Hello, I am a long time Norton user and today I encountered an issue that I was hoping the community could help me with. I am running Norton Internet Security version 21.5.0.19 with Windows 7 Home Premium SP1 64bit.
I started getting a Norton pop-up informing me that an Intrusion attempt by localhost was blocked, it is listed as a medium security risk and Norton advises me to take no action.
The advanced details window gives the following information:
IPS Alert Name: IDS Detection - Port Scan Detected
Default Action: No Action Required
Action Taken: No Action Required
Attacking Computer: localhost (127.0.0.1, 48008)
Destination Address: localhost (127.0.0.1, 48009)
Source Address: 127.0.0.1 (127.0.0.1)
Traffic Destination: UDP, Port 4800
Network traffic from localhost matches the signature of a known attack. The attack was resulted from System.
This information is the same exact thing every time I get this notification which happens every time I restart the computer which has been 3 times now since the first pop-up appeared and I have not been connected to the internet since. I only get this about 15 seconds after I log in. I was connected to the internet at work when this happened and the only things I did on the computer today was install the KB2993651 update and open up CCleaner where I was informed of an update so I clicked that link and Firefox opened to the Piriform website - that is when I got the first pop-up alert. A Malwarebytes threat scan detected no issues and a full system Norton scan also found nothing.
Does it seem like I am infected? I am worried about this and am wondering where I go from here. Any help would be greatly appreciated, thanks!