12-15-2011 12:05 AM
Not sure if this is the right place to post. Hopefully it'll be alright. Sorry otherwise.
Just recently noticed my Norton Antivirus had blocked an internet attack, went to check activity log to inspect it.
Event Type:
Web Attack: Blackhole Toolkit Website 5
Results:
Some IP address
Details:
Outgoing
I guess my main question is; what does 'Outgoing' mean? Is it something potentionally bad?
Thank you ahead of time for any responses, that might help shed some light for me.
12-15-2011 12:39 AM
Outgoing means that it the attack originated from your computer. That, however, does not mean that your computer is infected. Most likely, the origination was your browser, when you visited an infected web page. Since the attack was blocked, you don't have to worry about it. If these messages continue, the possibility that your computer is infected should be investigated, but again, most likely it was an infected webpage that you came into contact with that was blocked.
12-15-2011 01:01 AM
Thank you.
It happened 3x in August so I assume I'm in the clear, I hope.
what a relief.
12-15-2011 11:14 AM
A web attack is launched by a malicious site that attempts to exploit known security vulnerabilities in popular software programs and operating systems in order to install malware. As Bombastus said, unless you get these all the time, you have just happened upon a couple of sites that had been compromised or that had malicious ads being displayed. If you haven't had an alert since August, there is no cause for concern at all.
