HTTP Malicious Toolkit Variant Activity

Hi there,

Well, you probably can see I am only new. I hope that I'm posting in the right forum.

Today I had a notification that an intrusion attempt was blocked. I looked it up in the log viewer and realised that I was the one who attacked somebody else!!!

Details: Attempted Intrusion "HTTP Malicious Toolkit Variant Activity" from your machine against 71.18.234.105 was detected and blocked.
Intruder: BRIGITTE(2857).
Risk Level: High.
Protocol: TCP.
Attacked IP: 71.18.234.105.
Attacked Port: http(80).


I run a full system scan (NIS) but it come up with nothing.
I search to web to find out what I could do to solve this problem, but no information at all.

If somebody could help me please. I feel like I'm sitting on a time bomb.

Thanks

 

It could be a false positive. Maybe your browser did something weird. Were you visiting http://www.jonksbargains.com/index.shtml by any chance?

 

Yesss!! Indeed I was!

I actually did a check on that website with symantec. But it said it hasn't been tested yet. So I sent a request to do so but I don't know how long that will take.

Thank you soooooo much!!!!
And such a fast reply!

This is better than a beer

 

The website is just the IP you had there. Because you were surfing on the site, it think it is likely that it is a false positive from your browser doing something that Norton thinks is sus. Without knowing exactly what and why Norton is detecting it,hard to give a conclusive answer.

 

I tried to visit the website again. It didn't display the site but exactly the same thing happened. Alert that I attacked them. Strange.
Anyway, thanks again for your help
Brigitte