Norton Antivirus and Intrusion Attempts

[sebbylite]

Hi, I've started getting a popup from Norton Antivirus (Version 14.2.0.29) that says

"A recent attempt to attack your computer was blocked."

The More Details link gives me this information:
Risk Name: Portscan
Risk Level: medium
Default Action: block
Action Taken: blocked
Attacking Computer: 74.61.27.121, 52673
Destination Address: 255.255.255.255, 6019
Traffic Description: UDP, 52673

The main issue is that this happens about every 30 seconds, and the popup is a little annoying. Is this something that is legit, or is it something that my own computer is doing that Norton is flagging as an intrusion attempt?

I'm running Windows XP, Home Edition, SP2, with Clearwire wireless (no router, connected directly to Clearwire box).

Thanks in advance, and I appreciate the help if anyone can give it.

 

[clintblack]

That can be a number of things. I think I have seen that happen with the program "Angry IP". Some programs will flag it as a possible hijack attempt because you have the option of scanning for open IP addresses. Perhaps you have a program similar to that. If you don't, I would suggest running Spybot Search and Destroy and Ad-Aware (both programs are free). That might fix it up.

 

[technome]

It is your Clear Wire wireless provider

Dnsstuff.com omes up with the company
Name: Clearwire, LLC
OrgID: CLEAR-26
Address: 5808 Lake Washington Blvd NE
Address: Suite 300
City: Kirkland
StateProv: WA
PostalCode: 98033
Country: US

Does Stickies ring a bell

........................................
Chernobyl disaster..a must see pictorial

http://www.kiddofspeed.com/default.htm

 

[sebbylite]

Does that mean that I am just stuck with the pop-up occurring every 30 seconds until my contract runs out with Clearwire? Or is there something that I can do about it?

And no, I'm not familiar with Stickies.

-Thanks

 

[technome]

Personally I would get a cheap router like a linksys and place it in line, likely it would block the portscan without you or the AV even knowing it.



........................................
Chernobyl disaster..a must see pictorial

http://www.kiddofspeed.com/default.htm

 

[brotherleelove]

I've finally found the correct "fix" after several failed attempts.

Open your Norton AntiVirus Program.
Click on the 'Norton AntiVirus' tab.
Click 'Settings'
Click 'Internet Worm Protections'
Click 'Configure' [You'll go to a page titled "Virus and Spyware Protection Options"]
Click 'Configure' again.
Scroll down through all the "Signature Exclusions" until you see one beginning with 'HTTP Macromedia' even if the complete file name isn't the same as "HTTP Macromedia Long Filename BO".

Uncheck this file. This stopped the popup on my computer. If it doesn't work for you just go back and check it again to restore your settings. Look for any other Macromedia file names and try unchecking them instead. I got lucky on the first try, I hope you do too.

 

[brotherleelove]

Sorry, in your case the "HTTP Macromedia" suggestion was a mistake. Look for "Portscan" on that list, that's what you should try to 'uncheck'. I apologize if I caused you any grief.