Kaspersky - "Attacked!" popup box

Morlan · 11 Mar 2006 at 00:11

I recieve this message a few times a day. It's always the same virus "Helkern" Why isn't the Windows Firewall catching it before it reaches Kaspersky? I also have a firewall on my router.
Kaspersky won't give me the port number that I've been attacked on, it there anyway to find out?

Morlan · 11 Mar 2006 at 01:04

Thanks pal.
That's odd as I don't have that port open on the router. I don't even have a sQL server. Any ideas why attacks are getting through on this port?

Morlan · 11 Mar 2006 at 01:49

Hi bledd. No, dmz is not turned on. But the router aside, why isn't XP Firewall blocking this port? I've checked the exceptions and there is no port 1434 open. I really don't get it. The attacking IP address is always different so something is getting through to my PC. I've done full virus scans, XP is all patched up, the router firewall is on. It's a bit of a mystery.

How could I test my router for security or open ports? Is there a site or tool that I could use?

Many thanks.

Morlan · 13 Mar 2006 at 20:24

Thanks for that ShieldsUp link. I ran a test on port 1434 and it passed. It must be a false alarm with Kaspersky as markysparky says others are having the same popup.