computer getting attacked here again this morning...........

Collapse
X
 
  • Time
  • Show
Clear All
new posts
  • capitalist pig
    SBR MVP
    • 01-25-07
    • 4998

    #1
    computer getting attacked here again this morning...........
    I have no idea what all this means but here is the screen shot

    Category: Intrusion Prevention
    Date & Time,Risk,Activity,Status,Recommended Action,IPS Alert Name,Default Action,Action Taken,Attacking Computer,Attacker URL,Destination Address,Source Address,Traffic Description
    12/16/2012 11:13:17 AM,High,An intrusion attempt by 5.199.175.46 was blocked.,Blocked,No Action Required,Web Attack: Malicious Toolkit Website 9,No Action Required,No Action Required,"5.199.175.46, 80",oplamon.info/local_url/pubsphoto.php?spotlight=900&smiles=469&p romos=55&arcade=456&firefox=994,"VALUED-C0DCCC42 (xxx.xxx.x.x,xxxx0"TCP, www-http"
    Network traffic from <b>oplamon.info/local_url/pubsphoto.php?spotlight=900&smiles=469&p romos=55&arcade=456&firefox=994</b> matches the signature of a known attack. The attack was resulted from \DEVICE\HARDDISKVOLUME2\PROGRAM FILES\INTERNET EXPLORER\IEXPLORE.EXE. To stop being notified for this type of traffic, in the <b>Actions</b> panel, click <b>Stop Notifying Me</b>.

    later
  • mynameismud
    SBR Hall of Famer
    • 02-13-12
    • 5461

    #2
    spyware guy.
    Comment
    • Sam Odom
      SBR Aristocracy
      • 10-30-05
      • 58063

      #3
      Comment
      • capitalist pig
        SBR MVP
        • 01-25-07
        • 4998

        #4
        Originally posted by mynameismud
        spyware guy.
        From the SBR website?

        later
        Comment
        • Saunders FTW
          SBR Wise Guy
          • 03-10-08
          • 986

          #5
          Ok thank you, we are looking into this.
          Comment
          • SBR Lou
            BARRELED IN @ SBR!
            • 08-02-07
            • 37863

            #6
            What site were you browsing when you saw this message?

            There are a couple different kinds of messages. Sometimes, like with what we saw with Google, it is as simple as linking a piece of content from a domain that's flagged as suspicious, even if it's totally clean - when that happens, the alert is normally quickly removed, as it was the other day... but it's just that, merely an alert.

            I'm not sure what you've got there, but there is a host of buggy browser hijacking malware out there. These random PC software companies make millions designing programs to clean. All we can confirm is absolutely no malware or "viruses" exist on the SBR community... there is no correlation between the alert from other day to what I see there.
            Comment
            • capitalist pig
              SBR MVP
              • 01-25-07
              • 4998

              #7
              Lou, all I did was come to sbr players talk and the norton box popped up with the info. This is the same norton message from the same attacking computer I got here several times last week.

              later
              Comment
              Search
              Collapse
              SBR Contests
              Collapse
              Top-Rated US Sportsbooks
              Collapse
              Working...