flylikeahandbag 0 #1 September 29, 2005 Hi, I'm not sure whether this is a prob, or just over sensitive s/w at my end . My works machine uses Trend Sygate and twice in two days it has detected an intrusion attempt, whilst I have been connected to DZ.com resulting in a 24 hour ban on access to the site each time. Has anyone else come across this? I have attached a screen grab of the log FYI. Bst Rgds.-------------------------------------------------------------------------- http://www.ukskydiver.co.uk Quote Share this post Link to post Share on other sites
sangiro 4 #2 October 5, 2005 Never heard of this issue before. What would qualify as an "intrusion" for your s/w?Safe swoops Sangiro Quote Share this post Link to post Share on other sites
IanHarrop 37 #3 October 5, 2005 I had a similiar problem using Norton Intternet Security (virus protection + firewall) last December. http://www.dropzone.com/cgi-bin/forum/gforum.cgi?post=1400355#1400355 In Norton, I was able to un-block the IP address for dz.com and get back in."Where troubles melt like lemon drops, away above the chimney tops, that's where you'll find me" Dorothy Quote Share this post Link to post Share on other sites
flylikeahandbag 0 #4 October 6, 2005 Its a company machine so I have little control over the s/w. The problem has not occurred to date since the original two issues. If it had only occurred the once then I would probably not have reported anything, but since it happened twice in quick succession I though I would flag it up. I can only go on what was in the Trend log and that was intrusion prevention. The other info in the log was: "[217] Microsoft Multiple Application/OS GDI+ JPEG Processing Buffer Overflow Vulnerability attempt detected (CAN-2004-200)" Means nothing to me I'm afraid. -------------------------------------------------------------------------- http://www.ukskydiver.co.uk Quote Share this post Link to post Share on other sites
AlexCrowley 0 #5 January 15, 2006 This may be related to some sort of script being detected - I've had some cases of users using certain security software getting alerts from dynamic banner scripts. I haven't investigated the issue to find out what's tripping it. Could be as simple as pulling content via CGI from a different machine. TV's got them images, TV's got them all, nothing's shocking. Quote Share this post Link to post Share on other sites
