topic Re: need help finding signature name to allow website on computer in Norton Internet Security / Norton AntiVirus

need help finding signature name to allow website on computer

eld85 — Thu, 07 Apr 2011 03:09:16 GMT

hey guys, I'm having trouble accessing a website www.chandon.com to buy wine. I get the message IPS Detection Statistical Submission and An intrusion attempt by 65.61.140.175 was blocked with risk name HTTP Malicious Cookie Activity. I don't know what the signature name for this is so I can unblock it so I can buy some wine... any help or know how I can identify the signature name?

Re: need help finding signature name to allow website on computer

delphinium — Thu, 07 Apr 2011 03:24:56 GMT

It is warning you that there is malicious script on the web page. It should not be ignored. The website owner needs to clean his website.

Re: need help finding signature name to allow website on computer

SendOfJive — Thu, 07 Apr 2011 03:30:08 GMT

Hi eld85,

If Norton is actually blocking the threat and alerting you, then it is an actual threat. The Malicious Cookie Activity signature means that when you attempt to visit chandon.com you are being redirected to a site that is using a toolkit to look for vulnerabilites in the software on your system that can be used to install malware. This is exactly the sort of thing you buy Norton to protect you from. Don't try to get around the protection.

Re: need help finding signature name to allow website on computer

eld85 — Thu, 07 Apr 2011 03:33:18 GMT

I understand. However I can access the Domain Chandon website fine from my smartphones and am not redirected to any malicious websites. Any suggestions what I can email the wine company to do so their website is safe?

Re: need help finding signature name to allow website on computer

delphinium — Thu, 07 Apr 2011 03:37:29 GMT

It could well be thaqt your smartphone does not have the protections against malware that Norton is providing. It does not mean that it is not there because a different device does not recognize it.

Re: need help finding signature name to allow website on computer

SendOfJive — Thu, 07 Apr 2011 03:42:41 GMT

Hi eld85,

Just inform them that the site is compromised and that malware is attempting to install on visitor's computers when trying to access the site. It may be an advertisement on the page, or their site may have been hacked.

Re: need help finding signature name to allow website on computer

delphinium — Thu, 07 Apr 2011 03:54:41 GMT

NoScript blanks out the whole page. Unknown Iframes and a number of fls.doubleclick cookies. Chandon has been rated poorly for reliability and privacy on WOT. McAfee Site adviser gives it an okay. Use the phone rather than the computer if possible. The phone will have a different operating system.

Re: need help finding signature name to allow website on computer

eld85 — Thu, 07 Apr 2011 04:28:12 GMT

I pretty much sent them what you sent me, we'll see what they reply with...

Re: need help finding signature name to allow website on computer

eld85 — Sat, 09 Apr 2011 00:04:59 GMT

I emailed them pretty much exactly what you sent me... and this was their reply:

"Dear _____,

Thank you for your email. We appreciate you alerting us to an intrusion into our website. We have reported the problem to our IT department, who is working on a permanent resolution. If you have any questions, please let us know. Sincerely,

Lisa"

thank you!!!!!!