norton constantly telling me it has blocked an attack 28 February 2016 at 4:06PM in Techie Stuff 39 replies 6.6K views

donnajunkie

over the past day or so i have been getting constant pop up messages from norton telling me it has blocked an attack by trojan.cryptolocker. the messages literally pop up every second or two none stop. it is annoying. is there anything i can do to stop it. when i clicked on view details there was an option to click that said stop notifying me and i did that but the messages keep coming anyway.

debitcardmayhem

Did it offer to fix it? or say it couldn't ? Try running malwarebytes https://www.malwarebytes.org/dl-confirm/ , and/or perhaps look here https://www.symantec.com/security_response/writeup.jsp?docid=2016-022219-1829-99

Oblivion

You could try downloading and running Norton Power Eraser ...

https://www.symantec.com/security_response/writeup.jsp?docid=2013-091122-3112-99&tabid=3

Cryptolocker is very nasty as it encrypts all your data and then demands a ransom to unencrypt it. Sounds like it's present on your computer and Norton is fighting to stop it running.

JJ_Egan

As above crypto locker can lock every file on your PC and you pay big money £1000 to get it unlocked .

donnajunkie

I don't think the system is infected. I just keep getting Norton telling me it has blocked an attack by it. You can click on view details to get more info and it says no action required. I did run the power eraser and it found no problem. I have also ran a full scan with Norton and malwarebytes and nothing has been found. It's just the box in the bottom right corner of the screen constantly popping up to tell me Norton has blocked an attack which is annoying.

donnajunkie

JJ_Egan wrote: »

As above crypto locker can lock every file on your PC and you pay big money £1000 to get it unlocked .

Well they would never get that out of me. Theres nothing that important on my system. It would be cheaper to just get a new pc with different security to Norton.

debitcardmayhem

donnajunkie wrote: »

I don't think the system is infected. I just keep getting Norton telling me it has blocked an attack by it. You can click on view details to get more info and it says no action required. I did run the power eraser and it found no problem. I have also ran a full scan with Norton and malwarebytes and nothing has been found. It's just the box in the bottom right corner of the screen constantly popping up to tell me Norton has blocked an attack which is annoying.

Did the details say where the source was?

donnajunkie

debitcardmayhem wrote: »

Did the details say where the source was?

Yes it did but I can't remember it and I am currently not on the PC. The ip is different to mine which suggests it is not on my system doesn't it?

donnajunkie

here are the details.
trojan.cryptolocker.AF activity 2.
attacking computer - 62.252.172.241, 80.
attacking url - sso.anbtr.com/domain/local.swarmcast.net

Oblivion

donnajunkie wrote: »

here are the details.
trojan.cryptolocker.AF activity 2.
attacking computer - 62.252.172.241, 80.
attacking url - sso.anbtr.com/domain/local.swarmcast.net

Does your router have a section where you can list and block that attacking computer's IP address?

debitcardmayhem

Are you with Virgin ? , check that your routers ip address is not 62.252.172.241