Troubleshooting and Resource Guide for Windows 95/98/ME/XP/Vista

Free Computer Technical Support
Free Computer Help Forums
Computer "How To" Articles
Rescue The PC
Maintain The PC
Speed Up The PC
Warp Speed!
Surfing The Net
Tidbits
The Bleeding Edge
Relevant Links
Newsletter Archive
Awards
About Toejumper.net
Home
Web Toejumper.net
 

Speed Up The PC - Denial of Service Attacks

test patternProtect yourself against amateur "hackers" who long ago discovered an easy and cheap way to zap you off the Internet and piss you off. It's called "WinNuke," and is done by running a program that exploits a large bug in Win95/NT's networking system, allowing them to bomb your system with extraneous gunk, crashing your computer and forcing you to restart. Two of the WinNuker's favorite hangouts are America Online and the chat program ICQ, but they can target you from any of a zillion Web sites or other ISP's as well. The program is freely available on the Internet, can most likely be turned up by a simple search on any major search engine, and is easy for anyone with a Unix account to run. (Other programs like mIRC scripts allow the zapper to go through an entire IRC channel and nuke everyone at once. Fun, huh?) Well, there's an easy solution. Go through Microsoft's Web sites and download two patch files, VIPUP11.EXE and VCTPUPD.EXE. (The Web site addresses are as follows: support.microsoft.com/download/support/mslfiles.Vipup.exe and ...vctpupd.exe, where the rest of the URL is the same as the VIPUP address. Download 'em both to a temporary folder. Double-click the VIPUP11.EXE icon, let it install itself, then do the same to the VCTPUPD.EXE icon. Restart your computer. (Make sure you install the two in this order; installing them backwards wipes out VCTPUPD.) Now, update your Winsock connection by installing the two Winsock updates in the "Updates" section below. Delete the four original downloads from your hard disk, and prepare to sneer at the little WinNukers.

Don't get too happy now that you've inoculated yourself against the nukers. Several other "denial-of-service" (DoS) attacks similar to WinNuke are making Net users grind their teeth. One called "The Ping of Death" and a cousin, "Teardrop," exploit known holes in TCP/IP implementation, as does the "SYN" attack and its mutant cousin, "Land." The "Smurf" attack targets your Internet protocols directly and causes major net congestion, while the "UDP Flood" uses the widely accepted User Datagram Protocol to flood LANs and PCs with useless data. The good news: Most problems generated by these beasties are experienced by networked PCs who belong to targeted LANs. The home user isn't seeing these very often. Still, forewarned is forearmed; check out the good people at www.cert.org at Carnegie Mellon University for the latest info about these critters and how to shield yourself from them. Also look into Microsoft's security site at www.microsoft.com/security.

More about security: it's absurdly easy for amateur hackers to invade your PC over the net, root around in your files, even reformat your hard drive. Yeesh. Get a quick security check from ShieldsUP! at grc.com/default.htm. You'll need to download a very small program which, after you connect to the Internet, allows the ShieldsUP site to probe your computer for security breaches. Are they trustworthy? I hope so.... Anyway, this site contains tons of information on how to seal security breaches, firewalls, etc. etc., so it's worth a visit. Forewarned is forearmed. If you want to know just how easy legal hacking is, visit the Happy Hackers at www.happyhacker.org and be prepared to be shocked. These guys seem harmless, but there's plenty of people out there who aren't. Another site worth visiting is HackerWhacker, at www.hackerwhacker.com. HackerWhacker scans over 130,000 possible port addresses on your PC for security flaws and examines your Windows NetBIOS configuration. HackerWhacker's first scan is free, but subsequent uses cost $10 per scan (or you can pay $30/month for unlimited scans). Another place for free PC scanning is www.pcflank.com/, and DSL Reports offers broadband scanning at www.dslreports.com/ Others that are useful can be found at www.vulnerabilities.org/ and www.it-sec.de/vulchke.html.

Check Steve Gibson's site for a detailed discussion of a wholesale DOS attack he recently survived. Good reading and lots of ideas for upgrading security: grc.com/dos/grcdos.htm.

Fear-mongering sites are out there, too. Fred Langa discovered one called "How Secure is Your Computer?" at www.robrob8.com/online_security.htm that uses a harmless display of your C:\ drive to scare you into thinking your PC is vulnerable. The site wants you to buy a copy of BlackICE Defender, a well-regarded firewall.

 
 

Copyright © 1998 - 2008
Usage of this site constitutes acceptance of our Terms of Use
Terms of Use