Category: Firewall - Activities
Date & Time,Risk,Activity,Status,Recommended Action,Category
10/17/2011 8:36 AM,Info,"Rule \"Default Block UPnP Discovery\" stealthed (192.168.1.1, Port ssdp(1900) ). Inbound UDP packet. ",Detected,No Action Required,Firewall - Activities.
Gentlemen- the message above is occuring in my security history every 1 minute whereas 192.168.1.1 is my router. Has my router been hijacked or is this security history logging something else every 1 minute like a incessant cpu elsewhere trying to insert a file into my system unknowingly? I forsee this eventually grabbing a big chunk of my cpu memory over time from a securty log being created every 1 minute. Is this the result of an infection. I did a complete security scan after finding out my Yahoo mail account had been hijacked and it seems this message has been created every minute my cpu has been on for the last month or so which I assume is around when my Yahoo account was hijacked I have performed the Norton Power Srubber today as well. Please advise on what this may be! Thanks, P. Carlson.
P.S. Just found this log as well:
Category: Norton Product Tamper Protection
Date & Time,Risk,Activity,Status,Recommended Action,Date,Actor,Actor PID,Target,Target PID,Action,Reaction
10/17/2011 8:51 AM,Medium,Unauthorized access blocked (Set Regietry Security Key),Blocked,No Action Required,"Monday, October 17, 2011 8:51 AM",C:\WINDOWS\SYSTEM32\SVCHOST.EXE,828,HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BHDRVX86\0000\Control\,0,Set Regietry Security Key,Unauthorized access blocked
Anyways, would love some help in figuring out what is causing the security log every 1 minute so that my cpu memory does not get filled by Security logs over time. ZFiguring out how to find who or what is trying to access my cpu would be a plus as well. Thanks.