Attack blocked FROM MY OWN computer

Norton Security | Norton Internet Security
1

Please advise as to IF I HAVE A REAL PROBLEM.

 

I have been seeing alert messaging saying--"An Intrusion Attempt from -->MY COMPUTER NAME<--  has been Blocked"

Risk Name = HTTP Malicious Tool Variant Activity

Attacking Computer = "My Computer Name" and My Internal IP Address 192.168.1.xxx,.2298

Destination Address = [REMOVED]

Traffic Description = TCP, 2298

Risk = HIGH

 

My question is "How can my computer intrude upon its-self"? 

Is this a problem or a bug or what? 

I have completely updated Windows XP, and NAV2008 and have run sevaral complete scans, no problems reported

 

How should I proceed?

 

Thanks,

John

Message Edited by JohnR123456 on 11-24-2008 12:30 AM
 

[edit: removed link per the Participation Guidelines and Terms of Service. Please do not link to malicious websites.]

 
Message Edited by Tim_Lopez on 11-24-2008 02:39 PM
2

The posted URL is a very dangerous malwaresite. You probably ticked it somewhere and you might be infected with a rootkit. Did you do a full scan?

3
JohnR123456 wrote:

Please advise as to IF I HAVE A REAL PROBLEM.

 

I have been seeing alert messaging saying--"An Intrusion Attempt from -->MY COMPUTER NAME<--  has been Blocked"

Risk Name = HTTP Malicious Tool Variant Activity

Attacking Computer = "My Computer Name" and My Internal IP Address 192.168.1.xxx,.2298

Destination Address = [REMOVED]

Traffic Description = TCP, 2298

Risk = HIGH

 

My question is "How can my computer intrude upon its-self"? 

Is this a problem or a bug or what? 

I have completely updated Windows XP, and NAV2008 and have run sevaral complete scans, no problems reported

 

How should I proceed?

 

Thanks,

John

Message Edited by JohnR123456 on 11-24-2008 12:30 AM

 

John, there has been a recently discovered issue in which the from and to reports on intrusion have been reversed.  I believe this is what is happening here.  So the attack was not by your computer but directed at your computer; and it was blocked; so you should be safe.  Norton is working on this "grammatical problem" and should have it fixed not too long in the future.

 

If you are still concerned, it never hurts to run a scan.

Message Edited by Tim_Lopez on 11-24-2008 02:40 PM
4

lol just by entering the URL at safeweb.norton.com

you can see lotta trojan 

5

No. Well maybe.

 

If your internet is routed through your router and then to your computer, it will seem as if your computer was attacking itself, which it technically was. 

 

And you may want to upgrade to NAV09 for free for better protection. 

6

Thank You for all of the responses.

 

I do have a router, and I have run the NAV2008 scans, and I have Norton AntiBot installed also.  How many other programs do I need to have or run scans from to figure out if I have an internal or an external problem.  I have run the "HiJack This" program and MalwareBytes anti malware program also. again no problems reported

 

How should I proceed?

How do I get free NAV2009? Do I need it, I just installed NAV2008?

 

Thanks again,

John

Message Edited by JohnR123456 on 11-25-2008 03:24 AM
Message Edited by JohnR123456 on 11-25-2008 03:26 AM
7

I was reading this :

Thread http://community.norton.com/norton/board/message?board.id=nis_feedback&thread.id=19813  ??? 

 

I tried to download SUPERANTISPYWARE per this thread and got a new attack message:

 

A browser exploit at www.superantispyware.com was blocked

Risk Name = MSIE DHTML CreateControlRange Code Exec

Risk Level = HIGH

ATTACK URL = WWW.SUPERANTISPYWARE.COM

 

Is superantispyware safe to use as recommended in the previous thread? 

The previous thread still has no resolution.  Is there a solution close at hand?

Is there another test to determint the true problem?

 

Thanks,

JohnR123456

 

8

Please advise as to IF I HAVE A REAL PROBLEM.

 

I have been seeing alert messaging saying--"An Intrusion Attempt from -->MY COMPUTER NAME<--  has been Blocked"

Risk Name = HTTP Malicious Tool Variant Activity

Attacking Computer = "My Computer Name" and My Internal IP Address 192.168.1.xxx,.2298

Destination Address = [REMOVED]

Traffic Description = TCP, 2298

Risk = HIGH

 

My question is "How can my computer intrude upon its-self"? 

Is this a problem or a bug or what? 

I have completely updated Windows XP, and NAV2008 and have run sevaral complete scans, no problems reported

 

How should I proceed?

 

Thanks,

John

Message Edited by JohnR123456 on 11-24-2008 12:30 AM
 

[edit: removed link per the Participation Guidelines and Terms of Service. Please do not link to malicious websites.]

 
Message Edited by Tim_Lopez on 11-24-2008 02:39 PM