Suspicious firewall activity and No User logged in

Alright, so... over the course of about 20 minutes I have around 900 listings of "Rule 'Default Block UPnP Discovery' sealthed (192.168.1.1, Port ssdp(1900)).  Inbound UDP packet" detected.  

 

Then suddenly it says, "No user is logged in."  and the attempted UDP packets stop stop.

 

It then says, "Rule 'default Block SSDP' blocked (192.168.1.1, Port(2869).  Inbound TCP connection."

 

I log off.  The next day when I log into my machine I discover that 97 firewall rules have been changed.

 

 

WTF?  Is someone who is calling themselves "no user" logging into my machine after brute forcing their way through my firewall and then changing my firewall rules?  It sure as heck seems like it.

 

What should I do?  Thanks.

Hi AdamMartin,

 

The forum is for the product of Norton Family.  Are you saying the firewall activity has something to do with the product of Norton Family?

 

 

Thanks,

Katie

Alright, so... over the course of about 20 minutes I have around 900 listings of "Rule 'Default Block UPnP Discovery' sealthed (192.168.1.1, Port ssdp(1900)).  Inbound UDP packet" detected.  

 

Then suddenly it says, "No user is logged in."  and the attempted UDP packets stop stop.

 

It then says, "Rule 'default Block SSDP' blocked (192.168.1.1, Port(2869).  Inbound TCP connection."

 

I log off.  The next day when I log into my machine I discover that 97 firewall rules have been changed.

 

 

WTF?  Is someone who is calling themselves "no user" logging into my machine after brute forcing their way through my firewall and then changing my firewall rules?  It sure as heck seems like it.

 

What should I do?  Thanks.