Donate Now Goal amount for this year: 799 USD, Received: 100 USD (13%)
Please donate to help support this website. The funds will be used to purchase owned license of LiteSpeed Web Server Enterprise (2-CPU). It provides superior performance in terms of raw speed, scalability and anti-DDoS capabilities.

Results 1 to 4 of 4
  1. #1
    Senior Techie
    Points: 4,055, Level: 40
    Level completed: 53%, Points required for next Level: 95
    Overall activity: 0.5%
    Achievements:
    31 days registered3 months registered1 year registered100 Experience Points500 Experience Points

    Join Date
    Sep 2009
    Location
    india
    Posts
    266
    Liked
    0 times

    win.Mssql.worm.helkern attack

    currently i am using kis2010 but i always got a warning message that "win.Mssql.worm.helkern attack udp from 61.134.60.60 to local port 1434 "
    after every one hour i got this message from kaspersky. i am really confused what is this??

  2. #2
    Star
    Points: 9,970, Level: 66
    Level completed: 80%, Points required for next Level: 80
    Overall activity: 17.0%
    Achievements:
    31 days registered3 months registered1 year registered100 Experience Points500 Experience Points

    Join Date
    Jul 2008
    Location
    Eastern Canada
    Posts
    1,395
    Liked
    30 times
    I don't know if there's anything in this thread that's helpful to you.
    http://forum.kaspersky.com/index.php...4&#entry324334

  3. #3
    Tech Wiz
    Points: 6,587, Level: 53
    Level completed: 19%, Points required for next Level: 163
    Overall activity: 0.5%
    Achievements:
    31 days registered3 months registered100 Experience Points500 Experience Points1000 Experience Points

    Join Date
    Oct 2009
    Posts
    572
    Liked
    6 times
    It's probably a bot attack - just hitting all IP's within a certain range on port 1434. The warning is saying that it's blocked so there is nothing you can do

    However if you are annoyed by that continuous kaspersky popup, you can create a rule (the last option in the pop-up), select block>and all network activity. That should do it.
    If nothing else works, open command prompt and type 'del C:\Windows'

  4. #4
    Junior Techie
    Points: 1,951, Level: 26
    Level completed: 51%, Points required for next Level: 49
    Overall activity: 1.1%
    Achievements:
    31 days registered3 months registered100 Experience Points500 Experience Points1000 Experience Points

    Join Date
    Nov 2009
    Location
    Brazil
    Posts
    179
    Liked
    0 times
    if you dont have installed windows server ignore this warning

 

 

Similar Threads

  1. Here You Are e-mail worm
    By Ande in forum Spyware/Viruses
    Replies: 28
    Last Post: 09-15-2010, 08:44 PM
  2. Remove Here You Are Worm
    By ahashmi06 in forum Security Bulletin
    Replies: 0
    Last Post: 09-15-2010, 08:40 PM
  3. Suspect of a worm
    By muaan in forum Spyware/Viruses
    Replies: 6
    Last Post: 04-19-2009, 07:45 AM
  4. Conficker Worm
    By ceyfer in forum Spyware/Viruses
    Replies: 18
    Last Post: 03-18-2009, 08:16 PM
  5. A New Variant of Koobface Worm?
    By Solaris in forum Spyware/Viruses
    Replies: 8
    Last Post: 03-08-2009, 06:43 PM
All times are GMT +8. The time now is 08:25 PM.