advice about a worm intrusion alert

XP Home, limited user account. Newbie to this group - I know next to nothing about ports but am an experienced computer user otherwise.
Can anyone interpret this for me - just started to get these recently - this is only the second one. Got it while using a user account in my XP Home machine.

Security Alert - Medium Rick
Norton Internet Worm Protection has detected and blocked an intrusion attempt.
The text in More Info was as follows:
Intrusion: MS SQL PacketResolution DoS
Intruder: 192.168.1.1 (domain(53))
Risk Level: Medium.
Protocol: UDP
Attacked IP: COMPUTER NAME (192.168.1.2)
Attacked Port: ms-sql-m(1434)

The Intruder address was my router, to which one Win98SE computer is connected by ethernet (not mentioned in report) and the other on the 192.168.1.2 address is my XP Home machine, wirelessly connected to the router.

I clicked OK and then the wireless connection lost its IP and connectivity - and I had no internet access on the wireless XP machine. Router was still connected to internet fine - all lights glowing properly.

Computer upstairs 192.168.1.3 was on and could connect to the internet - no one was using it at the time of the alert. It has Zone Alarm free version to prevent any outgoing stuff, and also NAV and Spybot S&D resident (teatimer). It is on Win98SE. No alerts showing.

This machine runs Windows XP Home (user account) has NAV, Counterspy and Zone Alarm free. Wireless network is WPA-PSK with 63 character pw.

Log off and on did not restore the wireless (always does usually).
Log off and then on to Admin acct - again wireless network did not work but I got a windows error - windows is recovering from a serious error.
Still no connection.

Did a warm reboot and then everything was back to normal.

I do a Norton AV and Counterspy scan daily. Clear.

I think all the Windows/wireless hassle was due to the Norton blocking the request, and I think the "intrusion" was legitimate - but I don't want to "allow" it unless someone can explain the details to me. Many thanks to any network gurus who can interpret please.

--
Rev Robert M Jones, Wimborne Baptist Church, UK
http://www.wimborne-baptist.org.uk
Free trial of Mailwasher Pro - effective email spam filter - (commission
goes to our partners in Bulgaria)
http://fta.firetrust.com/index.cgi?id=420
.

Relevant Pages

  • Re: Cannot connect to the Internet
    ... My Windows 2000 pro PC is connected to the internet (Local Area ... Connection 2 Status icon shows "Connected" with a speed of 10.0 ... Posted via a free Usenet account from http://www.teranews.com ... user account which is interfering with the PC. ...
    (microsoft.public.mac.virtualpc)
  • RE: ICS between desktop and laptop
    ... You need to disable the wireless in the running services, ... On services make sure the windows Wireless configuration wizard not running ... I know I have to establish a new connection and name it. ... Here are some steps to perform and hopefully you will get Internet Connection ...
    (microsoft.public.windowsxp.network_web)
  • Re: Wireless connection problems caused by virus??
    ... I was just quoting my friend when he said he had "Windows own" anti virus - ... Wireless Connections" window, it reports that he is connected to his wireless ... signal strength + connection to network simultaneously. ...
    (microsoft.public.windowsxp.network_web)
  • Re: Network address finder
    ... > and/or wireless) and a new wireless access point that ... I seem to have got the WAP to perform as it ought /sometimes/. ... Connections -> Ethernet Cable Connection Status ... cannot use either the supplied (Windows) configuration software ...
    (comp.sys.acorn.networking)
  • Re: OT: ADSL safe practices and setting up a home network
    ... Can anyone give me some good novice references for what is required for a safe connection in the way of cable modems, routers, hardware firewalls, and how this is all connected? ... get you a modem and wired and wireless router for about $50. ... It is either MacOS or some version of Windows. ... The router I was able to configure simply using my browser. ...
    (Fedora)