KIS 7.0 MSSQL Intrusion detection

[stride000]

Hi there,

I installed the trial version of KIS 7.0 on a freshly formatted machine and i have these allerts stating: Intrusion.Win.MSSQL.worm.Helkern on UDP port 1434.

How is that possible since the machine just been rebuilt and not connected on the internet until KIS was installed?

Thanks

[MikeNash]

Originally Posted by stride000

Hi there,

I installed the trial version of KIS 7.0 on a freshly formatted machine and i have these allerts stating: Intrusion.Win.MSSQL.worm.Helkern on UDP port 1434.

How is that possible since the machine just been rebuilt and not connected on the internet until KIS was installed?

Thanks

This would appear to be a false positive. KIS seems to mistake the SQL worm for the SQL Server.

So, if you installed from legit disks - should be nothing to worry about.

[TonyW]

I've had five of these intrusion attempts today, but since I've turned off the alerts, I wasn't bothered by them.

It's possible to turn off the notifications for these: go to Settings/Appearance/Events notification, click on Advanced and untick Hacker attack detection.