Strange firewall logs in security history

Norton Security | Norton Internet Security
1

Hi,

 

I'm getting these strange history logs from Norton, they go like this:

 

Rule "Default block EPMAP"  blocked (78, 152, 198, 40), port dcom(135), inbound tcp connection. There are many of these happening every few minutes.

I'm also getting some saying "Microsoft windows 2000 SMB" blocked on port (445)inbound tcp connection.

 

Can anyone explain whats going on?

 

Thanks

2

Hi,

 

I'm getting these strange history logs from Norton, they go like this:

 

Rule "Default block EPMAP"  blocked (78, 152, 198, 40), port dcom(135), inbound tcp connection. There are many of these happening every few minutes.

I'm also getting some saying "Microsoft windows 2000 SMB" blocked on port (445)inbound tcp connection.

 

Can anyone explain whats going on?

 

Thanks

3

Sorry, I forget to mention that the process name of the “default block EPMAP” is C:\windows\system32\svchost.exe. The address of the incoming traffic changes every time. Am I safe if Norton keeps blocking these or could the pc already be infected?

4

If you are worried, I would suggest Running Norton LiveUpdate and doing a Full System Scan if you're worried, dis-connected from the Internet, but this is normal to see this.  Norton is Protecting you!

 

What Norton Product and Version are you using?

 

Message Edited by Floating_Red on 05-09-2009 10:25 PM
5

I’m using Norton 360 version 3.0.0.134. I ran live update did the full scan and nothing was found. If you say the logs are normal then I’ll forget about them, they just looked a bit odd .Thanks.

6
tm100 wrote:
I'm using Norton 360 version 3.0.0.134. I ran live update did the full scan and nothing was found. If you say the logs are normal then I'll forget about them, they just looked a bit odd .Thanks.

If you are happy you got your question answered, please select the Post that best answered you question(s) and Mark it as the Solution.

 

Message Edited by Floating_Red on 05-10-2009 12:59 PM