Site Infected!

blackdragonsdg · #1 04-23-2010, 05:12 PM

Happened to me too.....here is a bit more information on it:

Code:

4/23/2010 3:47 PM,High,An intrusion attempt by google.analytics.com.scvepuxdfzar.info was blocked.,Blocked,No Action Required,HTTP Trojan Mebroot Request,"google.analytics.com.scvepuxdfzar.info (208.68.139.38, 80)",google.analytics.com.scvepuxdfzar.info/ld/kav4/,"DRAGON148-PC (192.168.1.101, 2009)",208.68.139.38 (208.68.139.38),"TCP, www-http",
4/23/2010 2:51 PM,Info,Intrusion Prevention has been enabled,Detected,No Action Required,,,,,,,Intrusion Prevention
4/23/2010 2:51 PM,Info,Intrusion Prevention is monitoring 1580 signatures. Driver version: 9.1.2.5,Detected,No Action Required,,,,,,,Intrusion Prevention
4/23/2010 2:51 PM,Info,Intrusion Prevention Engine version: 4.5.0.67 Definitions Set version: 20100415.001,Detected,No Action Required,,,,,,,Intrusion Prevention
4/21/2010 1:22 PM,Info,Intrusion Prevention has been enabled,Detected,No Action Required,,,,,,,Intrusion Prevention
4/21/2010 1:22 PM,Info,Intrusion Prevention is monitoring 1580 signatures. Driver version: 9.1.2.5,Detected,No Action Required,,,,,,,Intrusion Prevention
4/21/2010 1:22 PM,Info,Intrusion Prevention Engine version: 4.5.0.67 Definitions Set version: 20100415.001,Detected,No Action Required,,,,,,,Intrusion Prevention
4/20/2010 6:31 PM,Medium,An intrusion attempt by 68.87.74.166 was blocked.,Blocked,No Action Required,Portscan,"68.87.74.166, 53",,"DRAGON148-PC (192.168.1.101, 59865)",68.87.74.166,"UDP, Port 53",
4/20/2010 6:31 PM,Medium,An intrusion attempt by 68.87.74.166 was blocked.,Blocked,No Action Required,Portscan,"68.87.74.166, 53",,"DRAGON148-PC (192.168.1.101, 60362)",68.87.74.166,"UDP, Port 53",
4/20/2010 4:24 PM,Info,Intrusion Prevention has been enabled,Detected,No Action Required,,,,,,,Intrusion Prevention
4/20/2010 4:24 PM,Info,Intrusion Prevention is monitoring 1580 signatures. Driver version: 9.1.2.5,Detected,No Action Required,,,,,,,Intrusion Prevention
4/20/2010 4:24 PM,Info,Intrusion Prevention Engine version: 4.5.0.67 Definitions Set version: 20100415.001,Detected,No Action Required,,,,,,,Intrusion Prevention
4/18/2010 8:03 PM,Medium,An intrusion attempt by 68.87.74.166 was blocked.,Blocked,No Action Required,Portscan,"68.87.74.166, 53",,"DRAGON148-PC (192.168.1.101, 51040)",68.87.74.166,"UDP, Port 53",
4/18/2010 8:03 PM,Medium,An intrusion attempt by 68.87.74.166 was blocked.,Blocked,No Action Required,Portscan,"68.87.74.166, 53",,"DRAGON148-PC (192.168.1.101, 50654)",68.87.74.166,"UDP, Port 53",
4/18/2010 7:35 PM,High,An intrusion attempt by 93.186.117.19 was blocked.,Blocked,No Action Required,HTTP Fake Antivirus Install Request 4,"93.186.117.19, 80",93.186.117.19/main.php?land=20&affid=44704,"DRAGON148-PC (192.168.1.101, 1637)",93.186.117.19,"TCP, www-http",