Today within two minutes, I had two instances of BloodhoundExploit.196 pop up on my computer that Norton blocked.
In my history I have :
IPS Detection Statistical Submission
Auto-Protect has detected Bloodhound.Exploit.196
Statistical Submission: Bloodhound.Exploit.196 (7:05)
Statistical Submission: Bloodhound.Exploit.196 ) (7:07)
Auto-Protect has detected Bloodhound.Exploit.196
IPS log states that the application name is: \DEVICE\HARDDISKVOLUME1\PROGRAMFILES (X86)\MOZILLA FIREFOX\FIREFOX.EXE
And the offending url: [Removed]
First Auto-protect states the file name is: c:\users\myname\appdata\local\mozilla\firefox\profiles\3hfy81j0.defaultcache\a550106ed01
Second Auto-protect states the file name is: c:\myname\appdata\local\temp\a9r2ad9.tmp
At 7:05 I was at DeviantArt.com & at 7:07 I was here at Norton researching Bloodhound.Exploit.
I was also getting several blocked inbound TCP connections.
A Quick Scan from NIS 2009 & MalwareBytes showed up clean. I will do a Full Scan after posting.
History states that NIS has sent the data to Symantec--I should be alright, then?
I have no items in Quarantine. Should I go looking for the aforementioned files or did Norton already delete them?
Should I alert Firefox and/or delete browsing history, cache, cookies?
Sorry for so many posts and questions.
Running NIS 2009
AMD Turion Windows Vista 64 X2 Mobile Technology Tl-60
Rerunning scan with Malware that was updated today
[edit: Please do not post hazardous URL's.]