IPS detection- statistacal submission

Thanks for all your help- why would this be happening from such a reputable site like wwe.com, hp.com, and mywot.com, pirillo.com and more? When will it go away and can visit thos sites?

 

So if there is a log in my history like that it means that norton blocked an intrusion attempt? so good that verifies that Im protected from feelyouinside.com

 

 Im very glad I purchased Norton!!!

UPDATE- ever since some sort of IPS patch update I have stopped recieving the logs

hmm Im getting the message again- FOR DIFFERENT SITES though so a patch update should be out soon after the logs are submitted, right???


GreatNate1312 wrote:
hmm Im getting the message again- FOR DIFFERENT SITES though so a patch update should be out soon after the logs are submitted, right???

The test signature will be updated based upon these submissions so as not to get these false positives before it is formally released.

Message Edited by reese_anschultz on 03-10-2009 09:30 AM

I have seen this in my logs, and from what I read from it, it just seems to refer different Javascript scripts back to Norton for evaluation.

 

And I wasn't alarmed  by it, I think it's OK, it just seems to gather and send information about that to improve detection, because those kinds of scripts are what usually delivers malware, on malicious pages of course..

Could someone please help me- this messge has started coming back fr wwe.com. It had stopped coming now whenever I visit wwe.com there it is in my logs! I thought the patch update had fixed it but now its come back

There’s nothing to help you with. This is an informational message to let you know that some data was sent back to Symantec. There is no action that you need to perform.

sorry im just so confused as to why it happens sometimes when I go to the site, and sometimes I go and nothing happens

well it was one of those ips detection- sometimes it happens when I go to a cetan site (like wwe.com) sometimes when I go to the site I get no log?

 

 

Its just that Iv had Norton for  6 months now on my machie and iv JUST started to get these ips logs, why

Nate, I have been in your shoes of worry before (still am, but to a lesser degree) Someone told me once to not look at logs as the information they give is hard to understand if you are not in this business. I don't follow this advice, but believe it or not I am not as panicky as I use to be.

If you run scans and all is well and there is no weirdness going on, all is ok


GreatNate1312 wrote:

Its just that Iv had Norton for  6 months now on my machie and iv JUST started to get these ips logs, why


As pointed out numerous times, you are getting these messages due to a test signature. There have been test signatures in the past that you didn't see but now, with this particular test signature, you seeing some false detections. You probably will see the behavior of this message change from signature release to signature release until the test signature has had the kinks worked out of it.

GreateNate1312, can you confirm that the message is, indeed, misspelled in the history? We’re not seeing it spelled that way. If so, where did you purchase the product from and what language is it? That might help us find a particular localized version where it is may be incorrect.

Im a little confused at what you just said but I have NIS 09 purchased from office max in the English language. I have stopped reieving the messages

So, is there still an old instance of the error message in the logs? If so, can you confirm that statistical is misspelled as “statistacal” or could this have been a typo on your part?

I still do have them in history and I can confirm that this is a typo on my part it was spelled statistical, sorry

Thanks for following up! Now I feel comfortable closing the bug out.