Quote:
getting alot of these lately I dont know what they are or whom.
Could it be a virus or something?
|
It is a known 'WORM' attack vulnerability:
http://www.kaspersky.com/news.html?id=970183
Thankfully, the Kaspersky 'Personal Firewall Tool' did as it was designed to do by denying the exploit attempt access to port 1434.
Your continuing problem is likely a result that external traffic is able to see and probe your PC for assumed vulnerable ports. If certain ports are found open or initialized, then "Helkern" will attempt to infect a computer deemed to be running Microsoft SQL Server or similar (open port 1434).
Should your personal firewall ever get disabled, there is nothing left to protect you. For that reason, once such an attempted compromise is detected, you should consider adding a router/hardware firewall to basically hide your PC's existance and to make such traffic pretty much disappear and very unlikely.
See how visible such ports are to the Internet, here:
https://www.grc.com/x/ne.dll?bh0bkyd2 (and
PROCEED BUTTON)
Run the following scan BUTTONS:
'All Service Ports'
'User Specified Custom Port Probe' (fill in
1433, 1434 in the text input box 1st).
