Nod32 log records Win32/lovsan attacks - why?

  • Thread starter Thread starter John of Stoke
  • Start date Start date
J

John of Stoke

My Nod32 log, records hourly attacks by the Win32/lovsan virus - as
indicated below. Can anyone tell me what is happening - and is there
anything I can do about it?

2004-04-06 13:44:36 IMON Attack source: 82.33.90.51 Win32/Lovsan worm
connection terminated
2004-04-06 13:44:23 IMON Attack source: 82.33.90.51 Win32/Lovsan worm
connection terminated
2004-04-06 13:42:26 IMON Attack source: 82.33.90.51 Win32/Lovsan worm
connection terminated
2004-04-06 12:26:53 IMON Attack source: 82.33.90.223 Win32/Lovsan worm
connection terminated
2004-04-06 11:56:47 IMON Attack source: 82.33.89.246 Win32/Lovsan worm
connection terminated
2004-04-06 10:13:02 IMON Attack source: 82.33.89.94 Win32/Lovsan worm
connection terminated
2004-04-06 09:12:21 IMON Attack source: 82.33.90.51 Win32/Lovsan worm
connection terminated

Many thanks

JS
 
My Nod32 log, records hourly attacks by the Win32/lovsan virus - as
indicated below. Can anyone tell me what is happening - and is there
anything I can do about it?

2004-04-06 13:44:36 IMON Attack source: 82.33.90.51 Win32/Lovsan worm
connection terminated
2004-04-06 13:44:23 IMON Attack source: 82.33.90.51 Win32/Lovsan worm
connection terminated
2004-04-06 13:42:26 IMON Attack source: 82.33.90.51 Win32/Lovsan worm
connection terminated
2004-04-06 12:26:53 IMON Attack source: 82.33.90.223 Win32/Lovsan worm
connection terminated
2004-04-06 11:56:47 IMON Attack source: 82.33.89.246 Win32/Lovsan worm
connection terminated
2004-04-06 10:13:02 IMON Attack source: 82.33.89.94 Win32/Lovsan worm
connection terminated
2004-04-06 09:12:21 IMON Attack source: 82.33.90.51 Win32/Lovsan worm
connection terminated

Many thanks

JS
Click to expand...
They are touting their software so you will go "Wow this is the greatest
product ever". Somewhere in the settings there should be a tab that you
can turn off, something about do not report, or turn on silent mode.
 
John of Stoke said:
My Nod32 log, records hourly attacks by the Win32/lovsan virus - as
indicated below. Can anyone tell me what is happening - and is there
anything I can do about it?

2004-04-06 13:44:36 IMON Attack source: 82.33.90.51 Win32/Lovsan worm
connection terminated
2004-04-06 13:44:23 IMON Attack source: 82.33.90.51 Win32/Lovsan worm
connection terminated
2004-04-06 13:42:26 IMON Attack source: 82.33.90.51 Win32/Lovsan worm
connection terminated
2004-04-06 12:26:53 IMON Attack source: 82.33.90.223 Win32/Lovsan worm
connection terminated
2004-04-06 11:56:47 IMON Attack source: 82.33.89.246 Win32/Lovsan worm
connection terminated
2004-04-06 10:13:02 IMON Attack source: 82.33.89.94 Win32/Lovsan worm
connection terminated
2004-04-06 09:12:21 IMON Attack source: 82.33.90.51 Win32/Lovsan worm
connection terminated
Click to expand...

Use a email filtering application such as Mailwasher in font of the email
client to filter, review, delete emails at the ISP email server. Then you
can pull the good ones to the email client program. If the email client is
doing auto pulling of emails from the ISP at startup or on a timed basis,
then disable that feature and only pull the emails at your command, after
reviewing the emails with something like Mailwasher or other similar email
filtering applications.

That why NOD32 will only react to the ones that you missed during the
filtering process that you missed that has a virus. Also Mailwasher has
virus logic as well that will alert as well as you view the emails at the
ISP's email server.

That's what I do. Otherwise, IMON is going to sound off as the emails are
pulled to the client program.

Duane :)


(free or you can purchase the Pro version)
 
Back
Top