Help Im being attacked!!!

Mr Smiley

Senior member
Oct 12, 2004
550
1
0
This started yesterday night. I got two of these error messages from Kaspersky av saying a Network attack Intrusion.Win.Messenger.exploit from adress 65.XX.XXX.XXX has been succeddfully repelled. I thought nothing of it and turned off my computers. Well today Im getting the same message again! Its only on one of my computers. I checked all my computers on my network with every virus scanner known to man/adaware/spy-bot/rootkit reaveler/Hijack-this log is clean/everything! I started taking screenshots and I currently have 8 shots. All of them are Intrusion.Win.Messenger.exploit except 1 which is Intrusion.Win.MSSQL.worm.Helkern which scares me because I do have a web server although its running off of linux. The messages seems to come every 30 minutes X:23 then X:53. This is seriously freaking me out man!
Screen Shots
 

xtknight

Elite Member
Oct 15, 2004
12,974
0
71
Type this in XP console:

sc stop messenger

That will stop the worthless Windows Messenger service (not relevent to MSN Messenger). Then see if that message stops. If it does, type sc config messenger start= disabled (space between start= and disabled) so it never starts again.

Do you have a NAT router? If not, I'd really suggest one, then forwarding only the ports you really need.