Page 1 of 1

MS ANSI Integer Overflow TCP

PostPosted: Wed Mar 15, 2006 10:57 pm
by Bobtheduck
I keep getting an alert from Norton that I'm getting invaded by MS ASNI Integer Overflow TCP

It even lists an IP, but that doesn't do me much good... Well, the same IP has tried to invade MY COMPUTER specifically like 5 times... What's up with that? Why is someone targeting me? I downloaded the patch that was supposed to stop this, but it wouldn't install because windows said my current update was better than that anyhow... Anyone know anything about this?

This may only happen when I'm on Yahoo... When Yahoo has been turned off, I haven't been getting these messages... I'm not just gonna ditch yahoo entirely, though...

Sorry, it's "ASN1" not "ANSI"

EDIT 2: Nope, Just got the warning with YAHOO turned off... Someone is trying to hit just me...

PostPosted: Wed Mar 15, 2006 11:28 pm
by Locke
Have you tried using Trillian instead of YIM?

PostPosted: Wed Mar 15, 2006 11:41 pm
by Bobtheduck
Yes. And since I turned trillian off, I haven't been getting targeted... It only happened through either my AIM account or my MSN account... That's what I run through trillian...

EDIT: I take that back, i got an invasion attempt even when all my messenger programs were clsoed...

PostPosted: Thu Mar 16, 2006 5:36 am
by shooraijin
Is the Windows XP firewall on?

PostPosted: Thu Mar 16, 2006 7:43 am
by Mithrandir

PostPosted: Thu Mar 16, 2006 1:23 pm
by Bobtheduck
Mithrandir wrote:You may find a bit more info at:

http://www.symantec.com/avcenter/attack_sigs/s20409.html


That's the site I went that let me download the patch, which won't install because it says I don't need it, and yet i continue getting the messages from Norton...

PostPosted: Thu Mar 16, 2006 8:43 pm
by Slater
can't you block IP addresses?

PostPosted: Thu Mar 16, 2006 9:35 pm
by Bobtheduck
I have been following it, and it appears that new IP's have been involved in this attack... *sigh* At least Norton's blocking it for now...

PostPosted: Thu Mar 16, 2006 9:47 pm
by Bobtheduck
Ok, I thought they were all from the same IP, but actually there have been about 6 or 7 IP's attacking me, it's just that Norton would block them for only half an hour (?)