Question : intrusion.generic.tcp.flags.bad.combine.attack

Hi,

I  had my own website which is hosted on dedicated server open, when my Kaspersky Anti Virus gave this message, (originating from the IP address where my site is located). And seems to have blocked my website from opening on my computer.

What is the source of this alert ? Is my website server infected ? how do i deal with this, since other people might also be getting the same alert from my website...

the status in kaspersky is "suspicious" rather than "infected"..also this is the 2nd time i am getting a network intrusion  warning   since i sifted to my mobile internet few days back

also note that now for a while i have been on on my website but have had no alarms again (i paused kaspersky , went to website and then started kaspersky again).


regards
sid

Answer : intrusion.generic.tcp.flags.bad.combine.attack

Hi,

"
Referring to that alert you've seen coming from the Anti-Hacker component of KIS 6.0, you have nothing to worry about since the «Intrusion Detection System» component in AH has already blocked that and it's just notifying you that it's doing its job.
If you've set KIS' AH in «Training Mode», the IDS will block ANY attemp coming from anyone trying to break into your PC for 60 minutes. So, you're safe.

Carlos
"

Source:
http://forum.kaspersky.com/lofiversion/index.php/t36171.html