<div>
<div class="content wysiwyg-content">
In my norton anti-virus log I see: 
 
Details: Rule &quot;Default Block Dmsetup Trojan horse&quot; blocked (222.122.60.98,58). 
Inbound TCP connection. 
Local address,service is (ORANGE(my ip address),58). 
Remote address,service is (222.122.60.98,2079). 
Process name is &quot;N/A&quot;. 
&nbsp; 
 
and 
 
 
Event Details: 
Time: 3/21/2006 11:38:31 PM 
Actor: C:\WINDOWS\system32\winlogon.exe (PID=1056) 
Target: C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe 
Action: Unauthorized access 
Reaction: Unauthorized access stopped 
 
The second one gets blocked around 30 to 40 times a day. 
 
Any idea what is going on? 
 

</div>
</div>

In my norton anti-virus log I see:

Details: Rule "Default Block Dmsetup Trojan horse" blocked (222.122.60.98,58).
Inbound TCP connection.
Local address,service is (ORANGE(my ip address),58).
Remote address,service is (222.122.60.98,2079).
Process name is "N/A".
 

and


Event Details:
Time: 3/21/2006 11:38:31 PM
Actor: C:\WINDOWS\system32\winlogon.exe (PID=1056)
Target: C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
Action: Unauthorized access
Reaction: Unauthorized access stopped

The second one gets blocked around 30 to 40 times a day. 

Any idea what is going on?



A worm or trojan horse attack detected

Software firewalls, also known as host-based firewalls, provide a layer of software on one host that controls network traffic in and out of that single machine. Most operating systems now include firewall software, but many available software firewalls include central distribution, antivirus systems and disaster recovery.

Software Firewalls

Security is the protection of information systems from theft or damage to the hardware, the software, and the information on them, as well as from disruption or misdirection of the services they provide. The main goal of security is protecting assets, and an asset is anything of value and worthy of protection.  Information Security is a discipline of protecting information assets from threats through safeguards to achieve the objectives of confidentiality, integrity, and availability or CIA for short. On the other hand, disclosure, alteration, and disruption (DAD) compromise the security objectives.