[spotted jaguar]

Hi, 

I'm getting this message repeatedly (every 2 seconds or so)

 

Norton Blocked an attack by: System Infected:

Trojan.Backdoor Activity 578

 

 

When I view details I get:

 

An intrusion attempt by local host was blocked

No action required

 

Date & Time,Risk,Activity,Status,Recommended Action,IPS Alert Name,Default Action,Action Taken,Attacking Computer,Attacker URL,Destination Address,Source Address,Traffic Description

15/10/2022 22:04:26,High,An intrusion attempt by 37.157.197.143 was blocked.,Blocked,No Action Required,System Infected: Trojan.Backdoor Activity 578,No Action Required,No Action Required,"37.157.197.143, 80",http://37.157.197.14...9,"PETER-LAPTOP(192.168.1.176, 62208)",37.157.197.143,"TCP, www-http"

Network traffic from <b>http://37.157.197.14...6b69fdf2419</b>matches the signature of a known attack.  The attack was resulted from \DEVICE\HARDDISKVOLUME3\WINDOWS\SYSWOW64\RUNDLL32.EXE.  To stop being notified for this type of traffic, in the <b>Actions</b> panel, click <b>Stop Notifying Me</b>. 

 

Norton Power Eraser doesn't find anything.

 

I would appreciate help as to how to remove this problem

 

Thabk you

[Advertisements]

Norton's firewall is stopping attacks from what it thinks is an infected PC called Peter's Notebook.  It seems to think that the source is on your local network.  Your PC is not infected and you can either tell Norton to stop telling you about the attacks or get Peter to get his notebook scanned for viruses.  If 37.157.197.143 is not part of your local network then your router's firewall needs to be turned on.

 

If you are still worried then post your FRST and Addition files per Step 3 of the instructions: http://www.geekstogo...before-posting/

[RKinner]

Norton's firewall is stopping attacks from what it thinks is an infected PC called Peter's Notebook.  It seems to think that the source is on your local network.  Your PC is not infected and you can either tell Norton to stop telling you about the attacks or get Peter to get his notebook scanned for viruses.  If 37.157.197.143 is not part of your local network then your router's firewall needs to be turned on.

 

If you are still worried then post your FRST and Addition files per Step 3 of the instructions: http://www.geekstogo...before-posting/