HTTP Malicious Toolkit Variant Activity

Discussion in 'other security issues & news' started by Gonzina, Oct 19, 2008.

Thread Status:
Not open for further replies.
  1. Gonzina

    Gonzina Registered Member

    Joined:
    Oct 19, 2008
    Posts:
    3
    Hi there,

    Well, you probably can see I am only new. I hope that I'm posting in the right forum.

    Today I had a notification that an intrusion attempt was blocked. I looked it up in the log viewer and realised that I was the one who attacked somebody else!!!

    Details: Attempted Intrusion "HTTP Malicious Toolkit Variant Activity" from your machine against 71.18.234.105 was detected and blocked.
    Intruder: BRIGITTE(2857).
    Risk Level: High.
    Protocol: TCP.
    Attacked IP: 71.18.234.105.
    Attacked Port: http(80).


    I run a full system scan (NIS) but it come up with nothing.
    I search to web to find out what I could do to solve this problem, but no information at all.

    If somebody could help me please. I feel like I'm sitting on a time bomb.

    Thanks
     
  2. jrmhng

    jrmhng Registered Member

    Joined:
    Nov 4, 2007
    Posts:
    1,268
    Location:
    Australia
  3. Gonzina

    Gonzina Registered Member

    Joined:
    Oct 19, 2008
    Posts:
    3
    Yesss!! Indeed I was!

    I actually did a check on that website with symantec. But it said it hasn't been tested yet. So I sent a request to do so but I don't know how long that will take.

    Thank you soooooo much!!!! :D
    And such a fast reply!

    This is better than a beer ;)
     
  4. jrmhng

    jrmhng Registered Member

    Joined:
    Nov 4, 2007
    Posts:
    1,268
    Location:
    Australia
    The website is just the IP you had there. Because you were surfing on the site, it think it is likely that it is a false positive from your browser doing something that Norton thinks is sus. Without knowing exactly what and why Norton is detecting it,hard to give a conclusive answer.
     
  5. Gonzina

    Gonzina Registered Member

    Joined:
    Oct 19, 2008
    Posts:
    3
    I tried to visit the website again. It didn't display the site but exactly the same thing happened. Alert that I attacked them. Strange.
    Anyway, thanks again for your help :thumb:
    Brigitte
     
Loading...
Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.