My firewall is detecting the Intrusion.win.MSSQL. Worm.Helkern every time I am on the Internet. These attacks?

Question

happen frequently. Is this normal or is someone singling out my computer. Often It happens as soon as I log on.

Answer 1

The Helkern worm (more popularly known as Slammer) attempts to gain access to vulnerable systems through your Port 1434, but your firewall is blocking these attempts and that is exactly why you have a firewall. Your 'wall is doing it's job and doing it well. Give it a cookie!

Even if Helkern / Slammer were to make it past your firewall, your computer could not be infected unless it was running Microsoft SQL Server 2000 for an operating system.

These attacks, which usually originate from China are so common that they are lumped-together with other common web crap under the moniker "internet noise".

Relax, you have nothing to worry about and you are not being specifically singled out.

Answer 2

It's normal as there are usually worms and scripts constantly scanning for vulnerable computers. You can safely ignore it since your firewall is blocking it. All you need to do is keep your firewall and antivirus updated. If it's attacking the mysql ports then it's likely a worm looking for a webserver and happens to be scanning the address space and subnet your IP is in.

Don't listen to the alarmists go to http://atlas.arbor.net and look at the top attacks. As of me writing this it's a Microsoft SQL version buffer overflow attempt which matches what your firewall is showing. Your firewall is doing it's job so just relax as there's nothing to worry about.

Answer 3

Some one is trying to hack your computer, don't use it for a few days, the hacker will be tired. Also run a virus scan. Norton, AVG , Avast are free antivirus software. Ad-aware, Ewido are free spyware removers. You can download free softwares at http://fixit.in/antivirus.html and http://fixit.in/spywareremover.html

Answer 4

turn on your firewall and anonymizer and use anti-virus and anti-spyware