«

Netstat shows outbound syn packets being sent thru each port, one after the other. I tried
several virus and worm scanners, but nothing is detected. I turned on XP firewall and got a
message saying "sooon.zapto.org is trying to access my ISP." So, something is ****ing with my
machine, but what? I browsed sooon.zapto.org and it is some sort of IRC site. Anyone have any
ideas? Any help is much appreciated.




-----= Posted via Newsfeeds.Com, Uncensored Usenet News =-----
http://www.newsfeeds.com - The #1 Newsgroup Service in the World!
-----== Over 100,000 Newsgroups - 19 Different Servers! =-----

Online Antivirus scanners:
================
http://housecall.trendmicro.com/hous...start_corp.asp
http://www.kaspersky.com/scanforvirus
http://www3.ca.com/virusinfo/virusscan.aspx
http://security.symantec.com/sscv6/default.asp
http://www.pandasoftware.com/activescan/activescan.asp
http://us.mcafee.com/root/mfs/default.asp
http://commandondemand.com/eval/index.cfm
http://www.ravantivirus.com/scan/ [See **** below.]
http://www.bitdefender.com/scan/licence.php
http://www.drweb-online.com/en/online_check.asp
http://www.pcpitstop.com/antivirus/default.asp
http://scan.sygatetech.com/prestealthscan.html
http://www.virusoffice.com/clinic/index.cfm

**** Caveat:
http://archives.neohapsis.com/archiv...3-07/0240.html


Anti-virus programs:
--------------------
KAV (Kaspersky)
http://www.kaspersky.com/

Sophos
http://www.sophos.com/products/sav/

eZ Antivirus (Computer Associates)
http://www.my-etrust.com/products/Antivirus.cfm


Firewall:
---------
Outpost 2.0
http://www.agnitum.com/products/outpost/
Outpost 1.0 (free)
www.agnitum.com/download/outpost1.html
Outpost Firewall Guide
http://outpostfirewall.com/guide/index.htm
AGNIS for Outpost: Outpost Ad Block List
http://www.staff.uiuc.edu/~ehowes/resource.htm#Outpost

Sygate
http://smb.sygate.com/products/spf/spf_ov.htm


On 28 Sep 2004 13:49:32 -0500, in
<4159b23c$>
<PlugnPlay> scrawled:

>Netstat shows outbound syn packets being sent thru each port, one after the other. I tried
>several virus and worm scanners, but nothing is detected. I turned on XP firewall and got a
>message saying "sooon.zapto.org is trying to access my ISP." So, something is ****ing with my
>machine, but what? I browsed sooon.zapto.org and it is some sort of IRC site. Anyone have any
>ideas? Any help is much appreciated.
>

--
Basic computer maintenance
http://uk.geocities.com/personel44/maintenance.html

<PlugnPlay> wrote in message news:4159b23c$...
> Netstat shows outbound syn packets being sent thru each port, one after the other. I tried
> several virus and worm scanners, but nothing is detected. I turned on XP firewall and got a
> message saying "sooon.zapto.org is trying to access my ISP." So, something is ****ing with my
> machine, but what? I browsed sooon.zapto.org and it is some sort of IRC site. Anyone have any
> ideas? Any help is much appreciated.
>

I helped a friend fix an identical situation. She had Gaobot virus, sometimes called Agobot. There are so many variants that virus checkers are having trouble keeping up with it so it's often missed. For an example of what is does, have a look here and be horrified: http://www.f-secure.com/v-descs/agobot_ax.shtml Your virus checker, (you do have one?) is likely to have been disabled. Therefore, an online scan is the way to go. See Mike's post. Keep that firewall on.

treehugger