I've read some of your post they are alot of help thanks, but now I'm having a problem that is starting to drive me crazy ! I kep getting hit with alerts from Norton firewall due to some remote system trying to acess my computer, allways a different addresse ( I block each time) I ran two of the addresse's in the reverse IP link you gave but it comes up as an unresolved addresse. One addresse is 61.233.40.205:50120 I also ran your rootkit revealer but I don't know how to transfer results to this forum .

The addfess you just posted is from China :

http://www.whois.sc/61.233.40.205

It is not uncommon to see hacking attempts coming from China or Russia. Often times you can get these things from anywhere in the world...and they come feeding in all day long. A lot of people don't understand that people have software they setup on their computer and it just tries to connect to random IP Addresses (i.e. random computers) all over the internet, all day long. These are called "scanners". They try to randomly connect to your computer to find ways to hack into it (or find "backdoors" created by trojans or worms you get infected with - sometimes even spyware).

People don't understand that this happens. A Router (like something from Linksys or SMC or some other router company) will usually block these connection attempts. If you don't have a router, you are doing the correct thing by using a software firewall like Norton's product (although I prefer the free software made by Kerio/Sunbelt).

The thing you want to do is go into your Norton firewall configuration and tell it NOT to alert you when it detects hack attempts. You don't need to know all that crap. It's going to be more of a nuisance than anything.

I'm not an expert on this, and I'm certainly no Shifty, but I'll give you my opinion. :) The fact that you keep getting alerts does not necessarily mean that you are being targeted in any way. There are lots of worms, wannabe hackers, and other stuff out there just looking for someone unprotected. That is why you have the firewall, and this shows that it is working.

It is my opinion that Norton's firewall just likes to tell you that it is doing its job to make you feel like you got your money's worth. As I said before, it is unlikely that you are being targeted specifically. Most likely some sort of tool is just going through a range of IP addresses looking for unprotected computers, and your IP address fell under the range of adresses it looked at.

I no longer use any Norton products except ghost, so I can't give you any answers that are specific to the firewall you are using.

Shifty?

Slonaker

EDIT: I need to learn to type faster!

:agree:

Thanks, scary thought getting hit randomly all day long. Great section you could start your own site with your knowledge.

A lot of people don't realize that people are literally sending out requests like that all day long from all over the world - If you don't go to Windows Update regularly, it is VERY easy for those people to break into your computer and take over it - steal your data, steal your identity, monitor all of your passwords for the websites you visit, steal your eBay accoutns, you name it. These are the people that typically keep me busy @ work :)