• All Community
    • All Community
    • Forums
    • Ideas
    • Blogs
Advanced

Not what you are looking for? Ask the experts!

This forum thread needs a solution.
Kudos0

Norton Internet Security is blocking known safe sites.

Norton internet security is blocking access to known safe sites

Replies

Kudos0

Re: Norton Internet Security is blocking known safe sites.

Hello epotthof. Please provide screenshots of what you are seeing. We have no way to see what you are experiencing. Here is how to post screenshots in thread.

Cheers

"From DOS to Windows10 what a journey it has been" / MS Certified Professional / Windows 10 Home / Professional x 64 version 1903 / build 18362.239 / N360 Deluxe 22.17.3.50 / Norton Core v.282 on Android 2.00
Kudos0

Re: Norton Internet Security is blocking known safe sites.

Please find an attached ZIP file. In the file you will find a PDF file with 4 screen shots showing random medium severity issues. The other file in the ZIP folder is an Excel spread sheet. Tab 1. is a download from my computer of Recent History data. In tab 2 is a subset of Recent History data showing only the medium items in the list. Tab 3 and 4 are the same data, but from my wife's computer.

I hope this information helps. If you need more please let me know our computers are useless to us at this point.

Thanks,

Ed Potthoff

Kudos0

Re: Norton Internet Security is blocking known safe sites.

09/19/2018 7:59:41	Medium	An intrusion attempt by 104.17.105.175 was blocked.	Blocked	No Action Required	Web Attack: JSCoinminer Download 6	No Action Required	No Action Required	104.17.105.175, 80	crl.usertrust.com/AddTrustExternalCARoot.crl	ED-DESKTOP-WN10 (10.1.1.100, 55674)	104.17.105.175	TCP, www-http																	
09/19/2018 7:58:41	Medium	An intrusion attempt by 104.17.103.175 was blocked.	Blocked	No Action Required	Web Attack: JSCoinminer Download 8	No Action Required	No Action Required	104.17.103.175, 80	crl.usertrust.com/AddTrustExternalCARoot.crl	ED-DESKTOP-WN10 (10.1.1.100, 55579)	104.17.103.175	TCP, www-http																	
09/19/2018 7:58:41	Info	Intrusion Prevention Signature Auto Block has blocked IP: 104.17.103.175 for a period of: 30 minutes	Detected	No Action Required		No Action Required	No Action Required						Intrusion Prevention																
09/19/2018 7:58:41	Medium	An intrusion attempt by 104.17.103.175 was blocked.	Blocked	No Action Required	Web Attack: JSCoinminer Download 6	No Action Required	No Action Required	104.17.103.175, 80	crl.usertrust.com/AddTrustExternalCARoot.crl	ED-DESKTOP-WN10 (10.1.1.100, 55579)	104.17.103.175	TCP, www-http																	
09/19/2018 7:54:27	Medium	An intrusion attempt by rtupdate.wunderground.com was blocked.	Blocked	No Action Required	Web Attack: JSCoinminer Download 8	No Action Required	No Action Required	rtupdate.wunderground.com (54.149.37.128, 80)	rtupdate.wunderground.com/weatherstation/updateweatherstation.php?

Web Attack: JSCoinminer Download 6
https://www.symantec.com/security_response/attacksignatures/detail.jsp?asid=30356

Web Attack: JSCoinminer Download 8
https://www.symantec.com/security_response/attacksignatures/detail.jsp?asid=30358

File Attachment: 
Kudos0

Re: Norton Internet Security is blocking known safe sites.

Hello again Ed. On a good computer that isn't acting up download this program to a USB thumb drive then run it on the computers that are giving you issues. Its totally free and runs great alongside your Norton product. You may also want to clear you browser cache as well and reboot once MBAM has completed its scan. JS coinminer infections will hog all your system resources making your computer basically useless until it is removed.

Cheers

"From DOS to Windows10 what a journey it has been" / MS Certified Professional / Windows 10 Home / Professional x 64 version 1903 / build 18362.239 / N360 Deluxe 22.17.3.50 / Norton Core v.282 on Android 2.00
Kudos0

Re: Norton Internet Security is blocking known safe sites.

Hello

Also, please get a free ad blocker for your browser and o/s.

Have a Good Night and

Thanks.

Success always occurs in private and failure in full view. Windows 10 Pro 64 bit Norton Core Security Plus 22.17.3.50 Core Firmware 282 I E 11 Chrome latest version.
Kudos0

Re: Norton Internet Security is blocking known safe sites.

Thanks. Now I've got something to keep me busy tomorrow. I'm on it. Ed
Kudos0

Re: Norton Internet Security is blocking known safe sites.

For the most part your recommendations have worked and I've learned a few things along the way. I thank you all for that.

However, please find attached a single file from the Excel Spreadsheet, Tab 2, I sent yesterday. It is a URL that I send out to weatherunderground.com every few minutes 24/7(24 hours a day 7 days a week). It contains data from my Registered Personal Weather Station. These messages are being blocked about 95%-97% of the time by Norton. Making my weather station useless. I've been doing this for years with no issues until now. I do not know what changed several days ago, but I sure would like to know how to tell Norton to stop blocking these data from being sent.

Any help on this matter would be greatly appreciated.

Regards,

Ed Potthoff

File Attachment: 
Kudos0

Re: Norton Internet Security is blocking known safe sites.

Please review > How to post an image in the forums.

Zip files are not helpful unless Admin requested.  

Date & Time    Risk    Activity    Status    Recommended Action    IPS Alert Name    Default Action    Action Taken    Attacking Computer    Attacker URL    Destination Address    Source Address    Traffic Description    Category
09/19/2018 8:25:53    Medium    An intrusion attempt by rtupdate.wunderground.com was blocked.    Blocked    No Action Required    Web Attack: JSCoinminer Download 8    No Action Required    No Action Required    rtupdate.wunderground.com (54.149.37.128, 80)    rtupdate.wunderground.com/weatherstation/updateweatherstation.php?ID=KNMSANDI18&PASSWORD=Elp53020&dateutc=2018-09-19+14:25:52&action=updateraw&realtime=1&rtfreq=36&winddir=292&windspeedmph=0.0&dailyrainin=0.000&humidity=42&tempf=74.5&dewptf=49.9&baromin=30.02    ED-DESKTOP-WN10 (10.1.1.100, 58155)    rtupdate.wunderground.com (54.149.37.128)    TCP, www-http    

 Attacker URL.zip


Web Attack: JSCoinminer Download 8

If you are a Norton user and wish to access a website blocked by Intrusion Prevention, please go through the exclusion process listed at https://support.norton.com/sp/en/us/home/current/solutions/v1224806_ns_retail_en_us to exclude the Intrusion Prevention detection blocking the given website.

 https://www.symantec.com/security_response/attacksignatures/detail.jsp?asid=30358


If you believe Norton made a mistaken detection, you may submit dispute: > https://submit.symantec.com/false_positive/.

This thread is closed from further comment. Please visit the forum to start a new thread.