|
Warrior




Registered: 05/13/11
Posts: 1,010
Loc: DedSec fsociety
|
Internet Security
#14457263 - 05/15/11 04:14 PM (12 years, 8 months ago) |
|
|
I have Norton Security Suite on my computer and I'm constantly getting popups that say, "An intrusion attempt has been blocked".
For example, the one I just got in says:
Code:
An intrusion attempt by cybersearch-0.com was blocked.
Risk Name- system infected: Tidserv Activity 2 Attacking Computer- Cybersearch-0.com (188.95.52.161,143) Destination Address- my computer Source Address- 188.95.52.161 (188.95.52.161 Traffic Description- TCP, https
Network traffic from cybersearch-0.com matches the signature of a known attack. The attack was resulted from DEVISE/HARDDISKVOLUME1/PROGRAM FILES/MOZILLA FIREFOX/FIREFOX.EXE
Why is my computer constantly under attack?
What should I do to fix this issue?
Any help would be appreciated.
--------------------
Play Clash of Clans? Join the Shroomery clan!
|
Dety
Old No.7

Registered: 09/14/04
Posts: 1,685
|
Re: Internet Security [Re: Warrior]
#14457581 - 05/15/11 05:15 PM (12 years, 8 months ago) |
|
|
Found some info on Tidserv Activity 2:
http://www.symantec.com/business/security_response/attacksignatures/detail.jsp?asid=23615
It has a removal tool that can be found here:
http://www.symantec.com/security_response/writeup.jsp?docid=2010-090608-3309-99
Im not a PC guy just giving my 2 cents you should wait until someone that knows what they are talking about to reply.
|
Doc_T
Random Dude




Registered: 03/06/09
Posts: 42,395
Loc: Colorado
|
Re: Internet Security [Re: Dety]
#14457630 - 05/15/11 05:25 PM (12 years, 8 months ago) |
|
|
I turned off Norton.
-------------------- You make it all possible. Doesn't it feel good?
|
Warrior




Registered: 05/13/11
Posts: 1,010
Loc: DedSec fsociety
|
Re: Internet Security [Re: Dety]
#14457889 - 05/15/11 06:08 PM (12 years, 8 months ago) |
|
|
Interesting
I had already found the first link but I didn't see the removal tool.
I just ran it and the Trojan wasn't found.
--------------------
Play Clash of Clans? Join the Shroomery clan!
|
Dimi
The Mindful One


Registered: 05/09/11
Posts: 190
Last seen: 7 years, 5 days
|
Re: Internet Security [Re: Doc_T]
#14458013 - 05/15/11 06:31 PM (12 years, 8 months ago) |
|
|
That IP address is on blacklists at two sites: http://goo.gl/IC9KL It seems the site is from the Netherlands, for your information.
Several places on the net talked about that IP and a virus called TDSS. Removal tool is here.http://support.kaspersky.com/viruses/solutions?qid=208280684
Did the tool detect it?
EDIT: I was a lot late here sorry. Took forever to post :S
Edited by Dimi (05/15/11 06:32 PM)
|
thelivingfreekshow
Fuck You



Registered: 02/07/11
Posts: 2,043
Loc: Prifddinas, Gielinor
Last seen: 5 years, 1 month
|
Re: Internet Security [Re: Warrior]
#14458020 - 05/15/11 06:32 PM (12 years, 8 months ago) |
|
|
Quote:
Warrior said: I have Norton Security Suite on my computer and I'm constantly getting popups that say, "An intrusion attempt has been blocked".
For example, the one I just got in says:
Code:
An intrusion attempt by cybersearch-0.com was blocked.
Risk Name- system infected: Tidserv Activity 2 Attacking Computer- Cybersearch-0.com (188.95.52.161,143) Destination Address- my computer Source Address- 188.95.52.161 (188.95.52.161 Traffic Description- TCP, https
Network traffic from cybersearch-0.com matches the signature of a known attack. The attack was resulted from DEVISE/HARDDISKVOLUME1/PROGRAM FILES/MOZILLA FIREFOX/FIREFOX.EXE
Why is my computer constantly under attack?
What should I do to fix this issue?
Any help would be appreciated.
stop going to porn sites
|
Dety
Old No.7

Registered: 09/14/04
Posts: 1,685
|
|
Would a IP blocker help? 
You can get one for free from here.
You could try other programs to get rid of this such as:
Malwarebytes' Anti-Malware SUPERAntiSpyware Free Edition Spybot Search & Destroy
Could also try some online scanners:
http://www.bitdefender.com/scanner/online/free.html http://housecall.trendmicro.com
|
Warrior




Registered: 05/13/11
Posts: 1,010
Loc: DedSec fsociety
|
|
RedTube fucked me huh?
--------------------
Play Clash of Clans? Join the Shroomery clan!
|
Dimi
The Mindful One


Registered: 05/09/11
Posts: 190
Last seen: 7 years, 5 days
|
Re: Internet Security [Re: Warrior]
#14459003 - 05/15/11 08:50 PM (12 years, 8 months ago) |
|
|
just from what you said:
"attack was resulted from DEVISE/HARDDISKVOLUME1/PROGRAM FILES/MOZILLA FIREFOX/FIREFOX.EXE"
I'd boot to safe mode, and uninstall firefox, then delete any registry entries if you're comfortable with that.
|
|