Attack - Helkern
  Home FAQ Contact Sign in
microsoft.private.security.spyware.general only
 
Advanced search
POPULAR GROUPS

more...

microsoft ... spyware.general Profile…
 Up
Attack - Helkern         


Date: Oct 6, 2007 16:09

Anonymous Bob
no.how@no.way
Site Down:
http://www.superantispyware.com/downloadfile.html?productid=SUPERANTISPYWAREFREE
Also Tried: http://www.superantispyware.com/

I got the system under control, got one problem remaining - HELKERN WORM
keeps attacking my machine.
Intrusion.Win.MSSQL.worm.Helkern identified by Firewall Defender Pro 5-In-1
It don't remove the problem or change settings so it won't happen it is just
keeping a record log of it for now each time it occurs. I am running it on
High
Security (Stealth Mode).

Here is the log...
[each date/time states Attack - Helkern. The attack has been successfully
repulsed]

9/28/2007 11:51:04 PM - attacked from 202.103.11.41
9/29/2007 2:11:23 AM - attacked from 222.217.240.228
9/29/2007 3:00:10 AM - attacked from 220.168.198.58
9/29/2007 2:29:45 PM - attacked from 220...
Show full article (4.49Kb)
4 Comments
Re: Attack - Helkern         


Author: Bill Sanderson
Date: Oct 6, 2007 16:54

[not Bob]

I think you don't have a problem. Are you on a fixed IP? If not, try
getting a new one--power cycle the DSL or Cable modem.

The firewall is doing the job and keeping this stuff out--looking at logs
like that is mostly advertising for them--the windows firewall would do the
same thing and not bother you about it.

This stuff is background noise--it isn't aimed at you specfically, it's
mainly infected machines scanning for vulnerable machines to spread an
infection. The firewall is not letting the stuff in which is what you pay
it to do--tell it to keep up the good work, but not bother you about it.

(but I'll be interested in what Bob has to say!)

--

"Michael @ Webwalking.info"
discussions.microsoft.com> wrote in message
news:A39A1CDA-692F-4A4A-8721-E07AF825578F@microsoft.com...
> Anonymous Bob
> no.how@no.way
> Site Down:...
Show full article (5.52Kb)
no comments
Re: Attack - Helkern         


Date: Oct 9, 2007 00:12

OK Bill it has been doing OK, Defender Pro 5-In-1 so far.
10/6/2007 5:31:59 PM was the last entry on what I posted.

Heres what has occurred sine then....

10/6/2007 9:40:27 PM Your computer has been attacked from 202.98.223.67.
Attack - Helkern. The attack has been successfully repulsed.
10/7/2007 12:54:26 AM Your computer has been attacked from 24.187...
Show full article (8.92Kb)
no comments
Re: Attack - Helkern         


Date: Oct 9, 2007 00:32

I am now Michael @ Hotmail
Thanks Bill.

--
Super Tinkering Makes The Water Flow Across The Border and gets the Air
Generating Power Effectively. Change Illegal Alien Traffic Into Labor Force.
The Drought Is Upon Us All!
Michael @ Hotmail

"Michael @ Webwalking.info" wrote:
>
> OK Bill it has been doing OK, Defender Pro 5-In-1 so far.
> 10/6/2007 5:31:59 PM was the last entry on what I posted.
>
> Heres what has occurred sine then....
>
> 10/6/2007 9:40:27 PM Your computer...
Show full article (9.54Kb)
no comments
Re: Attack - Helkern         


Date: Oct 9, 2007 00:57

I have recycled the Cable Modem at 2:40 AM OCT 09th and set the Firewall to
Scan TCP Ports added 600 minutes to blocking or attacker IPs and chosen to
run silent, restarted the program after that till I reboot so now it will not
interfere getting in front of my mouse when it happens. Thanks for all. Just
saw a program on cable TV about the Russians attacking countries computer
systems very viciously almost every service they had was attacked even
schools and hospitals, all on purpose to prove a point and they sent out
images telling them they had been attacked and that was so easy to attack
them, Russia plans to continue the attacks. America is a bit large for them
to attack but if they are infecting machines internationally I think that is
bad politics, like setting up a highway...
Show full article (6.94Kb)
no comments