Forum Orisinil
Kategori Umum => Diskusi Umum => Topic started by: cristofel on May 22, 2015, 09:04:34 PM
-
sudah sebulan ini sering sekali muncul notif dari norton seperti ini
Category: Intrusion Prevention
Date & Time,Risk,Activity,Status,Recommended Action,IPS Alert Name,Default Action,Action Taken,Attacking Computer,Attacker
URL,Destination Address,Source Address,Traffic Description
22/05/2015 20:50:58,High,An intrusion attempt by making.steelcitypatriots.info was blocked.,Blocked,No Action Required,Web Attack: Nuclear Exploit Kit Download 4,No Action Required,No Action Required,"making.steelcitypatriots.info (62.76.**.***, 80)",making.steelcitypatriots.info/QllGHgsBTVVXCVFZVhZFFl1SXVtfFkFHUExEC1dDQhZfDF5Y.html,"ATARELOAD-PC (192.168.*.*, 6***1)",62.76.**.*** (62.76.**.***),"TCP, www-http"
Network traffic from making.steelcitypatriots.info/QllGHgsBTVVXCVFZVhZFFl1SXVtfFkFHUExEC1dDQhZfDF5Y.html matches the signature of a known attack. The attack was resulted from \DEVICE\HARDDISKVOLUME1\PROGRAM FILES\YAHOO!\MESSENGER\YAHOOMESSENGER.EXE. To stop being notified for this type of traffic, in the Actions panel, click Stop Notifying Me.
ngatasinya gimana ya? instal ulang ym sama aja