How do I close ports? AND/OR stop this damn attack thing

ToWhateverEnd

New Member

Offline

Posts: 12

How do I close ports? AND/OR stop this damn attack thing

« on: March 09, 2005, 02:26:00 PM »

My Kaspersky anti-virus pops up a few times a day (maybe 2-4) saying "Your internet has tried to be attacked by Helkern from address [insert an IP address here]. It has been successfully repelled.

Now from what I read, Helkern spreads through port 1434 on Microsoft Server SQL or something? I don't even have that on my computer, so how is the port that Helkern tries to attack on open? I did netstat -a and it doesn't show port 1434 open.

Either way I'm getting sick of this Helkern thing trying to attack me, I'm not running a network or anything so why would it try to get on my computer?

I have up to date anti virus definitions and have scanned my computer 3 times in the past 2 days, I have no infections. It keeps blocking out this Helkern thing, but nevertheless it's irritating to have a pop up screen scare the crap out of me everytime it blocks it.

How can I stop this?


	Logged

Swimmer

Vice Admin
TMN Seasoned Veteran

Offline

Gender: Male

Posts: 6373

Re: How do I close ports? AND/OR stop this damn attack thing

« Reply #1 on: March 09, 2005, 02:35:45 PM »

get a firewall... zone alarm should take care of this.. my guess is that you might have spyware that came before the attacks started.. which is listening for the attack.. It pretty much would act like a proxy... Run a spyware scan and put a firewall on and you should be good


	Logged

Indestructable

Sophist Member
Expert

Offline

Gender: Male

Posts: 1306

Test My?

Re: How do I close ports? AND/OR stop this damn attack thing

« Reply #2 on: March 09, 2005, 03:14:06 PM »

no firewall would probably explain it in 2 words...haha!

if ya don't have one man, get a firewall!


	Logged

Have a Motorola cell phone? Feel like making it cool instead of boring ole' stock like everyone else's? Well, that's good! Click here to become a member, and we'll get you modding your phone in no time! Yes, by the way, this certainly includes the RAZR. My name on there is br3nn4n, so if you join and just wanna say Hi or are completely lost as to where to begin, PM me and I'll help ya out

lorne

Global Moderator
TMN Friend

Offline

Posts: 691

24/7 testmy.net Tech Support :P

Re: How do I close ports? AND/OR stop this damn attack thing

« Reply #3 on: March 15, 2005, 09:57:07 PM »

Personally i wouldn't get Zone Alarm. I did extensive testing on every firewall i could find. Zone Alarm has so many holes in it you can use it for a strainer. 2 best were Agnitum Outpost, and Tiny Personal Firewall. Agnitum was a brick wall, no leak tests got through and that was with default setup....amazing. Tiny personal firewall only failed one with default setup, so with a little tweek here and there it would be very good also..... Get a Firewall!!! Laughing


	Logged

http://the-darksidel2.com/forum

peepnklown

Global Moderator
Expert

Offline

Gender: Male

Posts: 1260

Rabbi peepnklown

Re: How do I close ports? AND/OR stop this damn attack thing

« Reply #4 on: March 16, 2005, 04:05:43 AM »

Software firewalls are not the long term answer.
Outpost, Agnitum
Kerio Personal Firewall

Long term answer, get yourself a HARDWARE firewall.


	Logged

DEAD NUMBER 339 = Hard Electronic Music

.s1

Vice Admin
TMN Sr. Veteran

Offline

Gender: Male

Posts: 3471

Keep up :police:

Re: How do I close ports? AND/OR stop this damn attack thing

« Reply #5 on: March 16, 2005, 07:32:03 AM »

Firewalls just make people more paranoid... Especialy if you have it set to tell you when an possible attack occurs. I used to use zone alarm pro, and that thing would go off 1000x times a day. I mean non stopped. Their is no way in hell i would be getting that many "hack attempts". Best thing i found is to just ignore it. Unless your mouse starts moving on its own, or typing without you touching anything... just ignore it.


	Logged

Signature:
*~ Member Since: September 20, 2004 ~*
running 10s outbound test (client to server) . . . . . 4.62Mb/s
running 10s inbound test (server to client) . . . . . . 20.62Mb/s