05-04-2010 09:41 PM
Hoping someone out here could help ! Over the last week or so Norton has been repeatedely blocking intrusion attempts - I've pasted a copy of my History below.
An intrusion attempt by m01n83kjf7.com was blocked. Application path \DEVICE\HARDDISKVOLUME1\PROGRAM FILES\INTERNET EXPLORER\IEXPLORE.EXE.
Any idea how to get rid of this virus / trojan / malware ? Any help will be much appreciated.
05-04-2010 09:47 PM - edited 05-04-2010 09:56 PM
Welcome to the Norton Community! :)
I have done some research and I must recommend that you sit tight, do nothing with the system and wait for Quads to provide you with some assisstance. :)
05-05-2010 07:34 AM
Hi, I am having the same problem. This problem started after Norton blocked a trojan called rurj.exe. Since that time I get blocked attacks from different websites including this one. The website seems to change daily and the attack comes through both explorer and firefox. Sometimes it also shows up as a Tidserv request to SVCHOST.EXE.
Hopefully I'm not hijacking this thread, but I thought the similarities of the attacks and the extra info might help resolve it for both of us.
05-05-2010 02:04 PM
yep I get in Firefox too. Have you noticed thats its pretty much every time you're on Google as well ? Get it less frequently when on other websites.
Admins / Mods - Help !!
05-08-2010 10:20 PM - edited 05-08-2010 10:23 PM
Please provide your installed OS and installed Service Pack Level (i.e., Windows XP SP3, Vista SP2, Windows 7 no SP).
Also provide your installed Norton product and its version (i.e., NIS 184.108.40.206). You can find this information by opening your Norton product and selecting Help & Support>About (In some Norton products it is Help then About).
This information will be useful in assisting you with your issue.
05-08-2010 10:42 PM - edited 05-08-2010 10:43 PM
Please download and install MalwareBytes Anti-Malware (if you do not already have it installed) from here. Your browser may present a message stating that "To protect you security your browser has blocked the download" (Wording will vary) click this message and select to download the file. Once the file is downloaded select to open the file. This will start the installation process; during this process you are presented with the option to update the program and open it select the options to do so. Select the option to Perform Full Scan click on Scan twice (by default your OS drive is selected usually Drive C). Wait for the scan to complete and select the option to fix any problems found by the program; MBAM should automatically open a log file save this file to an easy to access location. And post it here using the Add Attachment link to the bottom left of the Attachments box.
It will be reviewed by all who see your post and assisstance will be provided.
05-08-2010 10:59 PM
I sent the information to a PC Specialist who identified the problem as Rootkit.Win32.TDSS.d and was told that this malware item is a fairly recent modification. The specialist was unsure about how recent and is doing further research.