• All Community
    • All Community
    • Forums
    • Ideas
    • Blogs
Advanced

Not what you are looking for? Ask the experts!

Kudos0

Malicious Toolkit Website 4 False Positive?

I have an iBook with MacOS 10.6.7 and Anti-Virus 11.1.2. Everything is updated daily and a daily scan has never found anything.

I have now have this:

Web Attack: Malicious Toolkit Website 4

Result: 81.200.64.50

Details: Outgoing

What does this mean?

Also, why did I not get a notification if I am supposed to be notified if an attack is automatically blocked?

Thank you.

Replies

Kudos0

Re: Malicious Toolkit Website 4 False Positive?

I have an iBook with MacOS 10.6.7 and Anti-Virus 11.1.2. Everything is updated daily and a daily scan has never found anything.

I have now have this:

Web Attack: Malicious Toolkit Website 4

Result: 81.200.64.50

Details: Outgoing

What does this mean?

Also, why did I not get a notification if I am supposed to be notified if an attack is automatically blocked?

Thank you.

Kudos0

Re: Malicious Toolkit Website 4 False Positive?

http://network-tools.com/default.asp?prog=express&host=81.200.64.50

"IP address: 81.200.64.50
Host name: advancedsearch.virginmedia.com
81.200.64.50 is from United Kingdom(UK) in region Western Europe"

Kudos0

Re: Malicious Toolkit Website 4 False Positive?

Thank you. Interestingly, Virgin Media is my broadband provider.

The term 'outgoing' implies the attack originated from my computer and this is of real concern.

Accepted Solution
Kudos0

Re: Malicious Toolkit Website 4 False Positive?

In the thread below, one of our engineers does a good job of explaining why "outgoing" in this case does not mean your machine is the attacker:

http://community.norton.com/t5/Norton-for-Mac/Outgoing-Vulnerability-Proctection/td-p/428562

So the bottom line is you don't need to worry that nothing else was detected on your machine, the vulnerability  was successfully blocked.

Kudos0

Re: Malicious Toolkit Website 4 False Positive?

Thank you, Lee, for putting my mind at reast. I had tried a search before posting the question initially but had not come up with that thread.

I agree with your engineer, the term 'outgoing' is misleading as it certainly implies one's own computer is the attacker.

Thanks everyone for the help.

Kudos0

Re: Malicious Toolkit Website 4 False Positive?

Holmemoss: This is likely not even an "attack". Virgin uses that IP for advanced dns lookup if they cannot resolve a domain. Unfortunately, I didn't keep the discussion url but the bottom line is that you can have Virgin disable that feature although they may resist initially.

Kudos0

Re: Malicious Toolkit Website 4 False Positive?

Thank you, x190av

It has happened once so it is not worth the hassle of contacting Virgin. I would be better off talking to myself.

I understand 'ougoing' now whereas I didn't to begin with.

This thread is closed from further comment. Please visit the forum to start a new thread.