DoS attacks!!! Can someone explain please

[InFecTed]

I've recently had some serious DoS attacks on my pc -->link
I wasn't even sure I was actually nuked (was thinking of hardware issues).

So is there anybody who can explain how can I protect my pc from DoS and give me some links on that subject.
Please tell my WTF are these DoS attacks and how do they crash (BSOD, restart...) your pc so easilly.

 

[Lord Evermore]

Get a personal firewall application, preferably one that you can use on a time-limited trial to see if it does what you want. That will both show you if someone is trying to nuke you and prevent it from getting through.

There is absolutely nothing you can do to stop someone from attempting to nuke you, or flooding out your connection with garbage data.

Windows is garbage, that's how it crashes your system. It's unstable and doesn't deal well with the things done when you get nuked (attempts at connecting to ports on your system, flood pings). It's been a long time since I paid much attention to this sort of attack though, since I haven't been on dialup in a long time, I'm behind a firewall/router, and I don't piss people off to make them want to punish me.

All you can do about it is report the attackers to their ISP, assuming you can get data on their IP addresses. But please, as a person who sees reports like that all the time, try to make it intelligent, and don't swear at the ISP for something their customer does.

 

[Looney]

DoS doesn't cause BSOD or your PC to restart. They're not viruses or trojans, they're a coordinated attacks from several servers to overload your connection by constant pings. I don't know who gave you the idea you're getting DoS, but the fact that you're on a normal dialup show negate that fact.

Sounds like you've got a driver problem... do you have a network card in your computer? Possibly a netgear card? I had a netgear card with Win2k, which was causing my computer to spontaneous reboot and BSOD when i closed a dialpad java window. Took me days to figure out what hte problem was.

I've never had a serious enough problem with this, but can't you just call Microsoft and see if they have a solution?

 

[InFecTed]

<<don't swear at the ISP for something their customer does>>

ok, I'll remember that

Now I use Sygate personnal firewall 4.2
Is it ok or there's better?
What about nukenabber or jammer?

 

[InFecTed]

<<DoS doesn't cause BSOD or your PC to restart>>

Read this

 

[Lord Evermore]

Don't know about any of those apps. SyGate will probably be enough (I thought they only made a personal gateway app, not a firewall type), as long as it's made to block inbound connections on any ports you don't open, and logs attempts (so you can see if it's actually happening).

You mentioned it only happens when you're getting mail, in IE, stuff like that. Have you left the system just running connected to the Net but not actually doing anything, and seen if it happens then too? If it's only happening when you have IE or Outlook Express or something else open, then it's probably software related. Anything due to a DoS would occur regardless of what apps you're running.

Moralpanic, Windows has issues with ports. I don't know about XP, but Win9X allows connections to ports that aren't even running servers, and it's possible to cause problems through them.

 

[InFecTed]

<<Have you left the system just running connected to the Net but not actually doing anything>>

Yes, and it did it again.
BSOD or restart.

Last BSOD message was some error in the nv4_mini.sys

Now after installing a firewall and jammer no probs so far.

 

[EpsiIon]

Here's a serisously awesome site about DoS attacks:

Link

Check it out and see what you can learn.

Epsilon

 

[Lord Evermore]

Uhmm...they're happy that Tauscan detects 96% of trojans? (Incidentally that program will be useless for an overall firewall protection. Jammer would work for what you need.) I'm pretty sure that things like Norton Antivirus or Mcafee VirusScan are as good or better than that, and really the most common trojans are found 100% by all scanners.

I'm not sure that the ChatMag page is the best place to get information on this sort of thing, since they also think a DoS attack can damage the CPU on older Pentium systems.

 

[Lord Evermore]

No reason to run both SyGate and Jammer at the same time, just chews up system resources (assuming they're both truly acting as firewalls).

Oh, and keep in mind that Steve Gibson (grc.com) is a self-serving biased bastard. But he still has some good points.

 

[InFecTed]

Thanks for the link Epsilon.

Anybody with more usefull information?

 

[InFecTed]

up

 

[n0b1e]

<< What about nukenabber or jammer? >>



huh? i remember these oldie programs from like 96'-97'... when 33.6 kbps was tha sh!t...!
who nukes anymore?