Hello,

Over the past few days, Norton AV has alerted me to a worm intrusion, always with the same information:

Intrusion: Portscan
Intruder: 192.168.1.1(domain(52))
Protocol: UDP
Attacked IP: GSVCONGENITALOP(192.168.1.4)
Attacked Port: 3993

Three of the alerts occured while loading a friend's MySpace page, and one occured when clicking on a item on Half.com.

Previously, I've had no alerts about worm intrusions, and I find this one a little odd. I readily admit to not being the most computer savvy individual, but isn't 192.168.1.1...well, me?

I'm running WinXP, with Norton AV, up to date, as well as ZoneAlarm and Ewido. I've had no other reports of any nature whatsoever, and the HiJackThis scan I just completed shows nothing unusual.

I appreciate any advice on this matter. Thanks.

Hi,

That should be your router if you are on DSL/Cable (192.168.1.1).
I had that probelm with Norton Internet Security on my machine.
Norton support told me to make a rule to place the router address in the trusted computers zone.

Moved this to a more appropriate forum.

_________________

Microsoft MVP Consumer Security 2006, 2007 & 2008