Hallo clever people!
My hub under atacks and it's down ;(
I use BlackICE and runing latest Ptokax on Winserver2003. When atackes started hub slowly drops users and server get very slow, that i can't control it anymore. Normaly BlackICE blocked all tcp/udp atacks and floods, but on that case BlackICE didn't see any activites....
also i runed Tcpview and didn't see any unwanted activites.
If i try to host hub on defferent server or even my pc, nobody can conect to the hub, they got message:
Conection resset by server.
PLEASE if you got any suggestions how to fix situation post it here.
Thank you
What version of PtokaX?
0.3.3.21
hi m8
i had a similar problem a couple of yrs ago ..
it turned out i had a Trojan and the flood was coming from the IRC servers tryin to stop the trojan spreading...
it may not be the same problem but do a scan with a couple of trojan scanners first.
??????Hawk??????
QuoteOriginally posted by ??????Hawk??????
hi m8
i had a similar problem a couple of yrs ago ..
it turned out i had a Trojan and the flood was coming from the IRC servers tryin to stop the trojan spreading...
it may not be the same problem but do a scan with a couple of trojan scanners first.
??????Hawk??????
yes i started to scan system already 10 hours ago and it's still running, cose of server is very slow.
but how i sad i tryed to run hub on defferent server and my pc and the same result, so it's deffenetly not trojan. and if it will be on first place i would seen it on Tcpview.
QuoteOriginally posted by noob
QuoteOriginally posted by ??????Hawk??????
hi m8
i had a similar problem a couple of yrs ago ..
it turned out i had a Trojan and the flood was coming from the IRC servers tryin to stop the trojan spreading...
it may not be the same problem but do a scan with a couple of trojan scanners first.
??????Hawk??????
yes i started to scan system already 10 hours ago and it's still running, cose of server is very slow.
but how i sad i tryed to run hub on defferent server and my pc and the same result, so it's deffenetly not trojan. and if it will be on first place i would seen it on Tcpview.
reboot it and do a scan while it's offline.
plop