Spyware question!

[laylah]

I am now using ZoneAlarm as suggested by KitchenWitch a couple of weeks ago. About 20 minutes ago I had a high risk hit. This is what I found, could someone please "translate" for me? Thanks in advance...Jenn

OrgName: Road Runner
OrgID: RRNY
Address: 13241 Woodland Park Road
City: Herndon
StateProv: VA
PostalCode: 20171
Country: US

ReferralServer: rwhois://ipmt.rr.com:4321

NetRange: 69.200.0.0 - 69.207.255.255
CIDR: 69.200.0.0/13
NetName: RRNY
NetHandle: NET-69-200-0-0-1
Parent: NET-69-0-0-0-0
NetType: Direct Allocation
NameServer: DNS1.RR.COM
NameServer: DNS2.RR.COM
NameServer: DNS3.RR.COM
NameServer: DNS4.RR.COM
Comment:
RegDate: 2004-03-26
Updated: 2005-05-17

OrgAbuseHandle: ABUSE10-ARIN
OrgAbuseName: Abuse
OrgAbusePhone: [phone]
OrgAbuseEmail: Whois Privacy and Spam Prevention by Whois Source

OrgTechHandle: IPTEC-ARIN
OrgTechName: IP Tech
OrgTechPhone: [phone]
OrgTechEmail: Whois Privacy and Spam Prevention by Whois Source

[SHRED]

1. Try posting here

http://www.democraticunderground.com/discuss/duboard.php?az=show_topics&forum=242

[laylah]

2. Thanks!

[acmejack]

3. Try this resource, it will sort it all out for you.

Let me know if you need more answers, but this site is a good set of user instructions and how tos for ZA.

[RC]

5. What resource?

[acmejack]

7. oops, here is the link.

http://www.donhoover.net/logfile.html

[MazeRat7]

4. That is information about the ISP where the "attack" came from

In this case someone using Road Runner acct managed by the Herndon VA office, with and ip in the range of 69.200.0.0 - 69.207.255.255, set off a high risk alert. Possibly due to whats called a port scan (the most common reason) but there could be many other causes for the alert.

BTW... this tool is technically considered a "firewall" not exactly a "spyware" blocker per-se. But that is a different discussion.

MZr7

[Tandalayo_Scheisskopf]

6. Suggestion:

If you are concerned about spyware, I suggest two programs:

SpywareBlaster(v3.5 was released today). It blocks spyware from installing itself and it works.

HostsMan: Blocks known spyware and malware installing sites. Regularly updates the hosts file and blocks the hell out of bad sites.

One more: Spybot Search&Destroy. Use the immunization feature and update it regularly.

Use these three and you will decrease the probability of spyware and malware infection by orders of magnatude. They, used together, work. Much better than just a firewall.