Repeated Intrusion attempts from specific IP

Norton Security | Norton Internet Security
1

I have received repeated intrusion attempts by a specific IP (blocked by Norton 360).  IPS Alert Name is "Web Attack:  Malicious Website Accessed 2".  Noton alert pops up every time internet explorer starts in iGoogle.  What can I do to either report the attacking computer or stop the attacks?  I have the Attacking Computer IP and Attacker URL.

2

I have received repeated intrusion attempts by a specific IP (blocked by Norton 360).  IPS Alert Name is "Web Attack:  Malicious Website Accessed 2".  Noton alert pops up every time internet explorer starts in iGoogle.  What can I do to either report the attacking computer or stop the attacks?  I have the Attacking Computer IP and Attacker URL.

3

- Check hosts file for hijacking

- Check your iGoogle gadgets

- Check IE's add-ons

- Check your DNS server IPs

4

Yes, only with iGoogle.  When logged out of iGoogle, no pop-up.

5

- Check hosts file for hijacking - How do I go about this?

- Check your iGoogle gadgets - My first suspicion, but nothing has changed for the last few months

- Check IE's add-ons - I routinely clear these

- Check your DNS server IPs - How do I go about this?

 

Thanks!!!

6
idnt wrote:

Yes, only with iGoogle.  When logged out of iGoogle, no pop-up.

Sorry if I was not clear.  My question was not about logging out, but changing the homepage so you don't automatically go to iGoogle as soon as you open IE.  So if you open IE and never visit iGoogle, you don't get a popup?  If you then browse to your iGoogle page later, does the popup then appear?

7

I changed the home page to www.msn.com - and did not get the pop up.  When I logged on to iGoogle, the pop up came on again - so it is related to starting iGoogle...

8
idnt wrote:

I changed the home page to www.msn.com - and did not get the pop up.  When I logged on to iGoogle, the pop up came on again - so it is related to starting iGoogle...

Have you added any Gadgets or personalizations to your iGoogle page? If so, it could be one of those that is not as nice as you thought. Try disabling all, then adding them one at a time to see if you can identify the culprit.