In my experience that alert is caused by the licence-enforcement broadcast traffic sent on the LAN by Kaspersky Lab products, a competing antivirus vendor from Russia.
(Note: that datagram is actually not Microsoft LAN traffic on port 139 but IP traffic category 139, some kind of an encrypted identity protocol. Kaspersky takes it extremely seriously to prevent people pirating or overusing their softwares, they employ a lot of tech tricks for enforcement, some of them not so compatible with the rest of the world...)
By the way, the module that catches such traffic and causes the alert on it, the IDS/IPS module is no longer present in the latest FSAVCS 12.10 product version. F-Secure Corp. says this kind of protection module is no longer relevant in today's threat environment.
Best regards: Tamas Feher, Hungary.
In fact the IDS/IPS still exists in the 12.10 version, but its just removed from a IPS/IDS exclusive module and was integrated to DeepGuard Protection as HIPS.
I belive they removed the IPS/IDS module just because its getting a lot of false positive (because this module uses an old engine) and the "new" IPS/IDS engine works fine inside DeepGuard module.
This topic has been closed due to inactivity. If you would like to discuss this topic further, please start a new post.
You can reference this topic in your post by adding this link:
Visit the Community
Check our Forums or How-to & FAQs for advice or answers
View User Guides
Refer to our getting started guides and product manuals
Talk to our Support agents and get answers to your questions