PDA

View Full Version : I receive a constant message from kaspersky antivirus that it has block a intrusion attack.?


KalyanJ
03-26-2008, 12:48 PM
Its details are as follows,3/18/2008 8:33:34 PMIntrusion.Win.MSSQL.worm.Helkern220.163.43.139UD P1434The details are always the same. Is it because of some software or virus or worm inside my computer (if any). Please help

jibbarjabar
03-26-2008, 01:20 PM
The Helkern worm (more popularly known as Slammer) attempts to gain access to vulnerable systems through your Port 1434, but your firewall is blocking these attempts and that is exactly why you have a firewall. Your 'wall is doing it's job and doing it well. Give it a cookie!Even if Helkern / Slammer were to make it past your firewall, your computer could not possibly be infected unless it was running Microsoft SQL Server 2000 for an operating system.Which is highly unlikely. These attacks, which usually originate from China are so common that they are lumped-together with other common web crap under the moniker "internet noise".Nothing to worry about.

AnatolKuragin
03-26-2008, 01:52 PM
No, it means someone is trying to 'ping' your computer via a port. Your anti-virus is preventing that from happening and thereby keeping your computer safe!

lucee
03-26-2008, 02:24 PM
Hooray for your firewall and Kaspersky. And thanks to jibbarjab for an excellent answer. Please come back in a few days and give him the Best Answer.