Infected by my own computer?

NilsOstergren · ‎09-24-2012

Hi

My W7-computer is named Nisse.

Now Northon 360 shows an alert about an attack from a computer namned Nisse.

Please explain that if you can.

This is the alert (translated from Swedish):

An intrusion attempt by Nisse was blocked

Warning name: Web Attack: Sutra TDS Request
Attacking computer: Nisse (192.168.0.101, 51200)
Attacking URL: animewiki.etc.br.ms:81/rem2.html
Target adress: animewiki.etc.br.ms (62.154.138.211, 81)
Source adress: 192.168.0.101 (192.168.0.101)
Traffic description: TCP, Port 51200

Nisse is connected to the Internet with wifi through a router. So are three other computers in our family.

Thank's in advance

/Nisse

Btw: Nisse is a nickname for my Swedish name Nils.

SendOfJive · ‎02-07-2009

Hi NilsOstergren,

You were attacked but not necessarily infected, as Norton seems to have blocked the exploit. The alert may also have shown your browser as the attacker, which is why, in most cases, these alerts seem to indicate that your own computer is attacking itself - the attack is coming through your browser. In this case, you may have clicked a link that directed you to the attacking website. It is clear from your information that the attack came from the animewiki site. Although Norton seems to have caught the attack, it is always a good idea to run a scan to check that something did not manage to sneak past. Please see the following for a discussion of TDS attacks:

http://www.symantec.com/connect/blogs/web-based-malware-distribution-channels-look-traffic-redistrib...