Exploit on Perb?

tonymak

New member
Sep 5, 2002
325
0
0
Last night I switched from Zone Alarm to Sygate Personal Firewall Pro.

Since doing so, everytime I go to https://perb.cc, I get the below warning notification and my firewall blocks all traffic to perb for 10 minutes. The only way to access the site is by allowing all traffic through the firewall.

Here is the message:

Traffic from IP address 69.90.73.254 is blocked from 09/26/2004 20:34:37 to 09/26/2004 20:44:37 [217] Microsoft Multiple Application/OS GDI+JPEG Processing Buffer Overflow
 

Swguy

Single White Member
Apr 26, 2003
1,339
0
36
Diagon Alley
www.freeones.ca
Switch back to Zone Alarm, or better yet, upgrade to Zone Alarm Pro. I've been using it for years and have never had a problem with and alerts from Perb nor had any issues arising from being here.


SWG
 

tonymak

New member
Sep 5, 2002
325
0
0
Swguy said:
Switch back to Zone Alarm, or better yet, upgrade to Zone Alarm Pro. I've been using it for years and have never had a problem with and alerts from Perb nor had any issues arising from being here.


SWG
What I really like about Sygate Pro is that it allows MAC filtering so I can give access to others on my network based on MAC addresses.

This reduces the chances of someone hacking through my wireless and getting access on the network.

Just kind of odd that Zone Alarm didn't pick anything up.
 

wa senior

New member
Sep 15, 2004
16
0
0
WA
Hey TonyMak

About a month ago I switched to Zone Alarm Suite which includes a virus checker. The thing I like is that it does the virus udates and checking in the background while I'm doing other things. Beats having to sit and wait while the virus checker is doing its thing.

When you are in ZA Control Center, Help, do a search on MAC and see if the result is what you need. Good luck.
 

tonymak

New member
Sep 5, 2002
325
0
0
wa senior said:
Hey TonyMak

About a month ago I switched to Zone Alarm Suite which includes a virus checker. The thing I like is that it does the virus udates and checking in the background while I'm doing other things. Beats having to sit and wait while the virus checker is doing its thing.

When you are in ZA Control Center, Help, do a search on MAC and see if the result is what you need. Good luck.
From what I've seen in the last day with Sygate, I'm quite impressed.

Can't say I'd go back to ZA, which I've used for years.

So far the only issue I've had is with the Perb site. Needless to say, I'm running up to date virus protection and have all the M$ updates done as well.
 

tonymak

New member
Sep 5, 2002
325
0
0
Swguy said:
What version of ZA were you using? The free download one or Zona Alarm Pro?

SWG
I used the free one because it had everything I thought I would need.
 

tonymak

New member
Sep 5, 2002
325
0
0
paigeadams said:
I've been using tiny firewall for years! It's very user friendly and you can download it from downloads.com for free.

I tried ZA but had nothing but troubles.
That's partly why I moved away from ZA. Seems that after I installed ZA, I noticed that if I leave my pc on for a couple of hours and then come back to surf the net, I had no connectivity.

To solve the problem I could shutdown ZA or reboot the pc.

It was happening on all of my pcs so I figured it was time to move to a new software firewall.
 

Swguy

Single White Member
Apr 26, 2003
1,339
0
36
Diagon Alley
www.freeones.ca
I've heard of similar problems with ZA, and I have to admit that until its configured properly, it can be a pain. ZA Pro integrates a lot nicer, in my experience, and I've had no problems with it. But, in the end, what matters is that whichever firewall you use, it works for you.

As for the warning you got, there are updates for WinXP (or whichever OS you have) available from Windows Update as well as updates from Office Update for whichever version of MS Office (or any of its components - Word, Excel, etc) you have installed. Both sets of updates need to be downloaded separately.

SWG
 

Magnus Unus

Standing Member
May 19, 2004
40
0
0
Going back to the original intent of this thread, the OP is right to be concerned. Some of the banner adds are actually JPEGs that either have a distinct signature or are in fact carrying the GDI-JPEG buffer overflow exploit embedded in them.

I actually had some issues with the links on the SP adds where when you clicked on the web site of one of the agencies, that web site embeded browser controls to change your default search pages and home pages.
 

Fotura

Member
Nov 29, 2003
120
0
16
Surrey
Hi,

I've used Sygate and Tiny but they didn't have regular updates so I switched to ZoneAlarm.

I prefer Sygate and Tiny because they do have some features that ZoneAlarm does not. They both run as services instead of a process and I do find them easier to use. I also found they give better messages than ZoneAlarm.

So until Tiny is free again and both Tiny and Sygate give better updates, I'll stick with ZoneAlarm.
 

BYSON

No Gunt
Oct 7, 2003
740
1
18
54
West Coast Of BC
I use alpha shield modem plugs into it and the shield plugs into computer can turn off internet by hitting a button
 

LonelyGhost

Telefunkin
Apr 26, 2004
3,933
1
0
tonymak said:
That's partly why I moved away from ZA. Seems that after I installed ZA, I noticed that if I leave my pc on for a couple of hours and then come back to surf the net, I had no connectivity.

To solve the problem I could shutdown ZA or reboot the pc.

It was happening on all of my pcs so I figured it was time to move to a new software firewall.
that's because ZA has an option that will shut off all internet activity after a specific period of time or in sync with the screen saver ... that can be shut off.

it does take a bit of fiddling to get ZA to work how you want it to but after that it works very well.
 
Vancouver Escorts