I dont know what happened. This afternoon my USB mouse and USB keyboard on my laptop stopped working. The laptop worked fine but kept saying the 2 USB devices could not be recognized by windows. Than my Internet Security and all Nortons software was shut off. I didnt shut it off. After a couple hours I was about ready to reinstall my operating system and before I did, my computer was able to recover to an earlier date which it wouldnt when it all happened. Came back online and all my Nortons was updating all a sudden. Just checked the history and theres alot of "Protecting your connection to a newly detected network on adapter Teredo Tunneling Pseudo Interface IP address 2001::4137:9e76:14f0:279d:3f57:fefd. Theres alot more and some saying IP dropped or something like that. Than theres others saying intrusions detected and blocked and protecting me netword from my wireless card. Theres just alot of that. Its running fine now but is an of that meaning someones trying to get into my computer or is this just normal stuff? Theres another one saying Unauthorized access blocked (Access process data) and (access thread data) They were blocked it says. Than something about letting COntroller app and services to access my network resources and Local security authority process to access network resources. Im so lost there are so many in my history. It may be all normal though. I have seen other with this problem with the Teredo part but not understanding any of it. Thanks for any help :)
Hi twstr988,
As scary as some of those things sound, they are pretty normal entries that you will find in any Norton Firewall log. If you are not being alerted to any threats, but only seeing these in Norton History, there is probably no cause for concern. These events are just routine actions that Norton monitors and the events are noted in the log for the record. The "unauthorized access blocked" entries are Norton Product Tamper Protection events. These are also normal, and occur frequently because other programs often request access to Norton files and processes. Access is blocked in order to prevent any interference with Norton. It is probably wise to run a scan or two to confirm that no malware is present, but based on the log entries you describe, things are probably fine and running normally.
Thank you both very much for the information. I feel alot better now. I did run a full scan and 1 virus showed up and 101 tracking cookies. NIS repaired them all. Im still not sure why my USB ports stopped working earlier but all is fine now. After I went to reinstall the system it went back to normal and restored back 3 days. But all seems fine for now. Its the names that pop up that sound so bad. thats what I was concerned about. Ill message again if theres anymore problems. Im going to run another full scan overnight with all settings set to advanced. Thanks again both of you. Have a great night.
Hello twstr988
What was the name of the virus that showed up? If you used system restore, please check out your security program. Many times a system restore can mess up the security program which results in it needing to be uninstalled and then reinstalled. Thanks.
It says "Trojan.Gen.2" Statistical submission than status pending than a few above says same virus detected and quarantined.
I dont know what happened. This afternoon my USB mouse and USB keyboard on my laptop stopped working. The laptop worked fine but kept saying the 2 USB devices could not be recognized by windows. Than my Internet Security and all Nortons software was shut off. I didnt shut it off. After a couple hours I was about ready to reinstall my operating system and before I did, my computer was able to recover to an earlier date which it wouldnt when it all happened. Came back online and all my Nortons was updating all a sudden. Just checked the history and theres alot of "Protecting your connection to a newly detected network on adapter Teredo Tunneling Pseudo Interface IP address 2001::4137:9e76:14f0:279d:3f57:fefd. Theres alot more and some saying IP dropped or something like that. Than theres others saying intrusions detected and blocked and protecting me netword from my wireless card. Theres just alot of that. Its running fine now but is an of that meaning someones trying to get into my computer or is this just normal stuff? Theres another one saying Unauthorized access blocked (Access process data) and (access thread data) They were blocked it says. Than something about letting COntroller app and services to access my network resources and Local security authority process to access network resources. Im so lost there are so many in my history. It may be all normal though. I have seen other with this problem with the Teredo part but not understanding any of it. Thanks for any help :)
Seems NIS is working fine now. After the restore it did a bunch of updates and fixed the problem it said it had. Seems to all be working though. Hopefully it stays :)
**bleep** made a typing mistake again
the malware removal sites has been suggested by "Delphinium"
2 thread creater
where was the file found?
do you use any cracked/pirated software keygen etc
could be just a false positive
I dont use anything like that :) Im trying to think what programs I use. I know I have downloaded software in the past from trusted sites but thats about it. Says it was found in my "app/sun/java/deployment/cache file" Also this morning theres a new one saying Rule "Default block SSDP" blocked (102.168.1.1,Port (2869)) Inbound TCP Connection.
Hello twstr988
Please make sure you are running the latest vervion of Java which is now up to 23. Open up the Java icon on your Control panel and click on temporary internet files. Click on delete the temporary files. Above that there should be a line that says do not keep any temporary files on my computer. Please make sure that is unchecked. That should help to make sure that your Java doesn't become infected. It may take a little longer for web pages to load up that use Java, but they wiill still work ok. The necessary files for that page will just be loaded up again.
If you have any older version of Java on your computer, they should be deleted also. Please remember to check the Java site for updates and also keep your Adobe Reader, flashplayer and shockwave player up to date also. These are all common places where malware can enter your computer. It helps to keep all these programs up to date.
Please come back and let us know if you managed to do this ok. Thanks.