[Revel]

Zone alarm is going crazy tonight. 143 alerts in 45 minutes. Mostly to UDP port 41170. Why does this not match the one given throughout this thread?

[FairOpinion]

"Mostly to UDP port 41170"

---

Maybe that is the remote port it's coming FROM, trying to go to you LOCAL port 4444. At least that is how I understood the suggestion to block our 4444 port ( block our LOCAL 4444 port). I hope that is correct.

[Ramius]

Sounds like a different thing from this particular virus/worm. Your zonealarm may just be reacting to some script kiddie that has just started working the IP subnet that you happen to be on. Might or might not actually be anything to worry about. That ZA is catching it, is on the whole, a fairly good sign.