Some hours ago Kaspersky blocked literally over 400 network attack attempts on my computer in less that one minute.
Why is this happening?
Is it WCry?
Does someone have something personal against me?
>>60360941
>Attacking computer IP: 112.44.75.4
You should DDOS it
>>60360941
cia wants to delete your animes
>whois 112.44.75.4
>some chinese faggot
>port: 50496
looks like a bittorrent port. maybe you should seed more.
So it's not WCry, then? I've been reading about it but still don't understand how it spreads. I know almost nothing about computer security and hacking.
Is it just some other malware or is someone trying to hack me personally?
I'm not sure why anyone would want to hack me. I'm a NEET with very little money left.
Maybe I pissed someone off?
Maybe the police or some vigilante hacker thinks I did something? I haven't done anything bad and I don't have anything illegal (well, maybe some pirated stuff) but I think I've said some shit that may be considered suspicious.
Probably nothing serious will happen, but I'm still worried.
>windows
>open ports
Rip
>>60361743
its wcry lol
your antivirus actually protected you
gud job kapsperspky
wait are you connected directly to your modem OP?
>>60360941
>Another wincuck BTFO
>>60361844
not op but is that bad?
>>60361857
>is that bad?
>>60361835
I hope you're right.
>>60361844
No.
>>60361943
do you have port 50496 forwarded?
>>60361857
No, no. It's great anon
>>60361954
Responding 2 hours later. Sorry, I had to go somewhere. You're obviously not here anymore.
As I said I'm pretty ignorant about the subject but I downloaded TCPview and looked at my ports and 50496 and 50495 (the attacked ones) were apparently being used by Soulseek. Soulseek is a P2P program I use for downloading music. In the "remote adress" column most of the other ports say either "localhost" or my local adress yet the attacked ports showed different ones. I closed Soulseek and the attacked ports disappeared. The red parts in pic related are my local adress, which is a name not an IP, I censored it just in case. I also censored the System Process remote adresses.
I guess I should delete Soulseek, huh?
How do I check if my computer is still in danger?
Sorry for turning this into tech support, I know it's against the rules. I'm gonna go ask somewhere else but I'd still like to see if I get some help here before the thread dies.
>>60360970
>>60360994
look at the image, they're all from different ips, it's obviously a botnet
>>60363455
your computer is fine. you can keep using soulseek if you want.
not sure what exactly kaspersky is considering a "network attack" but it's possible that those entries were innocent connections trying to be made to facilitate the p2p.
Redpill me on Kaspersky /g/. Is there really a Russian backdoor that sends all kinds of personal data back home?