View Single Post

  #1 (permalink)  
Old 03-09-2009, 09:36 PM
zayphod's Avatar
zayphod zayphod is offline
Senior Member
 
Join Date: Aug 2008
Location: Fremantle, Australia
Posts: 466
Exclamation Norton False Positive

Hi Trikkur,

I visited the pokertrikz website (the home page first, and then the blog page) this morning at home and got a blocked attack message pop up from Norton Internet Security (NIS).

This suprised me since the last thing I expect is the website trying to access my machine. I of course trust you and believe you to run an honest site, but I do need an explanation for the attempted intrusion.

The details from NIS are given below concerning this matter.

Details: Attempted Intrusion "HTTP MSIE7 Uninitialized Memory Code Exec" against your machine was detected and blocked.
Intruder: www.pokertrikz.com(http(80)).
Risk Level: High.
Protocol: TCP.
Attacked IP: localhost.
Attacked Port: 1281.

The link to the symantec website and their description of this is given below. The only thing of difference I note from their explanation is that I use firefox and not IE. However, it is concerning when they make the following statement concerning this intrusion type,

Possible False Positives: There are no known false positives associated with this signature.

HTTP MSIE7 Uninitialized Memory Code Exec: Attack Signature - Symantec Corp.

A fairly quick response to this would be appreciated please.

Cheers
Zayphod
Reply With Quote
 

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45