default block bla

Discussion in 'malware problems & news' started by ryos, Jan 20, 2006.

Thread Status:
Not open for further replies.
  1. ryos

    ryos Registered Member

    Joined:
    Jan 20, 2006
    Posts:
    1
    Being relatively new to computers, I was wondering if any one could help. A did my first virus scan on my system after the first week of use and the system found a virus block bla and under threats it says the is has detected a threat adware.p2pnetworking. Firstly are these two items one and the same. And if so are they located on my computer as when trying to locate the file c:windows/download program file/webp2pinstaller.dll doesn’t seem to be in that directory.

    After check the Norton alert logs there are a few alerts of note,

    Default “block bla Trojan” block (66.51.122.50,1042)
    Inbound tcp connection
    Local address services is 84.65.35.12, 1042
    Remote service address is 61.12.122.50.48787
    Product name n/a

    And also

    Default “block bla Trojan” block (66.51.122.50,1042)
    Inbound udp packetconnection
    Local address services is localhost 1042
    Remote service address is 84.67.196.238,1042
    Product name n/a

    Any advice or help in dealing with this would be much appreciated as Norton doesn’t give any directory information where the files can be found. Thanks.
     
  2. TopperID

    TopperID Registered Member

    Joined:
    Oct 1, 2004
    Posts:
    1,527
    Location:
    London
    With regard to the last part of your question, it looks like a Firewall log entry confirming that Bla.Trojan was blocked from attempting to enter your system:-

    http://securityresponse.symantec.com/avcenter/venc/data/backdoor.bla.trojan.html

    If it was blocked by your FW there is nothing more that needs doing.

    With regard to webp2pinstaller.dll, have a look here:-

    http://www.jamroll.co.uk/support/post-134753.html

    Since an online scan with Trend Micro did the trick in that case, there is no harm in trying it yourself:-

    http://housecall.trendmicro.com/
     
Loading...
Thread Status:
Not open for further replies.