Attempted Intrusion "Klez_Propagation" against you
Can anybody help with this constant problem. Evertime i log onto ntl e-mail norton firewall & antivrus stop the virus but lock out the e-mail for 30 minutes. Is it an attack?
click here go here and type in "Klez_Propagation".
Thanks smegs but i dont think it is a virus in the computer as it is being stopped. Norton has reported 206 attacks and tracking located the information below
Norton tracked the problem to this computer
inetnum: 62.253.160.0 - 62.253.167.255
netname: NTL
descr: NTL Internet
descr: Winnersh Datacentre
country: GB
admin-c: NNMC1-RIPE
tech-c: NNMC1-RIPE
status: ASSIGNED PA
mnt-by: AS5089-MNT
changed: [email protected] 20010108
changed: [email protected] 20020815
source: RIPE
Anybody know what it all means?
The NTL server is sending your emails to your inbox , Norton is picking up a virus and stopping it , simply go the the NTL site and access your webmail account , look for emails likely to contain a virus , attachments or from unknown sources etc , and delete them.
Once cleared you can log out and download the rest using Outlook.
The info you supplied above , is a simple query from Norton to Ripe , to find out where the mail is coming from , in this case NTL, if you would like to try it your self go here click here and type in 62.253.160.0 , hit the search button and you will get all the details.
Nothing sinister going on , other than you have infected emails waiting for you on the NTL mail server.
Thanks cycoze that information is helpful. I will try that
[email protected] worm family propagating across the network via SMTP and NetBios shares
Thanks cycoze that did sort it.
I expected the mail to be removed from the NTL server when outlook downloads it to my computer. It did not do that and everytime send/ recieve was used the mail containing the virus was continually being downloaded without being removed from the server.
Deleting the mail using webmail resolved the problem. Although it is resolved it would be interesting to know why this was happening
If your using Norton Internet Security , it will probably be the Auto Block facility .
Qoute > When Norton Internet Security detects an attack, it automatically blocks the connection to ensure that your computer is safe. The program can also activate AutoBlock, which automatically blocks all incoming communication from the attacking computer for a set period of time, even if the incoming communication does not match an attack signature.
AutoBlock stops all inbound communications with the attacking computer for 30 minutes.
To enable or disable AutoBlock
Open Norton Internet Security.
In the Security Center, double-click Intrusion Detection.
In the Intrusion Detection window, check or uncheck Turn on AutoBlock. < UnQoute.
Have a read Through your Norton`s manual and or Help .
After reading again "Have a read Through your Norton`s manual and or Help" < sounds a bit Bolshy , was`nt meant to be , you may find a more suitable configuration.
This thread is now locked and can not be replied to.