Norton 360

[librarian2020]

I have Norton 360 installed, and it is updated and ran regularly.  From time to time, an intrusion attempt is blocked and logged, and I am notified of the same.  Imagine my horror when Norton was reporting that my computer as the "Attacking Computer".

What does this mean?

[Quads]

Where does it say the actual outgoing intrusion is coming from??

Quads

[DavidThomas88 Regular Contributor]

hi Quads  did you noteed he posted in the  NIS/NAV fourm ?

[Quads]

librarian2020

OK it looks like another user will fix this for you, So I am finished with this thread, you don't have to answer my question.

Quads

[librarian2020]

I'm sorry, Quads but I don't see where another user "will fix this for me" ...

[Sagar_S]

Hi David, That Post is moved now to N360 here so we can help Librarian here to fix his issue.

Hi Librarian,

Can you please give more info like which program or exe is blocked?

You can see that in more detail when you get the alert or you can check that in HISTORY.

May I know the Norton Version you have in the computer and have you done a FULL System Scan Recently ?

Regards,

Sagar S

[librarian2020]

Hi Sagar S,

I have Norton 360 and Vista Pro and primarily use Firefox 11.0.  Yes, I completed a full system scan last week. 

Here are the advanced details:

IPS Alert Name: Web Attack: Facebook Chat Scam

Default Action:  No Action Required

Action Taken:  No Action Required

Attacking Computer:  DEN-PC (IP address followed by "57198") - The DEN-PC is my home computer

Attacking URL:  crazyfbapps.info/means55/

Destination Address:  50.63.131.242, 80

Sourse Address:  (my IP addy)

Traffic Description:  TCP, Port 57198

Network traffic from DEN-PC matches the signature of a known attack.  The attack was

resulted from \DEVICE\HARDDISKVOLUME3\PROGRAM FILES\MOZILLA FIREFOX\

FIREFOX.EXE. To stop being notified ...

Network traffic from crazyfbapps.info/means55/ matches the

signature of a known attack.  The attack was resulted from \DEVICE\

HARDDISKVOLUME3\PROGRAM FILES\MOZILLA FIREFOX\FIREFOX.EXE. To stop being notified ...

-Librarian2020

[librarian2020]

Since there have been no responses since I posted the detailed message, am I just to *assume* this is nothing to worry about?  Or should I call the Norton Help Desk? 

[peterweb Super RootKit Eradicator]

Since Quads was about to help, but thought he was not needed he has not followed this thread. Send him a PM and ask him to follow this thread.

[Quads]

A Symantec Employee and another user stepped in, so it is theirs to sort out.

Quads