• Gesamte Community
    • Gesamte Community
    • Foren
    • Ideen
    • Blogs
Erweitert

Nicht was Sie suchen? Die Experten fragen!

Dieser Thread braucht eine Lösung.
Danksagungen0

Norton Frequently Blocking Web Attack - new occurence

For the past couple of weeks I've been getting frequent notifications from Norton that it's blocked a Web Attack, whether I'm clicking on a link, clicking in a search engine (before I've typed anything), right-clicking on something, or clicking on blank space on an internet page. The most recent incident was today when I clicked the Login button for the Norton Community page.

Antworten

Danksagungen0

Re: Norton Frequently Blocking Web Attack - new occurence

Hello MSJ. Could you offer us a screenshot of what you are seeing? Here is how to post images into your posts here on the forums.

Cheers

Retired military (Navy 1980-2002) AO1 (AW) Aviation Warfare Specialist "From DOS to Windows10 what a journey it has been" / MS Certified Professional / Windows 10 Professional x 64 version 1809 / build 17763.437 / NCSP 22.17.0.183 / Norton Core v.282 on Android 1.93
Danksagungen1 Stats

Re: Norton Frequently Blocking Web Attack - new occurence

Hello MSJ

Could you please run a full system scan with your Norton product? Could you also run a full scan with the free version of Malwarebytes please? It is possible that you have some malware which is trying to call home.

Download the free version, install and update then run a FULL scan.


You can find Malwarebytes here
https://www.malwarebytes.org/dl-confirm/
Malwarebyttes 3 has been made to run along side Norton and other 3rd party security programs.

 https://forums.malwarebytes.com/topic/191650-malwarebytes-30-frequently-asked-questions

All you have to do is disable the trial in Settings>Account. That will disable the live time settings also. There is also another Setting to stop the program from starting with Windows. So only 2 settings to change to make the program be a on - demand scanner as previously in version 2.

Have a Good Night and

Thanks

Success always occurs in private and failure in full view. Windows 7 Pro 64 bit NSBU 22.17.0.183 Core Firmware 282 I E 11 Chrome latest version.
Danksagungen0

Re: Norton Frequently Blocking Web Attack - new occurence

I included two images: The smaller is what pops up from the sys tray and the larger is the details.

Thanks a bunch!

Danksagungen1 Stats

Re: Norton Frequently Blocking Web Attack - new occurence

MSJ. Have you downloaded, installed and ran a full scan with Malwarebytes as floplot suggested? The web attack(s) ARE being blocked by Norton, that being said what is bothersome is that they are reoccurring. As you stated "presenting themselves without user intervention or interaction" is suggestive that you may have a PUP or PUA residing in your browser(s) cache. Try clearing ALL the caches for each browser on the system and reboot. Run Malwarebytes as suggested and let us know your results. Happy New Year.

Cheers

Retired military (Navy 1980-2002) AO1 (AW) Aviation Warfare Specialist "From DOS to Windows10 what a journey it has been" / MS Certified Professional / Windows 10 Professional x 64 version 1809 / build 17763.437 / NCSP 22.17.0.183 / Norton Core v.282 on Android 1.93
Danksagungen0

Re: Norton Frequently Blocking Web Attack - new occurence

Please tell us what Norton is telling you regarding this event.
For information regarding this event > from Norton pop-up > View Details > Copy to Clipboard > paste here 



https://safeweb.norton.com/report/show?url=i62e2b4mfy.com

https://virustotalcloud.appspot.com/nui/index.html#/ip-address/64.58.113.76

This URL is used by Adsterra Advertising Network for ad serving. If you have any questions or would like to monetize your inventory, run an ad campaign, click HERE

Danksagungen0

Re: Norton Frequently Blocking Web Attack - new occurence

Just finished the full scan (no issues identified) and I'm installing the Malwarebytes. I'll be out of pocket probably until tomorrow afternoon at which point I'll update.

Thank you very much,

MJ

Danksagungen1 Stats

Re: Norton Frequently Blocking Web Attack - new occurence

i62e2b4mfy.com/u432fq99 URL posted on VirusTotal <here> redirects to fake Norton page. 

Danksagungen0

Re: Norton Frequently Blocking Web Attack - new occurence

Hello MSJ, Thanks for sharing the screenshots.

It looks like Norton is detected an unwanted browser extension attempting to redirect your browser to unwanted sites. Examples from _bjm are tech support scam sites.

I would recommend reviewing installed browser extensions and removing anything that looks suspicious. It’s possible your issue is caused by a browser extension rather than malware/PUA. Let us know how it goes.

Danksagungen0

Re: Norton Frequently Blocking Web Attack - new occurence

I cleared browser cache, rebooted, ran the Malwarebytes (it identified 9 PUPs that I quarantined), and ran a live update that included 2 new updates. The issue happened again. There's no trend that I've noted; it doesn't always occur in the same place.

I'm open to any further suggestions.

Thank you for working with me on this.

Danksagungen0

Re: Norton Frequently Blocking Web Attack - new occurence

MSJ

Did you look at your browser extensions as Torrey Umland suggested?

It also could be an issue with malformed ads on sites you are visiting. Adding an ad blocker extension to your browser may help with this.

Things happen. Export/Backup your Norton Password Manager data.
Danksagungen0

Re: Norton Frequently Blocking Web Attack - new occurence

I removed the extensions one at a time including an ad blocker extension and the problem continued, until I removed the Norton Password Manager extension. This was just in the last few minutes and I've now been unable to reproduce the problem. I'll try adding it back to see what happens.

Danksagungen0

Re: Norton Frequently Blocking Web Attack - new occurence

I spoke too soon. Even with all extensions removed the issue reoccurred. I added an ad blocker but it didn't make a difference.

Danksagungen1 Stats

Re: Norton Frequently Blocking Web Attack - new occurence

Have you restarted your computer after removing the browser extensions? Not Shutting Down and starting up again as if you have the Windows 10 Fast Startup feature enabled, you do not get a complete shutdown required to fully clear out memory and clear system caches.  If you use Windows 10, there can be an issue with the Windows Fast Startup feature.. See more information here.

Things happen. Export/Backup your Norton Password Manager data.
Danksagungen0

Re: Norton Frequently Blocking Web Attack - new occurence

MSJ:

I spoke too soon. Even with all extensions removed the issue reoccurred. I added an ad blocker but it didn't make a difference.

Um, re "issue reoccurred" .....does Norton report same details as reported earlier:

https://community.norton.com/en/comment/8057341#comment-8057341  

Danksagungen1 Stats

Re: Norton Frequently Blocking Web Attack - new occurence

Hello

Have a look at this.

https://support.malwarebytes.com/docs/DOC-2398

Have a Good Night and

Thanks.

Success always occurs in private and failure in full view. Windows 7 Pro 64 bit NSBU 22.17.0.183 Core Firmware 282 I E 11 Chrome latest version.
Danksagungen0

Re: Norton Frequently Blocking Web Attack - new occurence

I just tried it. I turned off Fast Startup but it didn't make a difference. Got the same issue. Appreciate the suggestion though.

Take care

Danksagungen0

Re: Norton Frequently Blocking Web Attack - new occurence

Yes, the information reported is always the same. I think at this point, chat with support will be necessary since I keep coming up empty. I've even tried running Malwarebytes again and it doesn't pick up an threats.

Thank you

Danksagungen3 Stats

Re: Norton Frequently Blocking Web Attack - new occurence

Hi MSJ,

This type of traffic redirection behavior could also be caused by a compromised router.

This blog talks about one of the larger router attacks from 2018. Several brands, model #'s are listed in affected devices section. https://www.symantec.com/blogs/threat-intelligence/vpnfilter-iot-malware

Danksagungen1 Stats

Re: Norton Frequently Blocking Web Attack - new occurence

Thank you for the info. I ran it and it doesn't show an infection.

I found in the last week that this was happening more but expanded to other malware. It was clearly localized to Chrome because the issue hadn't occurred with other browsers. I turned off Chrome sync (signed out), uninstalled, ran Malwarebytes, and rebooted. I haven't seen the issue since. The only extension I haven't added back onto Chrome was the "Honey" extension so maybe it stemmed from there.

Thank you everyone for your invaluable guidance; I really appreciate it.

Kind regards,

MJ

This thread is closed from further comment. Please visit the forum to start a new thread.