legion from rhino9

[Guest]

anyone have info on this trojan.its hit my firewall aprox 20.000 times on
port 137 &138 anyway to stop it?

 

[David H. Lipman]

From: "kenlori" <[email protected]>

| anyone have info on this trojan.its hit my firewall aprox 20.000 times on
| port 137 &138 anyway to stop it?

Use a Router and it will be stopped at the Router and you won't see it at the PC. You won't
even know it is happening.

 

[Guest]

i'am using a router "gateway" do you mean a firewall at router?

 

[Jon Phipps]

as long as your firewall is stopping it you have nothing to worry bout. My
firewall has gone crazy with hits from some worms(nimda and red alert come
to mind) but they could not hurt my computer if they could not get in.

Jon

 

[David H. Lipman]

From: "kenlori" <[email protected]>

| i'am using a router "gateway" do you mean a firewall at router?
|

A Router such as the Linksys BEFSR41.

As always I suggest specifically blocking TCP and UDP ports 135 ~ 139 and 445 on *any* SOHO
Router.

 

[Jon Phipps]

hmmm my router forces me to specifically open ports I need... kinda prefer
it that way.,...

Jon

 

[David H. Lipman]

From: "Jon Phipps" <[email protected]>

| hmmm my router forces me to specifically open ports I need... kinda prefer
| it that way.,...
|
| Jon

That's good if you are knowledegeable. Does it incorporate a full FireWall implementation
or is it just a simple NAT Router ?

 

[Guest]

guess i'll let it go, my ports all tested secure "stealth" mode. think its
alot to do with zero knowledge security suite, { dont like it}.. ty all 4 help