03-05-2011 06:13 PM - last edited on 03-05-2011 08:49 PM by shannons
On FB and two attempts at hacking into computer. I was using Norton Safe Search. IP addresses are: 22.214.171.124.80 and 126.96.36.199 Thought I was protected from this. Tried to locate these addresses and cannot. What happens from here? Had another try to hack into my computer around the holidays. I was told it would be sent to the Cyber Crime Unit. Never heard anything, but my PC needed a new hard drive. Is the same thing going to happen? I just got it back from the manufacturer. Not a happy camper since I was informed I would be protected. The hacking attempts happened within minutes of looking at my site through Norton Safe Search. I need answers here. Thank you.
[edit: Clarified subject.]
03-05-2011 09:13 PM
The first number is a hosting site in Europe and the second is a dedicated server in Virginia, USA. Rather than hackers, it seems more likely that they are DNS servers or cloud hosting servers, or update servers. In this case you will see them frequently.
These kinds of communications are unlikely to have anything to do with the loss of a hard drive. I lost four in a row but it had a great deal to do with improper cooling in the case.
Norton does have a Facebook scanner, if you have the 2011 version
03-06-2011 08:52 AM
It would be more suspicious if it was in the temp folder. The OP has not advised what it is yet.
03-06-2011 11:22 AM
Looks like a possible Trojan to me: http://www.threatexpert.com/report.aspx?md5=19f8c5
Good catch on the IP addresses. If the OP would advise if these were Intrusion Prevention System alerts it would clarify things. Rather than attacks from the two addresses "hacking into" the system as the opening post states, these are more probably connections going out. Screenshots of the IPS entries in the Norton Security History logs would provide useful information.