| > Been attack from internet | > Network attack intrusion.win.MSSQL worm hellkern from adress 10.96.1.2 | > has been succesfull repelled. | | That looks like a message of an inbound attack, so it's most likely not | your computer that is infected (I suppose 10.96.1.2 is not the IP | address of your box). You can use a network sniffer (e.g. Ethereal) to | make sure. If it is an inbound attack (and you are not running an MS | SQL-Server or MSDE) you can safely ignore these messages. |
NetRange: 10.0.0.0 - 10.255.255.255 CIDR: 10.0.0.0/8 NetName: RESERVED-10 Parent: NetType: IANA Special Use NameServer: BLACKHOLE-1.IANA.ORG NameServer: BLACKHOLE-2.IANA.ORG Comment: This block is reserved for special purposes. Comment: Please see RFC 1918 for additional information.
In other words: the attack is NOT coming from the public internet, but from something inside your local network. If your PC is part of a company network: warn your system administrator. If your PC is part of a home network: one of he other PCs on the home network is infected.
SB