Visiting site - McAFee warning

McAfee Warning when visiting our site

[Markos]

When visiting our site (hosted on a Verio VPS), I seem to be getting McAfee warnings that our site "has attempted an unsolicited connection to TCP port #*$!x on your computer."

It doesn't happen EVERY time, but more times that not.

Doesn't happen on other sites.

The port number varies each time.

Am I getting paranoid? Should I be concerned?

[pageoneresults]

Hello Markos, Welcome to WebmasterWorld!

Try searching for that exact phrase in Google. You'll find a few entries related to the issue. It appears that there may be a trojan somewhere, either on your system or coming from your site.

[Markos]

Hi, thanks for the warm welcome!

I had trawled Google up and down many times before I decided to post up here in the webmasterworld community!

I'm quite familiar with spy/malware and viruses on internal networks, but when it's on a webserver? I've not ever come across it before, and don't have a clue how to check for it or address it.

It doesn't seem to give me any problems when visiting the site with Firefox, but it does with IE.

It certainly doesn't happen all the time, just more often than not.

I've trawled so many pages in Google searching for the that phrase +"web server", etc etc. No luck yet?

Please, if you have any idea what I can do to either assure myself it's nothing to worry about, or how I might go about proving the existance of some sort of security violation.

Norton Internet doesn't show any intrusion alerts, but McAfee does.

Help!

[pageoneresults]

If you are sure that there isn't a trojan running from your local machine, then a support request to Verio would be in order explaining in detail what is happening.

TrendMicro offers a free online scanning service called Housecall. I'd run one for your local computer just to double check that it isn't a local issue first.

Trend Micro - Free Online Virus Scan
[housecall.trendmicro.com...]

[edited by: pageoneresults at 2:50 pm (utc) on May 10, 2006]

[bunltd]

Markos, are you running Norton and McAfee together? That could explain the problem - they're not really compatible. We use Verio VPS's for many sites and have never had a problem. FWIW, it sounds like the problem is on your local system.

LisaB

[Markos]

No no, there's an internal network here and my machine just happens to be running McAfee's "Secuity Centre" (it came free with the machine), whereas all the other machines are running Norton Internet Security.

It is only my machine that is reporting the issue, and it only happens when we visit our website (which I maintain).

McAfee's running 24/7 and does full disk scans weekly. I'm entirely happy there's nothing amiss on this machine.

I will drop an email to Verio though and see what they say.

Thanks for all your responses thus far.