Options

Intrusion attempt blocked (Norton Anti-Virus)

Oh please help me!
I get this notification from norton anti-virus :
An intrusion attempt was blocked

Here are the details:
An intrusion attempt by 41.234.229.171 application path SYSTEM

It appears almost every 5 minutes, normally I should be reassured that nothing will happen since it is being blocked, but at this rate it will keep trying until it does get in and get rid of System32 which has happened before and i had thought i had gotten rid of it by formatting my PC but it is still here.

How can I stop this from occuring again...not hide it but stop the intrusions?

Comments

  • edited January 2009
    Please note that all instructions given are customised for this computer only, the tools used may cause damage if used on a computer with different infections.

    If you think you have similar problems, please post a log in the HJT forum and wait for help.

    Hello and welcome to the forums

    My name is Katana and I will be helping you to remove any infection(s) that you may have.

    Please observe these rules while we work:
    1. Please Read All Instructions Carefully
    2. If you don't understand something, stop and ask! Don't keep going on.
    3. Please do not run any other tools or scans whilst I am helping you
    4. Please continue to respond until I give you the "All Clear"
      (Just because you can't see a problem doesn't mean it isn't there)

    If you can do those few things, everything should go smoothly laechel.gif

    Please Note, your security programs may give warnings for some of the tools I will ask you to use.
    Be assured, any links I give are safe


    Do you have any P2P software installed ?

    Download and Run RSIT
    • Please download Random's System Information Tool by random/random from here and save it to your desktop.
    • Double click on RSIT.exe to run RSIT.
    • Click Continue at the disclaimer screen.
    • Once it has finished, two logs will open:
      • log.txt will be opened maximized.
      • info.txt will be opened minimized.
    • Please post the contents of both log.txt and info.txt.
  • edited January 2009
    Katana wrote:
    Hello and welcome to the forums

    My name is Katana and I will be helping you to remove any infection(s) that you may have.


    Please observe these rules while we work:
    1. Please Read All Instructions Carefully
    2. If you don't understand something, stop and ask! Don't keep going on.
    3. Please do not run any other tools or scans whilst I am helping you
    4. Please continue to respond until I give you the "All Clear"
      (Just because you can't see a problem doesn't mean it isn't there)
    If you can do those few things, everything should go smoothly laechel.gif

    Please Note, your security programs may give warnings for some of the tools I will ask you to use.
    Be assured, any links I give are safe

    Do you have any P2P software installed ?

    Download and Run RSIT
    • Please download Random's System Information Tool by random/random from here and save it to your desktop.
    • Double click on RSIT.exe to run RSIT.
    • Click Continue at the disclaimer screen.
    • Once it has finished, two logs will open:
      • log.txt will be opened maximized.
      • info.txt will be opened minimized.
    • Please post the contents of both log.txt and info.txt.
    Oh, unfortunatly i got this error after opening RSIT and clicking continue

    Autolt Error
    Line -1:


    Error:Incorrect number of parameters in function call.
  • edited January 2009
    Katana wrote:
    Do you have any P2P software installed ?



    Please download DDS and save it to your desktop.
    • Disable any script blocking protection
    • Double click dds.scr to run the tool.
    • When done, DDS.txt will open.
    • Click Yes at the next prompt for Optional Scan.
    • Save both reports to your desktop.


    Please include the contents of the following in your next reply:

    DDS.txt

    Attach the following report to your post by clicking the Manage Attachments button under Additonal Options>Attach Files on the composition page. Browse to where you saved the file, and click Upload.

    Attach.txt
  • edited January 2009
    Katana wrote:
    Please download DDS and save it to your desktop.
    • Disable any script blocking protection
    • Double click dds.scr to run the tool.
    • When done, DDS.txt will open.
    • Click Yes at the next prompt for Optional Scan.
    • Save both reports to your desktop.


    Please include the contents of the following in your next reply:

    DDS.txt

    Attach the following report to your post by clicking the Manage Attachments button under Additonal Options>Attach Files on the composition page. Browse to where you saved the file, and click Upload.

    Attach.txt
    DDS.txt is enlisted below
    DDS (Ver_09-01-19.01) - NTFSx86
    Run by XPPRESP3 at 16:50:43.96 on Thu 01/22/2009
    Internet Explorer: 6.0.2900.2180
    ============== Running Processes ===============

    ============== Pseudo HJT Report ===============
    uStart Page = hxxp://www.google.com
    uSearch Page = hxxp://www.google.com
    uSearch Bar = hxxp://www.google.com/ie
    mDefault_Page_URL = hxxp://www.google.com
    uInternet Connection Wizard,ShellNext = hxxp://www.google.com/
    uSearchURL,(Default) = hxxp://www.google.com/keyword/%s
    mSearchAssistant = hxxp://www.google.com/ie
    mWinlogon: SfcDisable=-99 (0xffffff9d)
    BHO: Adobe PDF Reader Link Helper: {06849e9f-c8d7-4d59-b87d-784b7d6be0b3} - c:\program files\adobe\acrobat 7.0\activex\AcroIEHelper.dll
    BHO: AskBar BHO: {201f27d4-3704-41d6-89c1-aa35e39143ed} - c:\program files\askbardis\bar\bin\askBar.dll
    BHO: Symantec Intrusion Prevention: {6d53ec84-6aae-4787-aeee-f4628f01010c} - c:\program files\norton antivirus\engine\16.2.0.7\IPSBHO.DLL
    BHO: SSVHelper Class: {761497bb-d6f0-462c-b6eb-d4daf1d92d43} - c:\program files\java\jre1.5.0_07\bin\ssv.dll
    TB: Ask Toolbar: {3041d03e-fd4b-44e0-b742-2d9b88305f98} - c:\program files\askbardis\bar\bin\askBar.dll
    uRun: [CTFMON.EXE] c:\windows\system32\ctfmon.exe
    uRun: [Google Update] "c:\documents and settings\xppresp3\local settings\application data\google\update\GoogleUpdate.exe" /c
    uRun: [DriverMax] "c:\program files\innovative solutions\drivermax\devices.exe" -agent
    uRun: [PC Suite Tray] "c:\program files\nokia\nokia pc suite 7\PCSuite.exe" -onlytray
    mRun: [SoundMan] SOUNDMAN.EXE
    dRun: [CTFMON.EXE] c:\windows\system32\CTFMON.EXE
    uPolicies-explorer: NoSMHelp = 1 (0x1)
    mPolicies-explorer: ForceClassicControlPanel = 1 (0x1)
    dPolicies-explorer: NoSMHelp = 1 (0x1)
    IE: E&xport to Microsoft Excel - c:\progra~1\micros~1\office11\EXCEL.EXE/3000
    IE: {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - {CAFEEFAC-0015-0000-0007-ABCDEFFEDCBC} - c:\program files\java\jre1.5.0_07\bin\ssv.dll
    IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~1\office11\REFIEBAR.DLL
    SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\wpdshserviceobj.dll
    ============= SERVICES / DRIVERS ===============

    =============== Created Last 30 ================
    2009-01-22 16:45 244 a---h--- C:\sqmnoopt09.sqm
    2009-01-22 16:45 232 a---h--- C:\sqmdata09.sqm
    2009-01-21 19:20 244 a---h--- C:\sqmnoopt08.sqm
    2009-01-21 19:20 232 a---h--- C:\sqmdata08.sqm
    2009-01-21 16:39 25,600 a
    c:\windows\system32\drivers\usbser.sys
    2009-01-21 16:38 0 a---h--- c:\windows\system32\drivers\Msft_Kernel_ccdcmb_01007.Wdf
    2009-01-21 16:38 0 a---h--- c:\windows\system32\drivers\MsftWdf_Kernel_01007_Coinstaller_Critical.Wdf
    2009-01-21 16:38 14,640
    c:\windows\system32\spmsgXP_2k3.dll
    2009-01-21 16:31 <DIR> --d
    c:\program files\common files\PCSuite
    2009-01-21 16:31 <DIR> --d
    c:\program files\common files\Nokia
    2009-01-21 16:31 18,816 a
    c:\windows\system32\drivers\pccsmcfd.sys
    2009-01-21 16:31 <DIR> --d
    c:\program files\PC Connectivity Solution
    2009-01-21 16:30 8,064 a
    c:\windows\system32\drivers\usbser_lowerfltj.sys
    2009-01-21 16:30 22,016 a
    c:\windows\system32\drivers\ccdcmbo.sys
    2009-01-21 16:30 8,064 a
    c:\windows\system32\drivers\usbser_lowerflt.sys
    2009-01-21 16:30 1,112,288 a
    c:\windows\system32\wdfcoinstaller01007.dll
    2009-01-21 16:30 659,968 a
    c:\windows\system32\nmwcdcocls.dll
    2009-01-21 16:30 17,664 a
    c:\windows\system32\drivers\ccdcmb.sys
    2009-01-21 16:30 <DIR> --d
    c:\program files\Nokia
    2009-01-21 15:34 12,800 a
    c:\windows\system32\drivers\nmwcdcj.sys
    2009-01-21 15:26 0 a---h--- c:\windows\system32\drivers\Msft_Kernel_ccdcmb_01005.Wdf
    2009-01-21 15:26 0 a---h--- c:\windows\system32\drivers\MsftWdf_Kernel_01005_Coinstaller_Critical.Wdf
    2009-01-21 15:25 23,856 a
    c:\windows\system32\spupdsvc.exe
    2009-01-21 15:23 148,992 a
    c:\windows\system32\nsesetup.dll
    2009-01-21 15:23 91,136 a
    c:\windows\system32\nmwcdcls.dll
    2009-01-21 15:18 <DIR> --d
    c:\program files\Innovative Solutions
    2009-01-21 10:06 77,544 a
    c:\windows\War3Unin.dat
    2009-01-21 10:06 139,264 a
    c:\windows\War3Unin.exe
    2009-01-21 10:06 2,829 a
    c:\windows\War3Unin.pif
    2009-01-21 08:57 244 a---h--- C:\sqmnoopt07.sqm
    2009-01-21 08:57 232 a---h--- C:\sqmdata07.sqm
    2009-01-21 08:52 244 a---h--- C:\sqmnoopt06.sqm
    2009-01-21 08:52 232 a---h--- C:\sqmdata06.sqm
    2009-01-21 08:38 244 a---h--- C:\sqmnoopt05.sqm
    2009-01-21 08:38 232 a---h--- C:\sqmdata05.sqm
    2009-01-21 06:16 244 a---h--- C:\sqmnoopt04.sqm
    2009-01-21 06:16 232 a---h--- C:\sqmdata04.sqm
    2009-01-20 22:45 244 a---h--- C:\sqmnoopt03.sqm
    2009-01-20 22:45 232 a---h--- C:\sqmdata03.sqm
    2009-01-20 20:26 244 a---h--- C:\sqmnoopt02.sqm
    2009-01-20 20:26 232 a---h--- C:\sqmdata02.sqm
    2009-01-18 22:21 244 a---h--- C:\sqmnoopt01.sqm
    2009-01-18 22:21 232 a---h--- C:\sqmdata01.sqm
    2009-01-18 21:27 <DIR> --d
    c:\program files\Red Alert 2 Yuri's Revenge
    2009-01-17 23:58 <DIR> --d
    C:\games
    2009-01-17 21:46 <DIR> --d
    c:\program files\Age Of Empires 2 & The Conquerors Expansion - Full Game
    2009-01-17 19:33 <DIR> --d
    c:\documents and settings\xppresp3\Contacts
    2009-01-17 19:21 69 a
    c:\windows\NeroDigital.ini
    2009-01-17 18:15 <DIR> --d
    c:\docume~1\alluse~1\applic~1\Azureus
    2009-01-17 18:15 <DIR> --d
    c:\program files\AskBarDis
    2009-01-17 18:15 <DIR> --d
    c:\docume~1\xppresp3\applic~1\Azureus
    2009-01-17 18:14 <DIR> --d
    c:\program files\Vuze
    2009-01-17 17:48 <DIR> --d
    c:\program files\microsoft games
    2009-01-17 16:42 <DIR> --d
    c:\program files\GameSpy Arcade
    2009-01-17 15:42 <DIR> --d
    C:\GameSpy Arcade Setup
    2009-01-16 23:51 <DIR> --d
    c:\docume~1\alluse~1\applic~1\Symantec
    2009-01-16 21:55 6,400 a
    c:\windows\system32\drivers\splitter.sys
    2009-01-16 21:55 82,944 a
    c:\windows\system32\drivers\wdmaud.sys
    2009-01-16 21:55 52,864 a
    c:\windows\system32\drivers\DMusic.sys
    2009-01-16 21:55 54,272 a
    c:\windows\system32\drivers\swmidi.sys
    2009-01-16 21:55 142,464 a
    c:\windows\system32\drivers\aec.sys
    2009-01-16 21:55 171,776 a
    c:\windows\system32\drivers\kmixer.sys
    2009-01-16 21:55 2,944 a
    c:\windows\system32\drivers\drmkaud.sys
    2009-01-16 21:55 60,800 a
    c:\windows\system32\drivers\sysaudio.sys
    2009-01-16 21:55 7,552 a
    c:\windows\system32\drivers\MSKSSRV.sys
    2009-01-16 21:55 4,992 a
    c:\windows\system32\drivers\MSPQM.sys
    2009-01-16 21:55 5,376 a
    c:\windows\system32\drivers\MSPCLOCK.sys
    2009-01-16 21:54 145,920 a
    c:\windows\system32\drivers\portcls.sys
    2009-01-16 21:54 130,048 a
    c:\windows\system32\ksproxy.ax
    2009-01-16 21:54 4,096 a
    c:\windows\system32\ksuser.dll
    2009-01-16 21:54 60,288 a
    c:\windows\system32\drivers\drmk.sys
    2009-01-16 21:54 8,605,696 a
    c:\windows\system32\ALSNDMGR.CPL
    2009-01-16 21:54 765,952 a
    c:\windows\system\crlds3d.dll
    2009-01-16 21:54 720,896 a
    c:\windows\system32\Audio3D.dll
    2009-01-16 21:54 720,896 a
    c:\windows\system32\a3d.dll
    2009-01-16 21:54 55,296 a
    c:\windows\SOUNDMAN.EXE
    2009-01-16 21:54 752,764 a
    c:\windows\system32\drivers\ALCXWDM.SYS
    2009-01-16 21:54 141,016 a
    c:\windows\system32\ALSNDMGR.WAV
    2009-01-16 21:28 244 a---h--- C:\sqmnoopt00.sqm
    2009-01-16 21:28 232 a---h--- C:\sqmdata00.sqm
    2009-01-16 20:56 176 a
    c:\windows\wininit.ini
    2009-01-16 20:54 <DIR> --d
    c:\windows\system32\appmgmt
    2009-01-16 20:37 3,072 a
    c:\windows\system32\drivers\audstub.sys
    2009-01-16 20:36 57,472 a
    c:\windows\system32\drivers\redbook.sys
    2009-01-16 20:36 4,274,816 a
    c:\windows\system32\nv4_disp.dll
    2009-01-16 20:36 1,897,408 a
    c:\windows\system32\drivers\nv4_mini.sys
    2009-01-16 20:36 5,504 a
    c:\windows\system32\drivers\intelide.sys
    2009-01-16 20:35 74,240 a
    c:\windows\system32\usbui.dll
    2009-01-16 20:35 42,368 a
    c:\windows\system32\drivers\AGP440.SYS
    2009-01-16 20:34 <DIR> --d
    c:\program files\common files\ODBC
    2009-01-16 20:34 <DIR> --d
    c:\program files\common files\SpeechEngines
    2009-01-16 20:33 <DIR> --d--r-- c:\documents and settings\all users\Documents
    2009-01-16 20:32 26,352 a---hr-- c:\windows\SETAA.tmp
    2009-01-16 20:31 9,694 a---hr-- c:\windows\SET96.tmp
    2009-01-16 20:30 <DIR> --d
    C:\Documents and Settings
    2009-01-16 20:30 2,214 a
    c:\windows\system32\$winnt$.inf
    2009-01-16 19:01 <DIR> --d
    c:\program files\Symantec
    2009-01-16 19:01 <DIR> --d
    c:\program files\common files\Symantec Shared
    2009-01-16 19:01 <DIR> --d
    c:\program files\Norton AntiVirus
    2009-01-16 19:01 <DIR> --d
    c:\docume~1\alluse~1\applic~1\Norton
    2009-01-16 19:00 <DIR> --d
    c:\program files\NortonInstaller
    2009-01-16 19:00 <DIR> --d
    c:\docume~1\alluse~1\applic~1\NortonInstaller
    2009-01-16 18:55 <DIR> --d
    c:\program files\Yahoo!
    2009-01-16 18:55 <DIR> --d
    c:\program files\win32pad_1_5_10
    2009-01-16 18:55 <DIR> --d
    c:\docume~1\xppresp3\applic~1\Gena01
    2009-01-16 18:50 <DIR> --d
    c:\program files\MSN Messenger
    2009-01-16 18:49 <DIR> --d
    c:\docume~1\xppresp3\applic~1\bsplayer
    2009-01-16 18:49 <DIR> --d
    c:\program files\K-Lite Codec Pack
    2009-01-16 18:49 <DIR> --d
    c:\program files\FolderSize
    2009-01-16 18:47 <DIR> --d
    c:\docume~1\xppresp3\applic~1\ACD Systems
    2009-01-16 18:47 <DIR> --d
    c:\program files\common files\ACD Systems
    2009-01-16 18:46 <DIR> --d
    c:\program files\Microsoft ActiveSync
    2009-01-16 18:42 <DIR> --d
    c:\program files\DAMN NFO Viewer
    2009-01-16 18:41 <DIR> --dsh--- c:\documents and settings\all users\DRM
    2009-01-16 18:41 <DIR> --d-h--- c:\program files\WindowsUpdate
    2009-01-16 18:41 <DIR> --d
    c:\program files\Online Services
    2009-01-16 18:40 <DIR> --d
    c:\program files\common files\MSSoap
    2009-01-16 18:38 <DIR> --d
    c:\program files\Graphics
    2009-01-16 18:38 <DIR> --d
    c:\program files\Desktop
    2009-01-16 18:38 <DIR> --d
    c:\program files\Unlocker
    2009-01-16 18:38 <DIR> --d
    c:\program files\Windows NT
    ==================== Find3M ====================
    2009-01-16 19:01 124,464 a
    c:\windows\system32\drivers\SYMEVENT.SYS
    2009-01-16 19:01 60,808 a
    c:\windows\system32\S32EVNT1.DLL
    2009-01-16 19:01 10,635 a
    c:\windows\system32\drivers\SYMEVENT.CAT
    2009-01-16 19:01 806 a
    c:\windows\system32\drivers\SYMEVENT.INF
    2009-01-16 18:48 2,301 a
    c:\windows\mozver.dat
    2009-01-16 18:39 21,640 a
    c:\windows\system32\emptyregdb.dat
    2008-12-12 05:08 36,272 a----r-- c:\windows\system32\drivers\SymIM.sys
    2008-09-17 15:16 549,159 a--shr-- c:\program files\Norton2009Reset.exe
    ============= FINISH: 16:51:04.51 ===============
  • edited January 2009
    Katana wrote:
    Please download DDS and save it to your desktop.
    • Disable any script blocking protection
    • Double click dds.scr to run the tool.
    • When done, DDS.txt will open.
    • Click Yes at the next prompt for Optional Scan.
    • Save both reports to your desktop.


    Please include the contents of the following in your next reply:

    DDS.txt

    Attach the following report to your post by clicking the Manage Attachments button under Additonal Options>Attach Files on the composition page. Browse to where you saved the file, and click Upload.

    Attach.txt
    Sorry forgot to add that
    Yes I have P2P software which Vuze
  • edited January 2009
    There is no sign of infection, I suspect that the alert is due to your P2P program.

    When did you re-format ?

    Kaspersky Online Scanner .
    Your Antivirus and/or Antispyware may give a warning during the scan. This is perfectly normal
    NOTE:- This scan is best done from IE (Internet Explorer)

    NOTE:- Vista users should start IE by Start(Vista Orb) >> Internet Explorer >> Right-Click Run As Admin
    Go Here http://www.kaspersky.com/kos/eng/partner/default/kavwebscan.html

    Read the Requirements and limitations before you click Accept.
    Once the database has downloaded, click My Computer in the left pane
    Now go and put the kettle on !
    When the scan has completed, click Save Report As...
    Enter a name for the file in the Filename: text box and then click the down arrow to the right of Save as type: and select text file (*.txt)
    Click Save - by default the file will be saved to your Desktop, but you can change this if you wish.


    **Note**

    To optimize scanning time and produce a more sensible report for review:
    • Close any open programs.
    • Turn off the real-time scanner of all antivirus or antispyware programs while performing the online scan.

    Note for Internet Explorer 7 users: If at any time you have trouble viewing the accept button of the license, click on the Zoom tool located at the bottom right of the IE window and set the zoom to 75%. Once the license is accepted, reset to 100%.
  • edited January 2009
    Katana wrote:
    There is no sign of infection, I suspect that the alert is due to your P2P program.

    When did you re-format ?

    Kaspersky Online Scanner .
    Your Antivirus and/or Antispyware may give a warning during the scan. This is perfectly normal
    NOTE:- This scan is best done from IE (Internet Explorer)
    NOTE:- Vista users should start IE by Start(Vista Orb) >> Internet Explorer >> Right-Click Run As Admin
    Go Here http://www.kaspersky.com/kos/eng/partner/default/kavwebscan.html

    Read the Requirements and limitations before you click Accept.
    Once the database has downloaded, click My Computer in the left pane
    Now go and put the kettle on !
    When the scan has completed, click Save Report As...
    Enter a name for the file in the Filename: text box and then click the down arrow to the right of Save as type: and select text file (*.txt)
    Click Save - by default the file will be saved to your Desktop, but you can change this if you wish.


    **Note**


    To optimize scanning time and produce a more sensible report for review:
    • Close any open programs.
    • Turn off the real-time scanner of all antivirus or antispyware programs while performing the online scan.
    Note for Internet Explorer 7 users: If at any time you have trouble viewing the accept button of the license, click on the Zoom tool located at the bottom right of the IE window and set the zoom to 75%. Once the license is accepted, reset to 100%.
    Hello, my report is enlisted below
    I'd also like to ask you what anti-virus would you recommend?
  • edited January 2009
    Katana wrote:
    When did you re-format ?
    I downloaded a P2P software called "Utorrent" and then I got this error at start up that my "system32" file was missing so i repaired my windows and unistalled the software.
    after unistalling and fully formatting...I kept getting these intrusion alerts from Norton Anti-Virus so I started ignoring them then i downloaded "Vuze" coz i think its trusted since "Java" made it
  • edited January 2009
    I'd also like to ask you what anti-virus would you recommend?
    Paid
    Kaspersky or Nod32

    Free (for home users)
    Avira or Avast
    I downloaded a P2P software called "Utorrent" and then I got this error at start up that my "system32" file was missing so i repaired my windows and unistalled the software.
    after unistalling and fully formatting...I kept getting these intrusion alerts from Norton Anti-Virus so I started ignoring them then i downloaded "Vuze" coz i think its trusted since "Java" made it

    There is no such thing as a safe P2P program
    P2P programmes form a direct conduit onto your computer, their security measures are easily circumvented, and Malware writers are increasingly exploiting them to spread their wares onto your computer. Further to that, if your P2P programme is not configured correctly you may be sharing more files than you realise. There have been cases where people's Passwords, Address Books and other personal, private, and financial details have been exposed to the file sharing network by a badly configured programme.

    This article from InfoWorld illustrates perfectly the dangers of a poorly configured P2P progamme.
    http://www.infoworld.com/article/07/09/06/Seattle-man-arrested-for-p-to-p-ID-theft_1.html

    Many of the programmes come bundled with other unwanted programmes, but even the ones free of any bundled software are not safe to use.

    When you use them you are downloading software from an unknown source directly onto your computer, bypassing your Firewall and Anti-Virus software. Hardly surprising then that many of these Downloads are being targeted to carry infections.

    If you are getting the same alert as you did before you reformatted, then the most likely reason is Utorrent.
    When you use P2P software, you transmit your IP and details of files on your machine to thousands of users.
    There is no way of knowing if this is just a case of a Utorrent user trying to "share" off your machine or a malicious attack.
    There is also not a lot you can do about it.
  • edited January 2009
    Katana wrote:
    There is not alot you can do about it.
    I dont like the sound of that...Are you sure that there is nothing I can do to stop these intrusions???
    What about the virus scan report??? I think it had 2 infected objects...What should I do about them?
  • edited January 2009
    Katana wrote:
    If you are getting the same alert as you did before you reformatted.
    Well.... here is the full story before the torrent thing
    I downloaded a software that claimed to delete duplicates of files so I tried it and so it deleted my system32/system file and I couldn't start up
    So I formatted my computer then I reinstalled windows.
    Then I downloaded Utorrent and then the intrusion alerts kept attacking 2 days straight and then somehow my windows was screwed up again so I reinstalled windows and formatted AGAIN!
    Now I unistalled Utorrent and the intrusion alerts continue and then I downloaded Vuze since it doesnt make a difference and I'm getting intrusions either way...
    Weird thing is that the intrusions might be from my ISP so I thought that this was crazy but then when I went to www.btjunkie.com (torrent website) The first line at the top of the page says "Bittorrent anoymously. Encrypted protection of your identity (IP) even from your own ISP!"
    So...yeah thats it!
  • edited January 2009
    Do you see the pattern there ?

    Install P2P and you have problems.


    I'm sorry, but I have informed you that there is nothing I can do to help.

    Your IP is now registered somewhere that keeps trying to connect to your machine.
  • edited January 2009
    Katana wrote:
    Do you see the pattern there ?

    Install P2P and you have problems.


    I'm sorry, but I have informed you that there is nothing I can do to help.

    Your IP is now registered somewhere that keeps trying to connect to your machine.
    Okay thanks for trying anyway :S
Sign In or Register to comment.