Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations gkittelson on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

Will a port 80 virus go through my winproxy server?

Status
Not open for further replies.

mfoc

MIS
Feb 10, 2004
37
US
I've got a copy of WinProxy running that about 98% of my workstations are using. Each workstation is set up to use this by setting the proxy option in "Internet Options." My question is this:

Will a port 80 virus use this proxy also?

My T1 Internet provider says that my connection is slow and unreliable because they thick I have a port 80 virus. I've checked the ip cache flow log on my internet router and the most traffic somes from my proxy (obvious). My proxy log doesn't show an excess of traffic from any particular workstaion. It all seems spread randomly among many machines and the addresses accessed seem very legitimate. All of my workstations should be running Symantec Antivirus with the most current definitions.

I don't buy my T1 provider's cop-out on why their line is slow.

Help?
 
Sounds like you have a worm on your network, something like nachi. Run some sort of trojan/worm detection software on your systems such as stinger.exe from .

I would also do some sort of packet sniffing with a tool such as etheral which you can get from here
Im not sure what your provider means by a port 80 virus.

Also if your noticing that pages take a while to come up, you might want to check that your DNS settings are correction as it might be that it just taking time to resolve domian names.
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top