Scanning...

Alpine · #1 17th Oct 05, 10:48 PM

Hi guys, at my job, we have now internet.... but .... since we've been connected, my Antivirus ( Kapersky ) say that msg

HELKERN IP ...... ( giving me a IP here )

Each ip i got are different.....

Did someone is trying to make a hack on our computer or this is only a virus is scanning the network of my ISP ?!

I will post a screenshot soon !! ( 2morow )

roadworker · #2 18th Oct 05, 09:47 PM

It's possably a automated portscanner,scanning within an IP range.......

DoG · #3 18th Oct 05, 11:28 PM

Helkern is another name for the "Slammer" or "Sapphire" worm, if your company uses SQL server or MSDE 2000 you will want to read this page:

http://www.microsoft.com/sql/techinf...y/slammer.mspx

The slammer detection and removal tool can be found here:

http://www.microsoft.com/technet/arc...lammerrea.mspx

Alpine · #4 19th Oct 05, 12:24 AM

Thx guys for thoses info !!

Dog: We don't use SQL and MSDE !! But im gonna check thoses link you gave me !!

DoG · #5 19th Oct 05, 04:11 PM

It's probably someone scanning for the exploit on your system then, do you have a firewall? AV is only good when it recognises a virus or worm, new infections take time to be reported and definitions have to be updtaed etc
A firewall would allow you to block suspicious programs from accessing the net. As a general rule if you haven't installed anything new on the system then anything new trying to access the net needs blocking

Alpine · #6 20th Oct 05, 12:18 PM

We have a Firewall !! The one that come with XP !!

roadworker · #7 20th Oct 05, 08:03 PM

Quote:

Originally Posted by Alpine

We have a Firewall !! The one that come with XP !!

Can only stop unwanted inbound traffic,not outbound....
If something you downloaded tries to phone home or collects sensitive info about your computer and connects to a malicious source,you won't notice it....

DoG · #8 21st Oct 05, 02:04 AM

As roadworker point's out- it's not really a firewall as such, all it can do is block inbound traffic. You need a seperate firewall by a reputable software house for maximum protection. Do some reading before you decide to purchase a firewall, some of the ones on sale have more hole's than a PG Tip's teabag and aren't worth the time it takes to install them!