Dear Sirs,
One of our customers has a computer running F-Secure Client Security 12.00 that is not connected to the corporate LAN. It only has Wi-Fi access to a router, for connection to the public net. The computer regularly logs incidents like these:
Date: 2015-10-15 09:10:57+02:00
Host: 192.168.0.78
User account: computername\username
Product: F-Secure Anti-Virus Internet Shield (OID: 1.3.6.1.4.1.2213.25)
Severity: warning (2)
TrapNumber: 601
Parameters:
(0) 139
(1) 0
(2) 0
(3) 0.0.0.0
(4) Intrusion attempt detected
Is this something worth investigating / fixing?
I think 139 (TCP) is "Microsoft NetBIOS session services" or the "Windows File sharing and network printers access" service in F-Secure Internet Shield parlance.
Thanks in advance, Yours Sincerely:
Tamas Feher, 2F 2000 Kft., Hungary.
