Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

VIPRE Internet security Intrusion detection loop back traffic


  • Please log in to reply
5 replies to this topic

#1 Johnny Jack Off

Johnny Jack Off

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:07:09 AM

Posted 26 October 2014 - 09:37 AM

Hey all! Ever since moving to Finland and using my apartment's wifi, I've been getting constant notifications from Vipre's Intrusion detection system that reads:

Vipre has detected a network traffic intrusion attempt.

Remote address: 127.0.0.1

Category: Bad-unknown

Description: Bad traffic loopback traffic

Threat level: medium

Direction: Inbound

URL: http://www.sans.org/y2k/egress.htm

Action: Blocked

 

I'll get this alert about 3-5 times back to back. Hit "okay," and it'll immediately pop up again. It'll happen about every 25-30 minutes. Does anyone know what this means or is? I went to the website, and it didn't seem to be anything suspicious. Some sort of computer security company. I've run several scans with VIPRE, Roguekiller, and MAlware bytes, but they haven't picked up anything that shouldn't be there.

 

Even if no one knows the specifics, can someone tell me what loopback traffic even is? I've tried searching on google, but I haven;t really been able to find a specific answer other than it's an intrusion that attempts to redirect you to a black hole


Edited by hamluis, 29 October 2014 - 04:34 PM.
Moved from Win 7 to Am I Infected - Hamluis.


BC AdBot (Login to Remove)

 


#2 dc3

dc3

    Bleeping Treehugger


  • Members
  • 30,407 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Sierra Foothills of Northern Ca.
  • Local time:10:09 PM

Posted 26 October 2014 - 11:35 AM

http://en.wikipedia.org/wiki/Loopback


Family and loved ones will always be a priority in my daily life.  You never know when one will leave you.

 

 

 

 


#3 Johnny Jack Off

Johnny Jack Off
  • Topic Starter

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:07:09 AM

Posted 26 October 2014 - 12:15 PM

http://en.wikipedia.org/wiki/Loopback


Yes I can find Wikipedia, too. The issue is that for someone who doesn't have the mind for anything scientific (political science major who avoided anything science related as if it were the plague), it's extremely wordy and doesn't really accomplish much other than giving me a headache. Nonetheless, I think I might have an understanding.
So basically, it's a way to identify and fix various connection problems within the network? If that's the case, why does my antivirus pick it up as a malicious network intrusion?

#4 dc3

dc3

    Bleeping Treehugger


  • Members
  • 30,407 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Sierra Foothills of Northern Ca.
  • Local time:10:09 PM

Posted 26 October 2014 - 12:24 PM

Please download and install Speccy to provide us with information about your computer.  When  FileHippo opens, click on Download latest version in the upper right pane.
 
When Speccy opens you will see a screen similar to the one below.
 
speccy9_zps2d9cdedc.png
 
Click on File which is outlined in red in the screen above, and then click on Publish Snapshot.
 
The following screen will appear, click on Yes.
 
speccy7_zpsfa02105f.png
 
The following screen will appear, click on Copy to Clipboard.
 
speccy3_zps1791b093.png
 
In your next post right click inside the Reply to Topic box, then click on Paste.  This will load a link to the Speccy log.
 
 

Please download MiniToolBox, save it to your desktop and run it.
 
Checkmark the following checkbox:
 
List Installed Programs
 
 
Click on Go to start the scan.  Once it is finished highlight the text, copy it and paste it in your next post.
 
 

 
Double click on the download and choose to run the program.
 
A screen similar to the one below will open, click any key to run the program.
 
securitycheck_zpscfb86945.png
 
When the scan is finished there will be a log, copy and then paste your log in your next post.
 

Family and loved ones will always be a priority in my daily life.  You never know when one will leave you.

 

 

 

 


#5 maxxhazzard

maxxhazzard

  • Members
  • 1 posts
  • OFFLINE
  •  
  • Local time:01:09 AM

Posted 17 October 2015 - 03:10 PM

i see its been a year scents you had the bad traffiic alert rule ID 158 by vipre... you are using the intrusion detection feature of VIPRE

 the intrusion detection feature of VIPRE is only for Advanced users who wants to manage this component of the firewall. go to your firewall settings,, keep the IDS turned off and keep the firewall turned on. It will be enough protection for your home network connection.



#6 dc3

dc3

    Bleeping Treehugger


  • Members
  • 30,407 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Sierra Foothills of Northern Ca.
  • Local time:10:09 PM

Posted 18 October 2015 - 08:09 AM

i see its been a year scents you had the bad traffiic alert rule ID 158 by vipre...

This topic hasn't had a response in a year.  The original poster hasn't posted anything since last year.  I believe you can assume that you will not receive a response from this member.


Family and loved ones will always be a priority in my daily life.  You never know when one will leave you.

 

 

 

 





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users