Computer help ...

Crom · Post by **Crom** » 2003-12-21 01:48pm

My grandfather's computer has kept getting a McAfee message on his computer that goes likes this:

A computer at IP address 67.167.11.41 has attempted an unsolicited connection to TCP port 17300 on your computer.

And when we click on "More Information" we get a whole window full of stuff with this under "Event Information:"

A computer at IP address 67.165.244.52 has attempted an unsolicited connection to TCP port 17300 on your computer. TCP port 17300 is commonly used by the "Kuang2 The Virus" service or program. The source computer has scanned your computer for this trojan, but it has been blocked by your firewall.

Neither he nor I have any idea of what is going on. Could someone please explain? Is he being attacked in some way?

YT300000 · Post by **YT300000** » 2003-12-21 02:28pm

McAffee is just telling you to sit back and watch your computer get attacked. I've gotten that a million times, and there's nothing that you can do about it. Now, if you had Norton...

Crom · Post by **Crom** » 2003-12-21 02:40pm

YT300000 wrote:McAffee is just telling you to sit back and watch your computer get attacked. I've gotten that a million times, and there's nothing that you can do about it. Now, if you had Norton...

So ... there's nothing to worry about? Because there's nothing I can do?

Einhander Sn0m4n · Post by **Einhander Sn0m4n** » 2003-12-21 03:03pm

Get Kerio. That generally fixes that problem

YT300000 · Post by **YT300000** » 2003-12-21 03:15pm

Crom wrote:
YT300000 wrote:McAffee is just telling you to sit back and watch your computer get attacked. I've gotten that a million times, and there's nothing that you can do about it. Now, if you had Norton...
So ... there's nothing to worry about? Because there's nothing I can do?

McAffee should be able to handle the problem by itself.

Faram · Post by **Faram** » 2003-12-21 04:14pm

Don't worry about it.

Probebly just a portscan quite normal and nothing to do about it.

If you vant to feel safer get a NAT device like D-Link.

And

Code: Select all

C:\>nslookup
Default Server:  ns3.bredband.com
Address:  195.54.122.200

> 67.167.11.41
Server:  ns3.bredband.com
Address:  195.54.122.200

Name:    c-67-167-11-41.client.comcast.net
Address:  67.167.11.41

>

Just a dhcp user from comecast.net

Vertigo1 · Post by **Vertigo1** » 2003-12-21 04:18pm

Faram wrote:Don't worry about it.

Probebly just a portscan quite normal and nothing to do about it.

If you vant to feel safer get a NAT device like D-Link.

Umm...don't you mean Linksys? D-Link is famous for being utter garbage.

Faram · Post by **Faram** » 2003-12-21 04:20pm

Vertigo1 wrote:Umm...don't you mean Linksys? D-Link is famous for being utter garbage.

Whatever I used to have a D-Link 604 worked quite fine for me.

Crayz9000 · Post by **Crayz9000** » 2003-12-21 04:23pm

That's actually a virus portscan. Somebody is apparently looking for a running copy of Kuang2.

Crom · Post by **Crom** » 2003-12-21 04:57pm

Faram wrote:Don't worry about it.

Probebly just a portscan quite normal and nothing to do about it.

If you vant to feel safer get a NAT device like D-Link.

And
Code: Select all
C:\>nslookup
Default Server:  ns3.bredband.com
Address:  195.54.122.200

> 67.167.11.41
Server:  ns3.bredband.com
Address:  195.54.122.200

Name:    c-67-167-11-41.client.comcast.net
Address:  67.167.11.41

>
Just a dhcp user from comecast.net

Thanks a lot for your help. I'll let my grandfather know it's okay.