Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

I keep receiving this message from Norton Antivirus:

An Intrusion attempt by so and so ip address was blocked, The path was. It has high severity

What should I do about it?

Should I be worried?

What can I do to stop this?

How it would have harmed my system if I had no anti-virus softwareinstalled in my system at all.

share|improve this question
add comment

3 Answers

up vote 1 down vote accepted

I assume you are exposed to the Internet (not in a LAN behind a router), since port 445 should be closed otherwise. If not you should check your router portforward rules. No traffic should be allowed from the internet source to the 445 port since is used to for windows folder sharing.

share|improve this answer
    
How it would have harmed my system if I had no anti-virus softwareinstalled in my system at all –  user221287 May 24 '12 at 16:20
    
Well, in fact the firewall blocked it. If you were not using password on your user account a malicious remote user could access your windows shares. Note that with the right privileges (admin) all the drives would be exposed using the administrative share (c$,d$,etc). As I said before, all traffic from the internet should be dropped, if you don't plan to use any server on that computer. –  beiro May 24 '12 at 16:49
add comment

Generally speaking you can ignore it; for a start if it is completely legitimate Norton has blocked it and is claimed that no action is required.

Generally when a firewall says this it is very misleading to the user, all it means is that some network traffic it checked met the pattern of a similar set of network traffic that was known to be bad. So unless you have a service running like VNC Server that someone could use to take control of your system, then its more than likely harmless.

share|improve this answer
    
How it would have harmed my system if I had no anti-virus softwareinstalled in my system at all –  user221287 May 24 '12 at 16:20
    
Likely, it wouldn't have - these kinds of things tend to be people trying to brute force passwords on remote services such as Windows Desktop Assistance. The odds of them actually guessing a valid username password combo is slim - presuming there is a service for them to even attack. –  Turix May 25 '12 at 7:17
add comment

You have not to worry much anout it. As many user hss been facing rhis issue and has been discussed on norton community. And also see this solved thread.

share|improve this answer
    
How it would have harmed my system if I had no anti-virus softwareinstalled in my system at all –  user221287 May 24 '12 at 16:20
    
Well this is depend on the situations. But if antivirus will not block them may be anyone trying to get or put something harmful on you system. That's why AV programs are there to block them through there firewall and much more protection. –  avirk May 25 '12 at 3:13
    
You should download malwarebyte and combofix and run a scan to find any infection if there is any. –  avirk May 25 '12 at 3:14
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.