Naska
-
Posts
13 -
Joined
-
Last visited
Content Type
Events
Profiles
Forums
Everything posted by Naska
-
Going to fill in that, just that router is not owned by me but more or less the internet service provider, however we have an asus router for wifi, i have checked through this one and nothing there atleast that looks odd since last time i was on that one. so it'd be safe to say that it might be the router from the service provider if so, so i might give them a call or something, cause it's quite odd so yeah.
-
Aighto, i will add some of these to the firewall as blocks just to be on safe side, and it's only these that pops up at random times, otherwise i do not see any other pop up at the time.
-
From norton, not at all, from malwarebytes it keeps blocking the prompted in the picture. Most of it originates from steam or svchost. Inbound. that's all i can see that is happening.
-
SecurityCheck.txtFSS.txt
-
msert.log
-
Also should i disable norton along with smartscreen and what not? or just smartscreen in this one?
-
I will do this tomorrow 20th april, i have now also gotten a few detections which isn't just "compromised" but riskware + now detections comes from steam.exe which is new. Just letting you know, but i will do this tomorrow asap and post it!
-
Had to change so it didn't end up as .klr, so it could become a .txt file to be able to attach it.report_2024.04.14_13.11.33klr.txt
-
Hmm okie, i will keep a look atleast, and if i do find something once more or if Norton starts acting up like it has done before with the "we see potential high outgoing traffic and then prompting miner stuff" i might want to come back and ask for advice regardless, since it has been bugging in and out for 1-2 months, of course did i change motherboard cpu and stuff, which i had laying around, updated to win11, got malwarebytes premium too just to be on safe side and planning on quitting norton as the subscription rules out. If that is fine that is! And if it is, i will redo same procedour + i will also send new screenshots if so, so i will mark this as solved for now, but for the future i'll have a look! Thank you AdvancedSetup!
-
mbst-result.zipmbst-result.zip mbst-grab-results.zip mbst-grab-results.zip mbst-grab-results.zip mbst-result.zip mbst-result.zip
-
Well on malwarebytes it sure tells me it's incoming yup. Still waiting if Norton would start giving me notifications about "high network outgoing traffic" and stuff as it did on the older system i had however so far it's just these that has happened and malwarebytes has notified me so yeah, so let's go from here, and maybe it could prevent something atleast, cause it's getting annoying to the point of i dont know what to do.
-
So Basically i've had several reports on my older desktop pc with norton saying i gotta use power eraser cause of out going traffic from my pc, once i've done that, it comes up clean, back then i downloaded malwarebytes and checked everything but nothing so i did remove my old motherboard, replaced with a new i had laying around, new cpu and all, this time i upgraded to windows 11, i also did download norton once more, but i also did go for malwarbytes premium this time cause in future i'll remove norton and use microsoft instead. But now today i got notified by malwarbytes there has been quite traffic from ip's that want to access svchost, the almost same port norton warned before with "coinminers" and stuff, so i'm trying to connect dots why this is always happening to me, it's constant at times, it disturbs during gameplay and stuff when this happens. It always starts with this CVE-2023-28771 i always get this first then after just a couple of days it starts with norton power eraser and it shows high output of traffic before prompting me about coinminer activity 2 and stuff. Within Norton this is. So far i have not recieved any warnings from norton about coinminers, but malwarebytes has detected significant outside traffic wanting to connect towards me and svchost that it has warned me about, just a few minutes after each. I would love to know thoughts and what i should do, cause i've done everything even resetting the whole pc, formating and all that stuff, but it keeps coming back somehow. I was thinking maybe it could easily just be the router, but that router i can't do anything about since it's run locally by the fiber provider. I will attach the malwarebytes screenshot here, i have yet to get norton notification yet, but i'm certain it'll come up eventually. fyi: CET timezone.
