virus doesnt like sygate firewal

  • Thread starter Thread starter The Voigts
  • Start date Start date
T

The Voigts

I believe I have a virus as when i go online with only zonealarm i can get
throughput but with sygate also running i am online but cant get any
throughput. I believe this is a virus that is using a port that sygate
covers. AVG doesnt find anything. VET thought a kazaa.kpp was suss. Can
anyone illuminate what virus. I got the blaster one earlier this year. when
i run the fixblast.exe it doesnt find anything. i used the microsoft
security patch for it too.

annoying it is, any help greatly appreciated.
 
Please go to McAfee (http://www.mcafee.com/myapps/mfs/default.asp) and/or Trend
(http://housecall.antivirus.com ) and perform and online scan of your platform and report
back your results.

Dave



| I believe I have a virus as when i go online with only zonealarm i can get
| throughput but with sygate also running i am online but cant get any
| throughput. I believe this is a virus that is using a port that sygate
| covers. AVG doesnt find anything. VET thought a kazaa.kpp was suss. Can
| anyone illuminate what virus. I got the blaster one earlier this year. when
| i run the fixblast.exe it doesnt find anything. i used the microsoft
| security patch for it too.
|
| annoying it is, any help greatly appreciated.
|
|
 
I believe I have a virus as when i go online with only zonealarm i can
get throughput but with sygate also running i am online but cant get
any throughput. I believe this is a virus that is using a port that
sygate covers. AVG doesnt find anything. VET thought a kazaa.kpp was
suss. Can anyone illuminate what virus. I got the blaster one earlier
this year. when i run the fixblast.exe it doesnt find anything. i used
the microsoft security patch for it too.

annoying it is, any help greatly appreciated.
Click to expand...

Your better solution is to use a NAT router in front of the computer and
a host based FW solution on the machine behind it to supplement it.

Does Sygate running by itself prevent the inbound traffic from reaching
the machine? You already have indicated that when ZA runs by itself there
is no problem. Is it the same for Sygate?

Usually, when malware compromises a machine, it's looking to disable a FW
and AV (prevent them from starting - prevent the protection) or
circumvent their protection while they and the malware are running on the
machine. Malware is not looking to prevent traffic from coming through a
FW, most likely.

However, by running two host based FW(s) at the same time, it can create
a double FW situation, where as, with the two FW(s) running together,
traffic on a port can be blocked.

NAT routers are cheap and they knock down 100% of the unsolicited inbound
traffic from scans and attacks in front of the machine, freeing the O/S
and FW running on the machine from using the computer's resources to
prevent them. The computer can be used to do other things that are
productive to you behind the router.

The cheap NAT router for home usage cannot prevent outbound connections,
but a host based FW running on the machine behind it can prevent the
outbound connections that the router cannot stop, since a NAT router
doesn't have a true FW.

You can get a NAT router on sale for $20 to $30 and $50 and up at regular
prices. Linksys, D-link, Netgear, Belkin are some of the manufacturers.

http://www.homenethelp.com/web/explain/about-NAT.asp

Duane :)
 
I believe I have a virus as when i go online with only zonealarm i can get
throughput but with sygate also running i am online but cant get any
throughput. I believe this is a virus that is using a port that sygate
covers. AVG doesnt find anything. VET thought a kazaa.kpp was suss. Can
anyone illuminate what virus. I got the blaster one earlier this year. when
i run the fixblast.exe it doesnt find anything. i used the microsoft
security patch for it too.

annoying it is, any help greatly appreciated.
Click to expand...

Personally, I suspect your problem is more a case of trying to run two
personal firewalls at the same time.

Both ZoneAlarm and SyGate hook themselves into your network drivers at
very low... It's a good bet that ZoneAlarm and SyGate are conflicting
with each other and those conflicts are what's causing the problem.

Your only solutions are:

1) Uninstall SyGate and use ZoneAlarm.
2) Uninstall ZoneAlarm and use Sygate.

Bottom line you can't run two personal firewalls on the same machine
without bad things happening.

As an aside... As Duane has already mentioned if you're using a
broadband connection get a router like the Netgear ProSafe Router FR114P
or ZyXel ZyWall 2.

--
Cheers-

Jeff Setaro
jasetaro <at> mags.net
http://people.mags.net/jasetaro/
PGP Key IDs DH/DSS: 0x5D41429D RSA: 0x599D2A99 New RSA: 0xA19EBD34
 
Back
Top