on the forum that is infected, or what? (Note: I'm not too savvy opn all this, so I have no idea if it is even connectedwith the forum).

I did copy down the latest, (tonight's attempt), and it said the following:
Intrusion: Port Scan
Intruder: 66.233.86.57 (53352)
Risk Level: Medium
Protocol: UDP
Attacked IP: 255.255.255.255
Attacked Port: 54343

I know some of you Computer GURU's understand this, Sooooo,...What does all this mean?

[Jim Becker]

It means that there is a computer somewhere scanning computers in your address range for a vulnerability. Not related to SMC. If you are not using a firewall, you should be. At a minimum, a software firewall should be used...yes, WinXP has on, but it's only effective on in-coming threats. ZoneAlarm or similar products also protect about outgoing threats...trojans, spyware, etc., that try to "phone home". And if you are on a high-speed connection, you should also be using a hardware firewall/router. You can't have too much protection.

[Joe Pelonio]

That address indicates it came from someone using Clearwire Wireless
Broadband out of Kirkland, WA (right near me). You can report what info
you have to them at:

abuse@clearwire.net

More often than not a worm is sent from someone who doesn't know they have it, not intentionally.

[Norman Hitt]

Thanks for the info, I have sent it to clearwire.