• All Community
    • All Community
    • Forums
    • Ideas
    • Blogs

Not what you are looking for? Ask the experts!

Kudos0

Fake App Attack: Fake Av Website 20

I was on youtube and out of no where I got attacked by this thing. What can it do to a hard-drive, I do know its dangerous. Luckily my norton Blocked it. But it still has me worried.

Category: Intrusion Prevention Date & Time,Risk,Activity,Status,Recommended Action,IPS Alert Name,Default Action,Action Taken,Attacking Computer,Attacker URL,Destination Address,Source Address,Traffic Description 2012-05-03 15:44:19,High,An intrusion attempt by 31.193.12.3 was blocked.,Blocked,No Action Required,Fake App Attack: Fake AV Website 20,No Action Required,No Action Required,"31.193.12.3, 80",infectionsolvermonitor.info/fdd91a64ce20e17d/images/alert.png,"AMBER-HP (192.168.0.6, 51596)",31.193.12.3,"TCP, www-http" Network traffic from <b>31.193.12.3</b> matches the signature of a known attack.  The attack was resulted from \DEVICE\HARDDISKVOLUME2\PROGRAM FILES (X86)\INTERNET EXPLORER\IEXPLORE.EXE.  To stop being notified for this type of traffic, in the <b>Actions</b> panel, click <b>Stop Notifying Me</b>. Network traffic from <b>infectionsolvermonitor.info/fdd91a64ce20e17d/images/alert.png</b> matches the signature of a known attack.  The attack was resulted from \DEVICE\HARDDISKVOLUME2\PROGRAM FILES (X86)\INTERNET EXPLORER\IEXPLORE.EXE.  To stop being notified for this type of traffic, in the <b>Actions</b> panel, click <b>Stop Notifying Me</b>.

Replies

Kudos0

Re: Fake App Attack: Fake Av Website 20

Hi ConstanceGrace,

This type of attack is commonly associated with fake antivirus scans that attempt to trick you into downloading malware that pretends to be a security or system maintenance product.  Norton has blocked the loading of the page before you were able to click on anything that might lead to trouble.  Even so, it is often a good idea to update your virus definitions by running LiveUpdate, and then run a scan, just to make sure that no harm was done.

Replies are locked for this thread.