Botnets Took Control of 12 Million New IPs this Year

[txmatt409]

Botnet criminals have taken control of almost 12 million new IP addresses since January, according to a quarterly report (.pdf) from anti-virus firm, McAfee. The United States has the largest number of botnet-controlled machines, with 18 percent of them based here. The number of zombie machines represents a 50-percent rise over last year.
Researchers attribute the explosion to botnet controllers trying to recoup spamming abilities after authorities took down a hosting facility last year that catered to international firms and syndicates involved in spamming and botnet control.
http://www.privacydigest.com/2009/05...w%20ips%20year

[retired-37]

For those of us who are not tech- savy, can you explain what a botnet is and what it does........andy

[Miss_A]

I didn't know what botnet was, either, so I looked it up. Whether this info is entirely accurate, I don't know, but you will get the gist.

http://en.wikipedia.org/wiki/Botnet

[txmatt409]

A BOTnet can be used for spam, HtTP, UDP,ICMP,TCP attacks in other words its pretty basic, its just a "server/trojan" that you infect peope with to "barrow" some of their bandwidth to use to attack sites, isp's, and anything thats connected to the internet. and the person running it either is using Irc, or a static dns, something like www.no-ip.com which redirects the bots to ur computer so you can send commands from the Client.

[txmatt409]

thats why you shouldnt use peer to peer networks like Kazza and bear sharE to d/l music and other files.. i can share 10,000 infected files with my undetectable server on p2p networks and get 200+ infected computers a day. Simple ChIT!

[retired-37]

Originally Posted by txmatt409

thats why you shouldnt use peer to peer networks like Kazza and bear sharE to d/l music and other files.. i can share 10,000 infected files with my undetectable server on p2p networks and get 200+ infected computers a day. Simple ChIT!

Does that also include Myspace? That's the only social networking site I use..........andy

[retired-37]

Can you rid your computer of botnets??......and how??.....andy

[txmatt409]

Originally Posted by achapinguy

Does that also include Myspace? That's the only social networking site I use..........andy

Yes, myspace, Twitter, Faceboook, are the first places hit cause they have the most online at one time. all they need to do if send a email and have you open or read a picture and or you download a activex/ even a myspace page and be coded to infect people when they view the myspace page, same with twitter, and face boook.

[txmatt409]

Originally Posted by achapinguy

Can you rid your computer of botnets??......and how??.....andy

Yes its very easy, if you have any doubts about a file you can scann them on www.virustotal.com its a site that uses the top 25+ virus scanneres at onces to scann the file you choose...other ways are looking at packets, running programs, best thing is get a packet sniffer to see if data is being sent to another pc.. if you cant find where its located on ur pc....DOWNLOAD ESET NOD 32.its a virus scanner/firewall thats picks up pretty mucch everything...hit me up if you need more help...

[techietype]

Originally Posted by txmatt409

A BOTnet can be used for spam, HtTP, UDP,ICMP,TCP attacks in other words its pretty basic, its just a "server/trojan" that you infect peope with to "barrow" some of their bandwidth to use to attack sites, isp's, and anything thats connected to the internet. and the person running it either is using Irc, or a static dns, something like www.no-ip.com which redirects the bots to ur computer so you can send commands from the Client.

What is a static DNS?

[retired-37]

Originally Posted by txmatt409

Yes its very easy, if you have any doubts about a file you can scann them on www.virustotal.com its a site that uses the top 25+ virus scanneres at onces to scann the file you choose...other ways are looking at packets, running programs, best thing is get a packet sniffer to see if data is being sent to another pc.. if you cant find where its located on ur pc....DOWNLOAD ESET NOD 32.its a virus scanner/firewall thats picks up pretty mucch everything...hit me up if you need more help...

I have microsoft windows 1 care. This was a very expensive anti- virus/ malware program........at least I thought so for 50 bucks. Do you think this program will get rid of botnets too?? I hope to get my money's worth if I can........andy

[txmatt409]

Originally Posted by achapinguy

I have microsoft windows 1 care. This was a very expensive anti- virus/ malware program........at least I thought so for 50 bucks. Do you think this program will get rid of botnets too?? I hope to get my money's worth if I can........andy

i dont know much about that a/v but if it updates you should be fine...

[txmatt409]

Originally Posted by techietype

What is a static DNS?

something like www.no-ip.com you use it to connect with the zombies to send cmds from ur computer...

[techietype]

Originally Posted by txmatt409

something like www.no-ip.com you use it to connect with the zombies to send cmds from ur computer...

I think that's just plain old DNS that you are talking about-- the same DNS that you use when you enter www.prisontalk.com into your web browser. You may be confusing a static IP adress with DNS. DNS maps names (URL's) to IP addresses.

A static IP address is an internet address that doesn't change. Most ISPs change your address whenever they have a need to do so. It happens without warning. For most people it doesn't matter, but if you are operating a server you won't be able to find it from a remote location. With services like DynDNS and the one that you mentioned, you map your address to a domain name. A client runs on the sever or on your router that notifies the DNS that you are using if your address changes.

That has nothing to do with Botnets, and is quite useful.

[txmatt409]

Originally Posted by techietype

I think that's just plain old DNS that you are talking about-- the same DNS that you use when you enter www.prisontalk.com into your web browser. You may be confusing a static IP adress with DNS. DNS maps names (URL's) to IP addresses.

A static IP address is an internet address that doesn't change. Most ISPs change your address whenever they have a need to do so. It happens without warning. For most people it doesn't matter, but if you are operating a server you won't be able to find it from a remote location. With services like DynDNS and the one that you mentioned, you map your address to a domain name. A client runs on the sever or on your router that notifies the DNS that you are using if your address changes.

That has nothing to do with Botnets, and is quite useful.

You are right........sorry about that had things mixed up, it is a DNS, and no-ip is a shity one at that if your trying to direct 5,000 ips to urs. they deleted my dns in after 3 weeks of using it pissed me offf!

[retired-37]

Thannxx, Matt my computer scan turned up NO malware or viruses........I think this includes botnets!!......andy