topic Re: An intrusion attempt by MY computer was blocked in Norton 360

An intrusion attempt by MY computer was blocked

librarian2020 — Mon, 23 Apr 2012 03:31:51 GMT

I have Norton 360 installed, and it is updated and ran regularly. From time to time, an intrusion attempt is blocked and logged, and I am notified of the same. Imagine my horror when Norton was reporting that my computer as the "Attacking Computer".

What does this mean?

Re: An intrusion attempt by MY computer was blocked

Quads — Mon, 23 Apr 2012 04:40:12 GMT

Where does it say the actual outgoing intrusion is coming from??

Quads

Re: An intrusion attempt by MY computer was blocked

DavidThomas88 — Mon, 23 Apr 2012 04:55:19 GMT

hi Quads did you noteed he posted in the NIS/NAV fourm ?

Re: An intrusion attempt by MY computer was blocked

Quads — Mon, 23 Apr 2012 04:59:09 GMT

librarian2020

OK it looks like another user will fix this for you, So I am finished with this thread, you don't have to answer my question.

Quads

Re: An intrusion attempt by MY computer was blocked

librarian2020 — Mon, 23 Apr 2012 11:13:20 GMT

I'm sorry, Quads but I don't see where another user "will fix this for me" ...

Re: An intrusion attempt by MY computer was blocked

Sagar_S — Mon, 23 Apr 2012 12:05:58 GMT

Hi David, That Post is moved now to N360 here so we can help Librarian here to fix his issue.

Hi Librarian,

Can you please give more info like which program or exe is blocked?

You can see that in more detail when you get the alert or you can check that in HISTORY.

May I know the Norton Version you have in the computer and have you done a FULL System Scan Recently ?

Regards,

Sagar S

Re: An intrusion attempt by MY computer was blocked

librarian2020 — Mon, 23 Apr 2012 12:31:39 GMT

Hi Sagar S,

I have Norton 360 and Vista Pro and primarily use Firefox 11.0. Yes, I completed a full system scan last week.

Here are the advanced details:

IPS Alert Name: Web Attack: Facebook Chat Scam

Default Action: No Action Required

Action Taken: No Action Required

Attacking Computer: DEN-PC (IP address followed by "57198") - The DEN-PC is my home computer

Attacking URL: crazyfbapps.info/means55/

Destination Address: 50.63.131.242, 80

Sourse Address: (my IP addy)

Traffic Description: TCP, Port 57198

Network traffic from DEN-PC matches the signature of a known attack. The attack was

resulted from \DEVICE\HARDDISKVOLUME3\PROGRAM FILES\MOZILLA FIREFOX\

FIREFOX.EXE. To stop being notified ...

Network traffic from crazyfbapps.info/means55/ matches the

signature of a known attack. The attack was resulted from \DEVICE\

HARDDISKVOLUME3\PROGRAM FILES\MOZILLA FIREFOX\FIREFOX.EXE. To stop being notified ...

-Librarian2020

Re: An intrusion attempt by MY computer was blocked

librarian2020 — Wed, 25 Apr 2012 00:30:28 GMT

Since there have been no responses since I posted the detailed message, am I just to *assume* this is nothing to worry about? Or should I call the Norton Help Desk?

Re: An intrusion attempt by MY computer was blocked

peterweb — Wed, 25 Apr 2012 00:45:57 GMT

Since Quads was about to help, but thought he was not needed he has not followed this thread. Send him a PM and ask him to follow this thread.

Re: An intrusion attempt by MY computer was blocked

Quads — Wed, 25 Apr 2012 01:08:53 GMT

A Symantec Employee and another user stepped in, so it is theirs to sort out.

Quads