Halo 1 & 2 for PC
This topic has moved here: Subject: Annoying "network attacks"
  • Subject: Annoying "network attacks"
Subject: Annoying "network attacks"
  • gamertag:
  • user homepage:
  • last post: 01.01.0001 12:00 AM PDT

Hey guys, I know this kind of thread doesn't belong in the Maw, but Flood regulars can't be trusted with good replies. And plus, this concerns my gaming as well, so this probably belongs here, I don't know.

Anyways, ever since yesterday, I've been getting these suspicious network attacks. Yesterday was the day I got my cable modem all set to go, got it installed, now I have Road Runner highspeed internet (I had to disable my internet server, which used to be Verizon Online DSL before I moved). So I have my internet connection, but while I'm surfing the web or IMing some of my friends, every 5-20 minutes or so, I get a network attack. Fortunately for me, my Kaspersky Anti-Virus Software repells every one of these annoying attacks (I've gotten around 15+ attacks starting yesterday, and now I've gotten 3 more this morning while I'm hanging around the Maw. It's good that my anti-virus software is killing every one of these intruders, but I don't feel very safe with this siege going on. Something or someone is trying to attack my computer through the internet, but I have no clue where the source is. I haven't downloaded any wierd or suspicious stuff over the past 24 hours, and I certainly haven't been talking to any intelligent hackers on the internet, or surfed up -blam!- sites.
Also, this ruins my gaming experience. While I was playing Halo multiplayer for the first time in months last night, these attacks come here and there, and forces my full screen game to minimize (the attacks come in messages, stating that my anti-virus software had repelled the attacks).

Anyways, I was wondering if any of you guys can help me. If you need to know what kind of attacks, here they are:

Intrusion.Win.Messanger.exploit from address 24.174.252.100

Another kind of attack I've been getting is:

Intrusion.Win.MSSQL.worm.Helkern from address 58.89.76.97

Please, if anyone knows anything about these certain attacks, and how I can prevent them, and where I can find the source of them, it would be highly appreciated if you guys can help me out. Also as a side-note, the addresses I've written down can vary, so I'm assuming there are multiple sources of attacks. Please, help me out here. Thank you for any knid of help you can give me.

  • 08.11.2006 7:00 AM PDT

*I sense a disturbance in the forum*
Jaws on Zanzibar?
Sniper 's Ed 101
my myspace
teh explosion
purchase a leaf blower at any Sears store
After kim saying pc gamers are more mature:
Posted by:ImSpartacus
we r?

The first one seems to be from Windows Messenger, so you can thank microsoft from that.

I get weird attacks too, but Norton blocks them.

I don't know if attacks cause this, but sometimes my xfire stops working, my custom status for xfire disappears, so I have to make a new list, my internet explorer settings always refresh every day, so I gotta go in and fix it.

  • 08.11.2006 7:18 AM PDT
  • gamertag:
  • user homepage:
  • last post: 01.01.0001 12:00 AM PDT

Yeah, I've suspected Windows Messanger for the primary attacks, for its very obvious "initials" (Win.Messanger...). But the problem is, I don't have an account on Windows Messanger. And I don't understand how the program itself is attacking my computer, I mean I haven't even opened that program for ages.
But thanks for the info, I'll look out for any more suspicious activities of my Windows Messanger program. I'll probably delete the godam thing as a last resort.

  • 08.11.2006 7:40 AM PDT
  • gamertag:
  • user homepage:
  • last post: 01.01.0001 12:00 AM PDT

Posted by: lpjuunin
Yeah, I've suspected Windows Messanger for the primary attacks, for its very obvious "initials" (Win.Messanger...). But the problem is, I don't have an account on Windows Messanger. And I don't understand how the program itself is attacking my computer, I mean I haven't even opened that program for ages.
But thanks for the info, I'll look out for any more suspicious activities of my Windows Messanger program. I'll probably delete the godam thing as a last resort.


It's most likely not your MSN IM program. It's more than likely your Messenger Service (Not related at all to the MSN IM program) that runs in the background.

Make sure you're logged into your PC with a user than has administrative rights. Right-click your "My Computer" icon and left-click on "Manage"

Click the '+' next to Services and Applications and select Services. Find the 'Messenger' service. Right-click, go to 'Properties' and set the 'Startup type' to 'Disabled.'

This should be done on pretty much all PCs that want to avoid random spam attacks from malicious websites.

Disclaimer: You screw with your PC at your own risk. I am not responsible for anything foolish that you might do. But I will say that I've turned this service off on dozens of PCs at work, home, for friends, etc and none of them have any problems, except they get less spam attacks.

  • 08.11.2006 11:34 AM PDT
  • gamertag:
  • user homepage:
  • last post: 01.01.0001 12:00 AM PDT

To ImSpartacus:

Thanks for the tip, and while I was at the local library to return a few books, I had my anti-virus software run a full system scan on my computer. But while I was gone, I had 5 more network attacks, which was pretty strange. Thanks anyways.

To McKeegan:

Thanks for the directions, but when I clicked exactly where I was supposed to click, I found out the Startup Type for Messanger was already set to "Disabled". Why am I still getting network attacks?
Also, on your disclaimer message, you stated that you are not responsible for any screw ups I do on my PC, but does that mean in general, or in disabling the Messanger? Because if there's any risk of disabling the Startup Type, please let me know. Not that it matters, for it was already set on Disabled.
Thanks anyways, but is there any other way to reduce or possibly terminate network attacks and spams?

  • 08.11.2006 12:28 PM PDT
  • gamertag:
  • user homepage:
  • last post: 01.01.0001 12:00 AM PDT

Stress not, young one. My "disclaimer" was more or less meant with [sarcasm][/sarcasm] tags.

If you've already got it disabled, that's good.

Regarding your question, there are dozens of ways to prevent these "attacks." It would be difficult to tell you any more without knowing your network setup, network hardware, connection types, etc.

To put it bluntly, a lot of these "attacks" have to do with visiting malicious websites. I can't wait for Google's new malware feature to be implemented.

  • 08.11.2006 1:02 PM PDT
  • gamertag:
  • user homepage:
  • last post: 01.01.0001 12:00 AM PDT

Posted by: McKeegan_WRX
Stress not, young one. My "disclaimer" was more or less meant with [sarcasm][/sarcasm] tags.

If you've already got it disabled, that's good.

Regarding your question, there are dozens of ways to prevent these "attacks." It would be difficult to tell you any more without knowing your network setup, network hardware, connection types, etc.

To put it bluntly, a lot of these "attacks" have to do with visiting malicious websites. I can't wait for Google's new malware feature to be implemented.


But you see, that's the problem. I haven't visited any wierd or suspicious websites. I got these attacks before I even clicked the Internet Explorer icon.

And I would like to know these "dozens" of ways to prevent "attacks". I mean I have no clue how to find my network setup, net hardware, connection types, etc. but if you tell me how I can find each one, I'd be delighted to tell you them all. That is, if you want or have the time to help me, I mean you don't have to, all of your tips, advices, and directions were highly appreciated. Thanks and thanks in advance for any other things you can help me out with later on.

  • 08.11.2006 2:40 PM PDT

I wonder if the Wolf thinks the Moon listens when he howls at it.

It happened to me alot so I didnt give my pc internet access(took the cable out) and played ps2 online for a couple years and when I finally reconnected the attacker lost interest because he couldnt get to my pc(and i didnt have my ps2 hdd). So you can either A:Wait it out like I did OR B:Get a top notch norton personal firewall.

  • 08.11.2006 5:05 PM PDT
  • gamertag:
  • user homepage:
  • last post: 01.01.0001 12:00 AM PDT

Posted by: lpjuunin
But you see, that's the problem. I haven't visited any wierd or suspicious websites. I got these attacks before I even clicked the Internet Explorer icon.


That's what they want you to think. Consider the website http://www.dhmo.org/ (it's a safe website, trust me). It has to do with dihydrogen monoxide and how dangerous it is. Athletes die from dihydrogen monoxide poisioning when they get too much of it. Children die when they get too little of it. The point is, dihydogen monoxide is H2O; water. But that website was built to look like an official site of warning against dihydrogen monoxide.

My point is thus; A malware site wouldn't be a very good site if it was obvious that it had malicioius code on it. So you may have inadverntently visited such a site, or, someone in your family may have. Good news, though, your computer has not actually been compromised, yet.

Moving on...

Intrusion.Win.Messenger.exploit:
Here is Kaspersky's response to this issue. Turn off the alert messages in Kasperspy. It will still continue to block the intrusion, but it won't create those pop-up messages anymore that minimize your game.

Intrusion.Win.MSSQL.worm.Helkern
Here is Kaspersky's response to this one. Their solution is to again, turn off the IDS so you don't get the alert messages every time. It also suggests that you install ZoneAlarm free for firewall protection.

Don't worry about the attacks. No-one is targeting you individually. There's some bot computer somewhere that is spamming a specified IP range that your router/computer happens to be in. Turn off the messaging and enjoy life! :)

  • 08.11.2006 5:22 PM PDT
  • gamertag:
  • user homepage:
  • last post: 01.01.0001 12:00 AM PDT

Posted by: McKeegan_WRX
Posted by: lpjuunin
But you see, that's the problem. I haven't visited any wierd or suspicious websites. I got these attacks before I even clicked the Internet Explorer icon.


That's what they want you to think. Consider the website http://www.dhmo.org/ (it's a safe website, trust me). It has to do with dihydrogen monoxide and how dangerous it is. Athletes die from dihydrogen monoxide poisioning when they get too much of it. Children die when they get too little of it. The point is, dihydogen monoxide is H2O; water. But that website was built to look like an official site of warning against dihydrogen monoxide.

My point is thus; A malware site wouldn't be a very good site if it was obvious that it had malicioius code on it. So you may have inadverntently visited such a site, or, someone in your family may have. Good news, though, your computer has not actually been compromised, yet.

Moving on...

Intrusion.Win.Messenger.exploit:
Here is Kaspersky's response to this issue. Turn off the alert messages in Kasperspy. It will still continue to block the intrusion, but it won't create those pop-up messages anymore that minimize your game.

Intrusion.Win.MSSQL.worm.Helkern
Her e is Kaspersky's response to this one. Their solution is to again, turn off the IDS so you don't get the alert messages every time. It also suggests that you install ZoneAlarm free for firewall protection.

Don't worry about the attacks. No-one is targeting you individually. There's some bot computer somewhere that is spamming a specified IP range that your router/computer happens to be in. Turn off the messaging and enjoy life! :)



OMG, you are a true genius, a hardworker, and an awesome friend a guy can ever ask for on a random forums. You made my life 3 billion times easier by giving me this one long post! And trust me, I'm not being sarcastic, after reading all of those forum posts in the Kaspersky forums, it makes me feel alot better knowing that tons of other people are resisting against this minor crap as well. I mean, you surfed the web and the Kaspersky forums, I'm guessing more than an hour, to help me man. I highly appreciate it, I really do, I mean if I knew you in real life, I mean personally, I'd pay you a fortune for your selfless generosity. Thank you so much, McKeegan.

Oh, and I won't forget other people who helped me, such as ImSpartacus, fastmatt, Apoc the stunter, and omniosspartan. Thank you guys for all your help. Oh and to ImSpartacus, no prob dude.

  • 08.11.2006 6:23 PM PDT