KIS 7.0 MSSQL Intrusion detection

Discussion in 'other firewalls' started by stride000, Nov 5, 2007.

Thread Status:
Not open for further replies.
  1. stride000

    stride000 Registered Member

    Joined:
    Oct 14, 2006
    Posts:
    23
    Hi there,

    I installed the trial version of KIS 7.0 on a freshly formatted machine and i have these allerts stating: Intrusion.Win.MSSQL.worm.Helkern on UDP port 1434.

    How is that possible since the machine just been rebuilt and not connected on the internet until KIS was installed?

    Thanks
     
  2. MikeNash

    MikeNash Security Expert

    Joined:
    Jun 9, 2005
    Posts:
    1,654
    Location:
    Sydney, Australia
    This would appear to be a false positive. KIS seems to mistake the SQL worm for the SQL Server.

    So, if you installed from legit disks - should be nothing to worry about.
     
  3. TonyW

    TonyW Registered Member

    Joined:
    Oct 12, 2005
    Posts:
    2,634
    Location:
    UK
    I've had five of these intrusion attempts today, but since I've turned off the alerts, I wasn't bothered by them.

    It's possible to turn off the notifications for these: go to Settings/Appearance/Events notification, click on Advanced and untick Hacker attack detection.
     
Thread Status:
Not open for further replies.