Attack on computer when using google?

Biglep · ‎05-01-2010

Hello everyone. I'm new here and I got little problem. I'm not very handy with computers (just wanted to say that)... So the problem is - I'm getting messages from Norton AntiVirus 2010 when searching with Google that attack on my computer got blocked... It's a bit strange :p (I get messages like this on other, random situations too). Should I just ignore it or is there something wrong? I'm a bit worried... I ran Full scan and found one trojan horse ... But messages didn't stop to pop-up.

Can someone tell me what should I do? Is it Norton problem or I have more viruses which I can't find? Thanks

floplot · ‎04-11-2009

Hello Biglep

Welcome to the Norton Users Discussion Forum

Would you please tell us what version of NAV 2010 you have? Also what operating system and service pack? What was it that NAV found and did NAV clean it up?

I would suggest that you run a full scan with the free version of Malwarebytes. Malwarebytes is a good on demand scanner which will work with your Norton product.

Download the free version, install and update then run a FULL scan. After the scan completes you should post the logs back to this thread.

You can find Malwarebytes here

http://www.filehippo.com/download_malwarebytes_anti_malware/

It is a safer location to get the program from than malwarebytes themselves because some malware creators have large lists of sites that they block. Please be careful to down load the correct program ----the FREE version of MALWAREBYTES

(Thanks to Delph for providing the alternative site)

After it has finished running, please save the log to your desktop and then you can post it here using the Add Attachment. Please come back and let us know if it found anything and post the log if it did find something. Thanks

Success always occurs in private and failure in full view.

mdturner · ‎04-11-2008

Biglep wrote:
Hello everyone. I'm new here and I got little problem. I'm not very handy with computers (just wanted to say that)... So the problem is - I'm getting messages from Norton AntiVirus 2010 when searching with Google that attack on my computer got blocked... It's a bit strange :p (I get messages like this on other, random situations too). Should I just ignore it or is there something wrong? I'm a bit worried... I ran Full scan and found one trojan horse ... But messages didn't stop to pop-up.

Can someone tell me what should I do? Is it Norton problem or I have more viruses which I can't find? Thanks

Hi Biglep

Is the alert coming up as you do the search or as you browse to sites you have found via Google?

We look forward to the time when the Power of Love will replace the Love of Power. Then will our world know the blessings of peace. ~William Ewart Gladstone

Biglep · ‎05-01-2010

Message comes when I'm just searching with google. Version of my NAV is 17.6.0.32. When I checked my history now I see that there was "pptt.exe" which got deleted and day after (when I ran full scan becouse of all this messages) trojan horse (deleted too) with crazy name which I don't know how to copy :P And writing it is impossible. On both of this viruses it's said that less than 10 Norton users had this.

I have windows XP with SP3... I'm just starting to scan with this malwarebytes. And I hope you understand me. I'm from Poland and I don't speak english very well.

Biglep · ‎05-01-2010

Okay I scanned with malwarebytes but It crashed near end :o But it didn't find anything before crash.... (Crash = Runtime error: 91 or something like that)... I'm still getting tons of this attack-on-computer errors... Random ones but not very often and always when using google.

mdturner · ‎04-11-2008

Hi Biglep

Since malwarebytes failed on you try Superantispyware to scan your PC. It can be downloaded (free version) from here

http://www.superantispyware.com/?tag=GOOGLE-SUPERANTISPYWARE

Make sure you update it before running a full scan.

Could you provide some detail about the actual message you are getting?

We look forward to the time when the Power of Love will replace the Love of Power. Then will our world know the blessings of peace. ~William Ewart Gladstone

Biglep · ‎05-01-2010

When using google im getting in down right corner of screen message that attack on my computer got blocked and when I click on details it says that try on breaking to my computer made by "85.12.46.159" got blocked. Some crazy URL adress of attacker. Name of this attack (I don't know how to translate everything from Polish) - HTTP Tidserv Request.

At the end of this info it says that signature of this matched to signature of famous(?) attack and that it it came from Firefox.exe.(That's the error im getting from using google every time)

And all this random messages I checked are about unauthorized acces to Norton AntiVirus files... And they came from different programs... Like GOOGLEUPDATE.exe, WINDOWSDEFENDER\MSMPENG.exe, SYSTEM32\CTFMON.exe (this three are most common) so I bet it's pretty normal but I still don't know anything about this google searching thing. It's pretty annoying.

I'm starting to download this SuperAntiSpyware...

mdturner · ‎04-11-2008

Hi Biglep

The good thing here is that these are being blocked by Norton. The scan with Superantispyware will probably come up clean.

Don't apologise about your English as it is excellent. In your message the translation would be "matched the signature of a well known attack".

Let us know how the latest scan goes.

We look forward to the time when the Power of Love will replace the Love of Power. Then will our world know the blessings of peace. ~William Ewart Gladstone

Quads · ‎07-21-2008

Biglep wrote:
"85.12.46.159" got blocked. Some crazy URL adress of attacker. Name of this attack (I don't know how to translate everything from Polish) - HTTP Tidserv Request.

Quads