whats an echo request

[sentra8777]

Ok on my norton security keeps on flashing this annoying message. It will not stop coming up.

It says its high risk A remote system is attemping to access your computer.

protocol ICMP (inbound)

remote address 24.131.106.204 Echo Request (8)
Local Adress 24.131.106.204 Echo Request (8)
locastion Home

[sentra8777]

What is this i get them every minn i dont think i have a worm. Also i scanned with norton didnt find anything used a trojan scanner didnt find anything. It comes up with a differnt ip address everytime.

[sentra8777]

anyone out there who can help :)

[blebs]

Welcome to the land of infested computers! There are still a bunch of numbnuts that have not patched XP and your seeing a galactic proportion or ICMP pings because the worms are looking for other machines to infect.

I thought by now, this would have subsided, but it's just as bad now as when it all got started. I wish the ISP's would pull these peoples accounts until they fix their problems.

[sentra8777]

ok well i did a trace and well it stoped. The trace is comeing from my cable company. I reinstalled norton so now the eco request stoped do u think maby i just had my firewall settings on way to high were it freaked out about every little packet????

[blebs]

Nope, I'm getting well over 1200 ICMP pings a day since this darn worm started it's stuff.

[sentra8777]

well i by mistake let one of the packets though :( but xp is patched i did a full system scan on my comp and it found nothing thank god. Thanks for your help though at lest i know what it is.

[sentra8777]

they were just coming up like there life depeding on it so i keeped on just clicking the prompts until i just stoped looking and like a dumby let one of them though. but if its the worm u were talking about i think iam fine because iam pretty sure its patched. also like i said norton is fully aware of the worms and on a full system scan found nothing

[blebs]

Let me put it this way, I got so tired of the nags that I turned the damn thing off. I'm not even logging anymore because it fills the logs up too fast. That's how bad it is.

[Joe]

most likely a portscan of an IP range or someone has a trojan on your rig and keeps trying to see if you are alive.. even innocent software will have features that check and send to a server your online presence.. Id run an up to date virus scan

also reboot your PC and right away open a DOS command prompt and type NETSTAT

this will list all connections to your machine; be weary of any that look like simple user address' like 12345.comcast.tampabay.net or the like

[blebs]

It's the Welchia and Blaster Worms.

[sentra8777]

ok did netstat nothing looked abnormal so i seem fine no virues found or worms or trojans

[blebs]

Like I said, it's infected machines out on the web looking for more open machines to infect. They ping continually. Hopefully, after January 1st this crap will stop.