Go Back   Computer Forums > General Computing > Cyber Safety and Computer Security
Click Here to Login
Join Computer forums Today


Reply
 
Thread Tools Search this Thread Display Modes
 
Old 08-10-2011, 12:49 AM   #1
Beta Member
 
Join Date: Aug 2011
Posts: 3
Default firewall warning?

Eset giving me DNS cache poisoning attack.And 2 days ago i found by Svchost Process Analyzer program "Time network" and "System drive" viruses and reformatted my computer.But after this i found by Svchost Process Analyzer worm "Monitor time" and "Task time" virus.I need to know how do work the "Monitor" and "Task time" processes.The name of these viruses are very similar.Is it hack?

ESET beta 5 firewall warnings


<?xml version="1.0" encoding="utf-8" ?>
- <ESET>
- <LOG>
- <RECORD>
- <COLUMN NAME="Time">
<DATE>8/9/2011</DATE>
<TIME>4:32:14 PM</TIME>
</COLUMN>
<COLUMN NAME="Event">Detected DNS cache poisoning attack</COLUMN>
<COLUMN NAME="Source">192.168.0.1:53</COLUMN>
<COLUMN NAME="Target">192.168.0.37:3586</COLUMN>
<COLUMN NAME="Protocol">UDP</COLUMN>
<COLUMN NAME="Rule/worm name" />
<COLUMN NAME="Application" />
<COLUMN NAME="User" />
</RECORD>
- <RECORD>
- <COLUMN NAME="Time">
<DATE>8/9/2011</DATE>
<TIME>4:31:59 PM</TIME>
</COLUMN>
<COLUMN NAME="Event">Detected DNS cache poisoning attack</COLUMN>
<COLUMN NAME="Source">192.168.0.1:53</COLUMN>
<COLUMN NAME="Target">192.168.0.37:3586</COLUMN>
<COLUMN NAME="Protocol">UDP</COLUMN>
<COLUMN NAME="Rule/worm name" />
<COLUMN NAME="Application" />
<COLUMN NAME="User" />
</RECORD>
- <RECORD>
- <COLUMN NAME="Time">
<DATE>8/9/2011</DATE>
<TIME>4:29:14 PM</TIME>
</COLUMN>
<COLUMN NAME="Event">Detected DNS cache poisoning attack</COLUMN>
<COLUMN NAME="Source">192.168.0.1:53</COLUMN>
<COLUMN NAME="Target">192.168.0.37:3586</COLUMN>
<COLUMN NAME="Protocol">UDP</COLUMN>
<COLUMN NAME="Rule/worm name" />
<COLUMN NAME="Application" />
<COLUMN NAME="User" />
</RECORD>
- <RECORD>
- <COLUMN NAME="Time">
<DATE>8/9/2011</DATE>
<TIME>4:24:47 PM</TIME>
</COLUMN>
<COLUMN NAME="Event">Detected DNS cache poisoning attack</COLUMN>
<COLUMN NAME="Source">192.168.0.1:53</COLUMN>
<COLUMN NAME="Target">192.168.0.37:3586</COLUMN>
<COLUMN NAME="Protocol">UDP</COLUMN>
<COLUMN NAME="Rule/worm name" />
<COLUMN NAME="Application" />
<COLUMN NAME="User" />
</RECORD>
</LOG>
</ESET>




__________________

ammer is offline   Reply With Quote
Old 08-10-2011, 07:44 AM   #2
In Runtime
 
Join Date: Jan 2010
Posts: 320
Default Re: firewall warning?

Im not 100% sure what your question is, but I would run your computer with some antivirus software / scanners, and clean everything up.

Malwarebytes : Malwarebytes Anti-Malware PRO removes malware including viruses, spyware, worms and trojans, plus it protects your computer

Download the free version, and delete anything malicious that you dont know. Is it causing your computer any problems?
__________________

Luke_Uk_Baggy is offline   Reply With Quote
Old 08-10-2011, 09:41 AM   #3
In Runtime
 
thompatry's Avatar
 
Join Date: Feb 2010
Posts: 145
Default Re: firewall warning?

From just looking at the log, it seems someone within the that router/network is trying to gain access to something on your computer. I wouldn't call it exactly posioning your computer yet because it is not nailing your computer every half with a different port. Maybe that computer that has the 192.168.1.53 address has a spam or maybe you just have a piece of software on it that is trying to just communicate. You will need to provide more details on this so we can help.
thompatry is offline   Reply With Quote
Old 08-11-2011, 03:03 AM   #4
Beta Member
 
Join Date: Aug 2011
Posts: 3
Default Re: firewall warning?

Ok, it's home wired internet with one PC without router.I found some info from internet, the IP 192.168 is Windows XP domain-mshome.net.Few days ago in my Control Panel/Network connections appeared any Internet gateway which connecting from another PC:

ammer is offline   Reply With Quote
Old 08-11-2011, 06:01 AM   #5
Beta Member
 
Join Date: Aug 2011
Posts: 3
Default Re: firewall warning?

How can appear the Internet gateway in my Control Panel/Network Connections?
ammer is offline   Reply With Quote
Old 08-11-2011, 07:48 AM   #6
BSOD
 
Join Date: Dec 2009
Posts: 100
Default Re: firewall warning?

Sounds like you never cleaned your PC from the viruses....Boot your PC in safe mode and run your antivirus program to clean your PC... once done run it in normal mode and do another scan for viruses and this hopefully should fix your problem.

I doubt your PC is hacked.
__________________

officemanager is offline   Reply With Quote
Reply

Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are Off



All times are GMT -5. The time now is 11:25 AM.


Powered by vBulletin® Version 3.8.8 Beta 4
Copyright ©2000 - 2017, vBulletin Solutions, Inc.
Search Engine Friendly URLs by vBSEO 3.6.0