Urgent Attention: Intrusion Prevention Blocked

Duis mollis, est non commodo luctus, nisi erat porttitor ligula, eget lacinia odio sem nec elit. Sed posuere consectetur est at lobortis. Vestibulum id ligula porta felis euismod semper. Donec ullamcorper nulla non metus auctor fringilla. Aenean lacinia bibendum nulla sed consectetur. Cras justo odio, dapibus ac facilisis in, egestas eget quam. Cras mattis consectetur purus sit amet fermentum. Morbi leo risus, porta ac consectetur ac, vestibulum at eros. Sed posuere consectetur est at lobortis. Etiam porta sem malesuada magna mollis euismod. Cum sociis natoque penatibus et magnis dis parturient montes, nascetur ridiculus mus. Duis mollis, est non commodo luctus, nisi erat porttitor ligula, eget lacinia odio sem nec elit. Cras justo odio, dapibus ac facilisis in, egestas eget quam. Aenean eu leo quam. Pellentesque ornare sem lacinia quam venenatis vestibulum. Curabitur blandit tempus porttitor. Sed posuere consectetur est at lobortis.

Hi Floating_Red,

 

Was it an SWF Remote Code execution attempt similar to this post?

  Greetings, Phil_D, 

Yes.

 

I got this Intrusion Prevention notification when I was using N.I.S. 2008, but am sure the Attacking Computer was not mine.

 

I would be happy to provide details if required.

Message Edited by Floating_Red on 09-25-2008 06:38 PM

The details of the Blocked Intrusion probably show an "Attacking url" which tried to execute the remote code.

 

Your computer may be shown as the "Attacking computer" because the "Attacking url" tried to invoke your Flash Player or Shockwave Player. 

 

Symantec employee Tim Lopez is looking into this.

 

In the mean time, you should confirm that your Flash Player is the most up to date version which currently is: 9.0.124.0

1 Like

Thanks, Phil

 

I didn't know this.  And this explains what happened to my wife last night when she was let to a site by a google search.

Flash Player Version: 9.0.124.0.

Hey mijcar,

 

At least it did not occur when you were viewing "Waitress"!

 

(For other Forum members: inside humor referring to this previous post)

Message Edited by Phil_D on 09-25-2008 02:47 PM

Hi Floating_Red,

 

With the latest version of Flash Player installed and having Norton, you are protected.

 

We'll just have to wait for Tim to get back with the technical details to see if these are instances of drive-by attacks.

 

Best wishes.

Hello.

 

So there is nothing on my system?  Is this confirmed?

I don't believe there is anything on your computer. 

 

I have had two similar occurrences - one instance on each of two separate computers and each was after visiting a different legitimate website.

 

Remember, NIS blocked the intrusion attempt.

 

 

 

 


Phil_D wrote:

I don't believe there is anything on your computer. 

 

I have had two similar occurrences - one instance on each of two separate computers and each was after visiting a different legitimate website.

 

Remember, NIS blocked the intrusion attempt.

 

 

 

 


 

I know it was Blocked.

 

But there could be some sort of Bot or Internet Threat on my computer.

I really believe it was a drive-by attack that was blocked and nothing was placed on your computer.

 

You could run a full system scan in Safe Mode just to be sure and you could also download the trial version of Norton Anti-Bot and run a scan with that.

 

 

 

Message Edited by Phil_D on 09-25-2008 03:55 PM

Red, I think I had something similar to that in the past. the Norton folks indicated it was a blocked drive by.


NY1986 wrote:
Red, I think I had something similar to that in the past. the Norton folks indicated it was a blocked drive by.

 

Excellent.

 

______________________________________________________________________________________________________________ 

 

 

Would like it if a Norton Staffer or Tim to confirm this please.


Phil_D wrote:

I really believe it was a drive-by attack that was blocked and nothing was placed on your computer.

 

You could run a full system scan in Safe Mode just to be sure and you could also download the trial version of Norton Anti-Bot and run a scan with that.

 

 

 

Message Edited by Phil_D on 09-25-2008 03:55 PM

 

Already installed the Norton AntiBot Trailware a few months ago and there is no Scan Mode with that.

 

And N.I.S. 2009 has Anti-Bot Protection; does the F.S.S. also Detect Bots? 

Message Edited by Floating_Red on 09-25-2008 09:44 PM

Hi Floating_Red,

 

I really think you're okay, however if you would feel more comfortable, download, install and update the FREE version of Malwarebytes.

 

Run a scan with that and see if anything comes up.

 

It is an on-demand scanner, so it won't interfere with Norton.


Phil_D wrote:

Hi Floating_Red,

 

I really think you're okay, however if you would feel more comfortable, download, install and update the FREE version of Malwarebytes.

 

Run a scan with that and see if anything comes up.

 

It is an on-demand scanner, so it won't interfere with Norton.


 

I already have that as suggested by you for another Issue and ran a Quick Scan [Malwarebytes] and nothing came up.

 

I do Norton manual Quick Scans whenever Norton 2009 V.D.s have been installed, and nothing has turned up.