[Chocodreamer]

Norton AV 2008 is constantly blocking a few intrusions. Found out that Symantec had patches for two (MSRPC SrvSvc NetApi Buffer Overflow and Net Bios MsPnP Querry Res Conflist BO). I need help finding patches for: MSRPC Malicious LSASS DS Request BO (1) and MS ASN1 Integer Overflow TCP and ICMP SuperScan Echo Packet. I'm not really smart with computers, but I was getting worried about getting "so many" notices of blocking these intrusions. Also, I see in the "view history" that something called "realsched.exe" has made modifications to my windows startup settings. What does that mean? I hope someone has Norton 2008 too and knows what I'm talking about. And one more thing, my computer is set on automatic updates,but do I need to download any updates myself periodically? If so, where do I go to do that? I'm using Windows XP home edition and Firefox for the browser.

Would appreciate any help. Getting very frustrated about now!

Thanks!

[ferrija1]

Why do you want to block these specific intrusions? You should be just fine it you keep Norton up to date.

Your computer should automatically download and install updates, but it's never a bad idea to check online at Microsoft's website.

http://www.update.microsoft.com/

[Chocodreamer]

Hi,
Do you have Norton 2008? I just thought it was odd that Norton seemed to be blocking these certain few so called "intrusion attempts" all the time. I wondered why it was just these and what exactly 'are' these? I looked them up on Symantec website and according to them the ones that I could find on there said that they were not good and they had a 'patch' (to stop them I guess). So I did download a 'patch' for the two I mentioned before in my last post. I know Norton did say that these were intrusion 'attempts', so I'm glad that Norton is blocking these for sure. The notice that keeps popping up 'all the time' on my screen saying that it has blocked an intrusion attempt gets to be kind of annoying though and to me to thinking that maybe I need to do something. Before I put Norton on, I was using the free version AVG for antivirus. Maybe I was always getting these intrusion attempts before with AVG and AVG just didn't notify me all the time like Norton is. Therefore I wasn't aware of it. Is there any way to at least stop getting the pop ups, but let Norton keep doing it's job? Also, randomly I guess, Norton will send a report to Symantec so they can diagnose it, etc. Every time that Norton tried to send a report it said that it couldn't go through (for some reason) and it would try later. I wonder why it 'never' could go through? Another thing I mentioned before was the "realsched.exe" that I saw in the 'history' list on Norton. It only appeared a couple times. It said that it had made modifications to my windows startup settings. Do you know anything about what that might be?

Thanks for your help!

[ferrija1]

realsched.exe is a process that updates RealPlayer. I don't know why Norton keeps telling you that an intrusion has been attempted, I'm on a Mac so I don't have Norton. You may want to post an HJT log in the security forum.