Originally posted by: n0e5cape
I have a linksys router between my computer and cable modem. I ran the online scan available at the symantec website and found that my computer was infected with korgo and bobax viruses. I cleaned them out and re-did the scan which confirmed that the viruses have been removed. However, my modem is still continuously sending out packets even when I don't seem to be doing anything.
Is there a cause for concern of is this simply normal activity??? My old computer never did this!
Thanks guys.
Good to hear you got the viruses nailed. However, if your modem's still showing activity, realize that the activity you're seeing may not be your computer sending packets
out, it might be computers outside attempting to send packets
in. I was at my sister's place setting up her new Netgear RP614 and before I'd plugged her PC into it, the activity light on the router was already blinking non-stop (Comcast cable, plenty of compromised computers on THEIR network methinks :roll: ).
The worrisome thing here is that you managed to catch two worms that your Linksys
should be able to defend you from. Did you go and put your computer in the Linksys' DMZ or something?

Or is it a wireless-capable Linksys and maybe your neighbors' system has done a little hanky-panky with yours via the wireless access point. Double-check that. This stuff doesn't just fall from the sky... somewhere, there's a window open.
If I were you, I'd also
- Go to Windows Update and load up on all the Critical Updates it can take in one load, install those, reboot and go back to see if there's more
- Arm your Automatic Updates like this so Windows keeps itself up-to-date from here on out
- Go into Control Panel and set your accounts' passwords to strong ones if they are weak, predictable ("password" or "12345" ...uh, NO), or non-existant, to shut the door on share-hopping worms that are trying to use your system's ADMIN$ or C$ shares to spread to it
- Install ZoneAlarm Basic free firewall software from here
- Install some antivirus software, such as Grisoft AVG Free Edition and configure it like this picture, then click the Save Settings as New Default button, and set it to update daily
- Try the free Symantec security scan here (the link is at the bottom left) to see what it has to say about your port security, since you caught two Internet worms somehow
Hope that helps
