Date: 3/23/2007 3:11:40 PM (GMT-7)
IP Address: 188.8.131.52
In Reply to: Virus problem! posted by Cristi
It's called the Helkern worm AKA "Slammer", or "Sapphire". It is sent by bots and multiplies extremely fast. Once it gets access to your network it will jam it up with its own copies until you cannot access the internet anymore. It is NOT a virus or a Trojan. It is a network worm. Even though it comes in different ip addresses they all come in the same port, which is 1434. Blocking that port will stop the attacks. Setting your computer on stealth mode from your firewall will also stop the attacks. The worm will only infect servers running under the popular Web-enabled database Microsoft SQL Server 2000. If you don't have that installed then the worm will do no harm. Also uninstalling Kaspersky will be a stupid thing to do for it is the #1 Anti-virus product followed by Nod32 even though not that popular. I hope this has helped people.
|[ View FollowUps | Post Followup | E-Mail Sender | Main ]|
[No follow-ups for this posting]
Post a Followup