|
Posted by =?Utf-8?B?Sm9obiBNY0s=?= on April 1, 2007, 7:02 pm
If you were Registered and logged in, you could reply and use other advanced thread options
I have gotten something (Virus?) on my computer that is making Symantec
Norton Internet Security 2007 give me this "Attempted Intrusion "HTTP
Macromedia Long Filename BO" from your machine against www.msnusers.com was
detected and blocked. Intruder: JMACK*****(****)." several times an
hour(about every five minutes). JMACK***** is my desktop that I use.
I have ran Full Scans in normal and safe mode and it picks up nothing.
I also use Webroot Spy Sweeper (which is how I think I might have let this
program in because I OK’d a IE Browser Helper to be installed). I went back
to Webroot Spy Sweeper and it showed one helper that I was not sure of so I
unchecked it (no change to my problem so whatever is there is still there).
I have installed AVG 7.5 (7.5.446 and 268.18.24/741) and AVG Anti-Root Kit
(1.1.0.42) (Free versions) and ran scans (with Norton Internet Security 2007
off) and did not pick up anything.
How do I find this and how do I get rid of it?
Can I use Windows restore and go back to a restore point prior to the
problem and will that get rid of it?
Thank you
John
--
John McK
|
|
Posted by David H. Lipman on April 1, 2007, 7:36 pm
If you were Registered and logged in, you could reply and use other advanced thread options
| I have gotten something (Virus?) on my computer that is making Symantec
| Norton Internet Security 2007 give me this "Attempted Intrusion "HTTP
| Macromedia Long Filename BO" from your machine against www.msnusers.com was
| detected and blocked. Intruder: JMACK*****(****)." several times an
| hour(about every five minutes). JMACK***** is my desktop that I use.
| I have ran Full Scans in normal and safe mode and it picks up nothing.
| I also use Webroot Spy Sweeper (which is how I think I might have let this
| program in because I OK’d a IE Browser Helper to be installed). I went back
| to Webroot Spy Sweeper and it showed one helper that I was not sure of so I
| unchecked it (no change to my problem so whatever is there is still there).
| I have installed AVG 7.5 (7.5.446 and 268.18.24/741) and AVG Anti-Root Kit
| (1.1.0.42) (Free versions) and ran scans (with Norton Internet Security 2007
| off) and did not pick up anything.
| How do I find this and how do I get rid of it?
| Can I use Windows restore and go back to a restore point prior to the
| problem and will that get rid of it?
| Thank you
| John
|
A restoration of a previous Restore Point is the WRONG approach for an Internet
exploit that
has not been accomplished.
http://www.symantec.com/avcenter/attack_sigs/s20582.html
--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm
|
|
Posted by Lindy25 on April 3, 2007, 3:51 pm
If you were Registered and logged in, you could reply and use other advanced thread options
I have been having the exact same problem for a couple days, did you
figure out how to fix it John? I have already been to the link provided
in the reply and I do not understand what the link is for, can anyone
help please?
Thankyou
--
Lindy25
------------------------------------------------------------------------
Lindy25's Profile: http://forums.techarena.in/member.php?userid=24212
View this thread: http://forums.techarena.in/showthread.php?t=717686
http://forums.techarena.in
|
|
Posted by David H. Lipman on April 3, 2007, 5:04 pm
If you were Registered and logged in, you could reply and use other advanced thread options
| I have been having the exact same problem for a couple days, did you
| figure out how to fix it John? I have already been to the link provided
| in the reply and I do not understand what the link is for, can anyone
| help please?
| Thankyou--
Are you using Macromedia ColdFusion ?
If no, the exploit can not be accomplished.
If yes, you should update the software.
In any case, it looks like a FireWall report and the Norton/Symantec FireWall
did its job in
blocking this possible exploit.
--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm
|
|
Posted by Lindy25 on April 3, 2007, 9:44 pm
If you were Registered and logged in, you could reply and use other advanced thread options
Thank you so much for replying =) I don't think i use Coldfusion (i'm
not sure what it is.. is it possible it is something on my computer?) I
usually wouldn't look twice at an alert that says something was blocked
if nothing was happening, however what concerns me is that the alert is
coming up every couple minutes and after it comes up the sound on my
computer stops working and videos do not work. When I restart the
computer the sound and video works again until the alerts start again.
Norton says this:
Intrusion: HTTP Macromedia Long Filename BO
Intruder: localhost (2442)
an intruder with the IP address 127.0.0.1 sent information
characteristic of the HTTP Macromedia Long Filename BO attack
doesn't 127.0.0.1 mean my own computer? could it be reading something
my computer is doing as an attack? The alerts don't seem to correspond
with anything I am doing, they occur every couple minutes.
I did a system restore before I saw this post, which obviously did not
do anything lol. I also did a live update and virus scan.
thank you so much for your time! I'm sorry If I seem real dense, I hope
I am not wasting your time, I have been trying to fix this for a couple
days with no luck, then again I don't know too much about this
subject.
Thank you Dave!
Lindy
--
Lindy25
------------------------------------------------------------------------
Lindy25's Profile: http://forums.techarena.in/member.php?userid=24212
View this thread: http://forums.techarena.in/showthread.php?t=717686
http://forums.techarena.in
|
| Similar Threads | Posted | | Intrusion on Virtual Machine | January 10, 2007, 6:27 am |
| [OT] Reporting Fraud or Intrusion to MS | June 5, 2007, 10:48 pm |
| Possible network intrusion - Cant trace IP! | August 14, 2008, 12:39 pm |
| Re: Is this a software intrusion or a normal circumstance | January 3, 2006, 11:41 am |
| http://spaces.msn.com/dvdbarato/ | March 6, 2006, 6:04 pm |
| http://www.tech-forum.perfectschools.com | May 21, 2006, 11:17 am |
| http://www.nhanhlen.com/ -- is it infected by virus. | January 15, 2008, 3:48 am |
| hey, is this you? http://www.imstuff.us/profile.php?msn=username@hotmail.com | February 18, 2006, 9:51 am |
| http://www.pandasoftware.com/activescan/activescan/activescanfree.asp. Is this a con. | November 14, 2006, 7:18 am |
| http://www.spyware-solutions.info a website about spyware solutions | November 11, 2006, 8:07 pm |
|
XML site map