0
I keep receiving this message from Norton Antivirus:
What should I do about it?
Should I be worried?
What can I do to stop this?
How it would have harmed my system if I had no anti-virus softwareinstalled in my system at all.
What should I do about this intrusion attempt
Answers
0
I assume you are exposed to the Internet (not in a LAN behind a router), since port 445 should be closed otherwise. If not you should check your router portforward rules. No traffic should be allowed from the internet source to the 445 port since is used to for windows folder sharing.
beiro
Posted 2012-05-24T15:55:25.923
Reputation: 66
1
Generally speaking you can ignore it; for a start if it is completely legitimate Norton has blocked it and is claimed that no action is required.
Generally when a firewall says this it is very misleading to the user, all it means is that some network traffic it checked met the pattern of a similar set of network traffic that was known to be bad. So unless you have a service running like VNC Server that someone could use to take control of your system, then its more than likely harmless.
Turix
Posted 2012-05-24T15:55:25.923
Reputation: 691
How it would have harmed my system if I had no anti-virus softwareinstalled in my system at all – None – 2012-05-24T16:20:58.357
Likely, it wouldn't have - these kinds of things tend to be people trying to brute force passwords on remote services such as Windows Desktop Assistance. The odds of them actually guessing a valid username password combo is slim - presuming there is a service for them to even attack. – Turix – 2012-05-25T07:17:08.633
0
You have not to worry much anout it. As many user hss been facing rhis issue and has been discussed on norton community. And also see this solved thread.
avirk
Posted 2012-05-24T15:55:25.923
Reputation: 15 151
How it would have harmed my system if I had no anti-virus softwareinstalled in my system at all – None – 2012-05-24T16:20:46.467
Well this is depend on the situations. But if antivirus will not block them may be anyone trying to get or put something harmful on you system. That's why AV programs are there to block them through there firewall and much more protection. – avirk – 2012-05-25T03:13:00.530
You should download malwarebyte and combofix and run a scan to find any infection if there is any.
– avirk – 2012-05-25T03:14:29.327
How it would have harmed my system if I had no anti-virus softwareinstalled in my system at all – None – 2012-05-24T16:20:53.300
Well, in fact the firewall blocked it. If you were not using password on your user account a malicious remote user could access your windows shares. Note that with the right privileges (admin) all the drives would be exposed using the administrative share (c$,d$,etc). As I said before, all traffic from the internet should be dropped, if you don't plan to use any server on that computer. – beiro – 2012-05-24T16:49:17.900