Port Block Allow NetBIOS changed

Port Block Allow NetBIOS changed

Secure Home | Search | About
 Microsoft Antivirus Discussions    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
Port Block Allow NetBIOS changed Myriam Herman 11-09-2005
Posted by Myriam Herman on November 9, 2005, 8:01 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
Help.

I'm not sure what this means and Symantec is not much help on the phone. I
see this message in my Symantec Activity Logs under the "Norton Internet
Worm Protection" tab. The messages in read:

Internet Worm Protection setting "Port Block Allow NetBIOS" changed - Old
Value 1. New Value 0

The messages happen in the middle of the night and I'm not sure what is
changing these settings.

I keep all my virus protection and spy software up to date etc.

Have any of you seen a message like this and can possibly tell me if this is
a threat that I need to worry about?

Any help appreciated..

Myriam



Posted by David H. Lipman on November 9, 2005, 8:08 pm
If you were  Registered and logged in, you could reply and use other advanced thread options

| Help.
|
| I'm not sure what this means and Symantec is not much help on the phone. I
| see this message in my Symantec Activity Logs under the "Norton Internet
| Worm Protection" tab. The messages in read:
|
| Internet Worm Protection setting "Port Block Allow NetBIOS" changed - Old
| Value 1. New Value 0
|
| The messages happen in the middle of the night and I'm not sure what is
| changing these settings.
|
| I keep all my virus protection and spy software up to date etc.
|
| Have any of you seen a message like this and can possibly tell me if this is
| a threat that I need to worry about?
|
| Any help appreciated..
|
| Myriam
|

I am NO Symantec expert but I would suspect that this is a notification of
either a Internet
worm trying to worm ist way throuugh the NetBIOS protocol or it is an
informational message
indicating a change in protectional settings.

I would suggest posing this in a Symantev AV News Group such as...
symantec.support.winnt.nortonantivirus.general


--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm



Posted by Myriam Herman on November 9, 2005, 8:38 pm
If you were  Registered and logged in, you could reply and use other advanced thread options


Dave,
Thank you for your help, I will post to the symantec newsgroup. Dumb
question, what is the name of the news server?

/M

>
> | Help.
> |
> | I'm not sure what this means and Symantec is not much help on the phone.
> I
> | see this message in my Symantec Activity Logs under the "Norton Internet
> | Worm Protection" tab. The messages in read:
> |
> | Internet Worm Protection setting "Port Block Allow NetBIOS" changed -
> Old
> | Value 1. New Value 0
> |
> | The messages happen in the middle of the night and I'm not sure what is
> | changing these settings.
> |
> | I keep all my virus protection and spy software up to date etc.
> |
> | Have any of you seen a message like this and can possibly tell me if
> this is
> | a threat that I need to worry about?
> |
> | Any help appreciated..
> |
> | Myriam
> |
>
> I am NO Symantec expert but I would suspect that this is a notification of
> either a Internet
> worm trying to worm ist way throuugh the NetBIOS protocol or it is an
> informational message
> indicating a change in protectional settings.
>
> I would suggest posing this in a Symantev AV News Group such as...
> symantec.support.winnt.nortonantivirus.general
>
>
> --
> Dave
> http://www.claymania.com/removal-trojan-adware.html
> http://www.ik-cs.com/got-a-virus.htm
>
>



Posted by David H. Lipman on November 9, 2005, 8:52 pm
If you were  Registered and logged in, you could reply and use other advanced thread options

|
| Dave,
| Thank you for your help, I will post to the symantec newsgroup. Dumb
| question, what is the name of the news server?
|
| /M

That's NOT a dumb question at all. It will depend upon how you access News
Groups.

I see you use Optimum Online
NNTP-Posting-Host: ool-44c3343a.dyn.optonline.net 68.195.52.58

The following URL will take OE6 (which is most likely your default News Client)
to the
suggested News Group.

news://news.optonline.net/symantec.support.winnt.nortonantivirus.general

You will probably have to authenticate to access the OptOnline News Server so
you will most
likely have to supply your Account and Password to the account configuration in
OE6.

--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm



Similar ThreadsPosted
BLock Programs From Startup August 12, 2005, 3:51 pm
Changed Wallpaper December 21, 2005, 4:22 am
E-mail sender changed (probalby Virus) September 27, 2007, 8:23 am
Problem with freezing computer and IE6 security settings being changed September 16, 2005, 12:44 pm
McAfee Site Advisor has "changed its privacy policy"? August 31, 2007, 4:51 am
Port log April 22, 2008, 2:54 am
Scanning a port September 24, 2005, 2:27 am
What port Need Sdbot for Execute September 19, 2005, 2:21 pm
ixplore listening on a localhost UDP Port? November 22, 2005, 4:06 pm
Re: Unknown svchost.exe DNS port 53 network activity December 20, 2006, 4:26 pm

The site map in XML format XML site map

Contact Us | Privacy Policy