Hi.
If you don't mind, I have a few questions for my peace of mind, and a problem with my gmail that hasn't gone away.
I do not mind at all.
1. For port scanning, I understand what you are saying that it can happen and it doesn't always mean the sky is falling. It still seems weird to me that the IP address of the attacking computer is so similar to my own. A typical Norton report (which happens 3-4 times an hour) is:
Attacking computer: xxx.xxx.192.11, 53
Destination : xxx.xxx.205.128, 56307 (my computer and a port)
Traffic description: UDP, 53
Is it normal to have the IP address be so similar?
Port UDP 53 is the default port for DNS(Domain Name Service). This is basically a distributed internet directory type service. DNS is used mostly to translate between domain names and IP addresses, and to control email delivery. The vast majority of ISP's rely on DNS to work. If DNS fails or is too slow, web sites cannot be located and email delivery stalls. Now as to why Norton is flagging this may be due to how your actual ISP operates and the DNS in use. The firewall I use on this computer regularly blocks unknown incoming connections also and this proves it is doing its job like you computer's firewall is. Also you have to remember actual IP address may be similar but this does not mean it is your computer.
2. If I try to change my password on facebook (I use firefox) or visit a lot of other sites that require typing in info I get:
"You have requested an encrypted page that contains some unencrypted information. Information that you see or enter on this page could easily be read by a third party"
This sounds bad. How much should I be worried about this? I have read that this might refer to graphics on the page and that the password part is still safe.
I am far from familiar with these types of social networking sites basically because I do not use them myself. OK from what you described it sounds that the actual site may not be up to date compared with the browser you are using. Similar occurs with my ISP's actual login page and not a lot I can do about that. Off course try using the site with Internet Explorer instead but the same warning could very well occur.
3. I am having a weird thing occur with my gmail account. About 1 in 10 times after signing out I get a pop up window that says:
"You have been signed out of this account. This may have happened because another user signed in from the same browser. To continue using this account you will need to sign in again."
I have had this problem for a while. It has happened at multiple computers, so it is not specific to my laptop. I was hoping this problem would go away like the storage devices appear to but it hasn't. I have no clue how to fix it or what the problem might be.
This may be due to the browser you are using blocking cookies for Gmail and not allowing them to be updated. As it stand though this appears to be a normal feature of GMail and it is merely informing you that you have signed out and not a cause for concern. One way around this would be to use a Email client such as Outlook Express or Mozillia Thunderbird to access your Gmail. There are several related articles on this
page that explain how to set this feature up.
Next:
Congratulations your computer appears to be malware free!
Now I have some tasks for your good self to carry out as part of a clean up process and some advice about online safety.
Importance of Regular System Maintenance:
I advice you read both of the below listed topics as this will go a long way to keeping your Computer performing well.
Help! My computer is slow!
Also so is this:
What to do if your Computer is running slowly
Clean up with OTL:
- Right-click OTL and select Run as Administrator to start the program.
- Close all other programs apart from OTL as this step will require a reboot.
- On the OTL main screen, depress the CleanUp button.
- Say Yes to the prompt and then allow the program to reboot your computer.
The above process should clean up and remove the vast majority of scanners used and logs created etc.
Any left over merely delete yourself and empty the Recycle Bin.
Reset the System Restore points:
Create a new, clean System Restore point:-
- Right click on Computer and select Properties >> System protection >> Create.
- Give this restore point a descriptive name and click Create.
- When done, click Apply >> OK.
Note: Do not clear infected/old System Restore points before creating a new System Restore point first!
Flush Old System Restore points:-
- Right click on Computer and select Properties >> System protection.
- (untick) Vista C system box an click Turn off system restore then Apply >> OK.
- Restart your computer.
- Navigate back to System protection >> (tick) Vista C system box >> Apply >> OK
Now some advice for on-line safety:
Malwarebyte's Anti-Malware:
This is a excellent application and I advise you keep this installed. Check for updates and run a scan once a week.
Other installed security software:
Your presently installed security application,
Norton Internet Security automatically checks for updates and downloads/installs them with every system reboot and or periodically if the machine is left running providing a internet connection is active.
I advise you also run a complete scan with this also once per week.
Erunt:
Emergency Recovery Utility NT, I advice you keep this installed as a means to keep a complete backup of your registry and restore it when needed.
Myself I would actually create a new back up once per week as this along with System Restore may prove to be invaluable if something unforeseen occurs!
Keep your system updated:
Microsoft releases patches for Windows and other products regularly:
- Click on Start(Vista Orb) >> All Programs >> Windows Update.
- In the navigation pane, click Check for updates.
- After Windows Update has finished checking for updates, click View available updates.
- Click to select the check box for any found, then click Install.
- When completed Reboot(restart) your computer if not prompted to do so.
Be careful when opening attachments and downloading files:
Never open email attachments, not even if they are from someone you know. If you need to open them, scan them with your antivirus program before opening.
Never open emails from unknown senders.
Beware of emails that warn about viruses that are spreading, especially those from antivirus vendors. These email addresses can be easily spoofed. Check the antivirus vendor websites to be sure.
Be careful of what you download. Only download files from known sources. Also, avoid cracked programs. If you need a particular program that costs too much for you, try finding free alternatives on
Sourceforge or
Pricelessware.
Stop malicious scripts:
Windows by default allow scripts (which is VBScript and JavaScript) to run and some of these scripts are malicious. Use
Noscript by Symantec or
Script Defender by AnalogX to handle these scripts.
Avoid Peer to Peer software:
P2P may be a great way to get lots of seemingly freeware, but it is a great way to get infected as well. There's no way to tell if the file being shared is infected. Worse still, some worms spread via P2P networks, infecting you as well. My advice is avoid these types of software applications.
Hosts File:
A Hosts file is like a phone book. You look up someone's name in the phone book before calling him/her. Similarly, your computer will look up the website's IP address before you can view the website.
Hosts file will replace your current Hosts file with another one containing well-known advertisement sites, spyware sites and other bad sites. This new Hosts file will protect you by re-directing these bad sites to 127.0.0.1.
Here are some Hosts files:
Only use one of the above.
Install WinPatrol:
WinPatrol alerts you about possible system hijacks, malware attacks and critical changes made to your computer without your permission.
Download it from
here.
You can find information about how WinPatrol works
here.
Next:
Any questions? Feel free to ask, if not stay safe!