HTTP Malicious Toolkit Variant Activity

Discussion in 'other security issues & news' started by Gonzina, Oct 19, 2008.

Thread Status:
Not open for further replies.
  1. Gonzina

    Gonzina Registered Member

    Joined:
    Oct 19, 2008
    Posts:
    3
    Hi there,

    Well, you probably can see I am only new. I hope that I'm posting in the right forum.

    Today I had a notification that an intrusion attempt was blocked. I looked it up in the log viewer and realised that I was the one who attacked somebody else!!!

    Details: Attempted Intrusion "HTTP Malicious Toolkit Variant Activity" from your machine against 71.18.234.105 was detected and blocked.
    Intruder: BRIGITTE(2857).
    Risk Level: High.
    Protocol: TCP.
    Attacked IP: 71.18.234.105.
    Attacked Port: http(80).


    I run a full system scan (NIS) but it come up with nothing.
    I search to web to find out what I could do to solve this problem, but no information at all.

    If somebody could help me please. I feel like I'm sitting on a time bomb.

    Thanks
     
  2. jrmhng

    jrmhng Registered Member

    Joined:
    Nov 4, 2007
    Posts:
    1,268
    Location:
    Australia
  3. Gonzina

    Gonzina Registered Member

    Joined:
    Oct 19, 2008
    Posts:
    3
    Yesss!! Indeed I was!

    I actually did a check on that website with symantec. But it said it hasn't been tested yet. So I sent a request to do so but I don't know how long that will take.

    Thank you soooooo much!!!! :D
    And such a fast reply!

    This is better than a beer ;)
     
  4. jrmhng

    jrmhng Registered Member

    Joined:
    Nov 4, 2007
    Posts:
    1,268
    Location:
    Australia
    The website is just the IP you had there. Because you were surfing on the site, it think it is likely that it is a false positive from your browser doing something that Norton thinks is sus. Without knowing exactly what and why Norton is detecting it,hard to give a conclusive answer.
     
  5. Gonzina

    Gonzina Registered Member

    Joined:
    Oct 19, 2008
    Posts:
    3
    I tried to visit the website again. It didn't display the site but exactly the same thing happened. Alert that I attacked them. Strange.
    Anyway, thanks again for your help :thumb:
    Brigitte
     
Loading...
Thread Status:
Not open for further replies.