INTRUSION ALERT

meowzer

meowzer

Moderator
OK...I have just recieved about 5 alerts thru my norton of an intrusion attempt
they claim to be coming from forums.saltwaterfish.com/p well there is more...I can not copy it
also it lists this
forums.saltwaterfish.com (67.228.167.131, 80)
risk name: HTTP Zombie Exploit Toolkit Request
there is a lot more....BUT It will not let me copy......
any ideas computer people??????????????
 
F

fishhugger

Guest
This is what I found with a quick search
What is Zombie Infection Kit?
Zombie Infection Kit is an effective conversion of traffic load. It is an exploit tool kit which creates a zombie army which is also called botnet networks. It attacks the PC when a user visits the compromised pages on the Internet. It finds the security holes inside older java version and attacks the user PC.
Java is used on SWF to display the banner in the top of the page.
If you dont have the latest version of java its possible that its trying to force you to download their trojan......or it already has.
I'm by no means a computer expert, but the best thing you could probably do is a full system scan. If you have a 32bit operating system (if you are unsure, go to start->computer-> *right click* properties, It should say if you are running 32 or 64) I would download avast and setup a 'boot scan'
Most things cannot be deleted while they are in use, and a virus/trojan isnt going to stop working so you can delete it >.<
But a boot scan will scan and delete anything without your OS running.
avast - http://download.cnet.com/Avast-Free-Antivirus/3000-2239_4-10019223.html?part=dl-85737&subj=dl&tag=button
and then I would update java
 
meowzer

meowzer

Moderator
I apparently have 32 bit.....so you are sayin to to download the avast???? I have Norton.....should I just upgrade tha java?
 
F

fishhugger

Guest
Well I would update java. The thing is, I dont know if your already infected, or if norton was stopping the infection. I would still update java and hopefully you wont have that problem anymore.
If your still getting pop ups or adds and it becomes apparent that you are infected then I would use avast. I personally think its better (even the free version) then norton.
The boot scan is very efficient because of the way it works, where it can detect the infection without the infection actually doing anything. If your not having any major problems I would just use norton and do a full scan regardless. If it finds nothing and you have no more problems you may be good to go.
Running two anti viruses at the same time is generally a bad idea, but in the boot scan (should you download avast) norton wont be running so it wouldnt be a problem. But when your computer is actually running you would need only one or the other running. You dont even really need avast, but the boot scan does an amazing job....but it does take a while.
 
F

fishhugger

Guest
Well unless your getting constant pop ups with that zombie message, you should be fine. I would check to see if java has an update, then you should be good to go :)
It might have just been a fluke too, java nags me everyday to update it but I dont, and I have yet to see that message.....I also dont run any antivirus >.<
I wouldn't do a system restore, just because I have really bad experiences with it (usually ends of with a computer in need of being reformatted)
Also It take a good amount of time and odds are you don't need to do it. If norton is blocking the problem then there should be no reason to remove it, and I would, in fact, suggest you dont =P.
 
meowzer

meowzer

Moderator
Quote:
Originally Posted by socal57che http:///forum/thread/383100/intrusion-alert#post_3348090
How about doing a system restore, removing norton and installing avast?
I just bought the Norton...LOL
Quote:
Originally Posted by FishHugger http:///forum/thread/383100/intrusion-alert#post_3348091
Well unless your getting constant pop ups with that zombie message, you should be fine. I would check to see if java has an update, then you should be good to go :)
It might have just been a fluke too, java nags me everyday to update it but I dont, and I have yet to see that message.....I also dont run any antivirus >.<
I wouldn't do a system restore, just because I have really bad experiences with it (usually ends of with a computer in need of being reformatted)
Also It take a good amount of time and odds are you don't need to do it. If norton is blocking the problem then there should be no reason to remove it, and in fact would suggest you dont =P.
I have not received a java update pop-up....BUT I am getting these intrusion alerts every time I refresh the swf screen....SO....I am doing a windows update at the moment.....and then I will run a scan and check Java
 
F

fishhugger

Guest
Just to be sure I would go here http://java.com/en/download/installed.jsp
It will tell you for sure if you should update java or not, and I would do that first.
 
al&burke

al&burke

Active Member
meowzer try a shut down and restart with fishhuggers suggestion - just to be safe - your computer should automatically set thing in motion on a restart.
 
F

fishhugger

Guest
No need to restart until after java updates.
And since you just bought norton, (which is a good program, I just prefer the layout and functions of avast) I wouldn't bother with avast unless it gets really bad, just because of the boot scan.
Should you need to use avast boot scan, when it makes the first detection it will give you a bunch of options, such as "delete, delete all, ignore, move to chest'. I would just hit delete all, even if it says the file may be important, odds are its not =P.
Also its always a good idea to back up any important files every now and then, in the off chance that a reformat is required =P
 
meowzer

meowzer

Moderator
LOL...I am happy with the computer I have...please let's not make this a WHICH IS BETTER thread....
downloads are complete.......I'm gonna restart now
 
meowzer

meowzer

Moderator
Well after all that I am still getting the alerts

I don't have the patience to try anything else tonight :(
 
You must log in or register to reply here.
Top