Unsolved
This post is more than 5 years old
63 Posts
0
7837
April 11th, 2006 00:00
Norton security alert Pleas help.
I keep getting these block of the same thing over and over again. 6 to be exact in the past 2 days. please help because i have no clue what this is or its saying..
Intrusion: MS ASN1 Interger Overflow TCP.
Intruder: 216.31.136.192(4116).
Risk level: High
Protocol: TCP.
Attacked IP: Says my name and my i.p adress for this comp.
Attacked Port: netbios-ssn(139).
Please help I tryed looking somthing up on this but it was in brainiac language and made no sence to me.
Intrusion: MS ASN1 Interger Overflow TCP.
Intruder: 216.31.136.192(4116).
Risk level: High
Protocol: TCP.
Attacked IP: Says my name and my i.p adress for this comp.
Attacked Port: netbios-ssn(139).
Please help I tryed looking somthing up on this but it was in brainiac language and made no sence to me.
No Events found!


bamajim
10.4K Posts
0
April 11th, 2006 00:00
Killacam88
Do you have the latest service pack from Microsoft installed it will be SP2
If you don't know or are unsure
Rt Click My Computer and it will say on the front tab
bamajim
Training at Malware Removal University
bamajim
10.4K Posts
0
April 11th, 2006 01:00
Killacam88
Lets do this
Go here and download Hijackthis
http://dsvs.org/5/HijackThis.exe
Save it in a convenient permanent folder such as C:\\HJT\\, double click HijackThis.exe, and hit "Scan". When the scan is finished, the "Scan" button will change into a "Save Log" button. Press that, save the log, Ctrl-A to Select All, and copy its contents AT THE LINK BELOW
http://forums.us.dell.com/supportforums/board?board.id=si_hijack
And include a description of your problems when you post your log
Please do not be tempted to "fix" on your own. Hijackthis is a very powerful tool, if used incorrectly can cause system problems
bamajim
Training at Malware Removal University
Killacam88
63 Posts
0
April 11th, 2006 01:00
msgale
2 Intern
•
2.5K Posts
0
April 11th, 2006 10:00
Message Edited by msgale on 04-11-200608:38 AM
msgale
2 Intern
•
2.5K Posts
0
April 11th, 2006 10:00
Albert Einstein once said "Make everything as simple as possible, but not simpler." When you get a message from you antivirus software the most likely cause is a virus. The message you got means
Intrusion: MS ASN1 Interger Overflow TCP. The type of virus attack
Intruder: 216.31.136.192(4116). Where it may have come from
Risk level: High Risk involved
Protocol: TCP. How the attack was sent
Attacked IP: Says my name and my i.p adress for this comp. Who was being attacked
AttackedPort: netbios-ssn(139). The name and number of the logical being attacked