Avast WEBforum

Consumer Products => Avast Free Antivirus / Premium Security (legacy Pro Antivirus, Internet Security, Premier) => Topic started by: -Wilbird- on February 23, 2005, 09:32:56 AM

Title: LSASS exploit (sxp) attack
Post by: -Wilbird- on February 23, 2005, 09:32:56 AM
Hi, sorry for my language, I'm french

I updated avast to avast  4.6.603  and he detect me (from "bouclier reseau" an entering connection : "LSASS exploit (sxp) attack from 82.127.189.130:445 "  blocked

I never had this alarm with the old version.....   ???

thx for your answers
-Wilbird-


--------------------------------------
Wxp-sp2-Avast-kerio-SS&D-adaware-SG-SB>>> (updated)
Title: Re: LSASS exploit (sxp) attack
Post by: Eddy on February 23, 2005, 09:39:24 AM
And your question is?
Title: Re: LSASS exploit (sxp) attack
Post by: -Wilbird- on February 23, 2005, 09:46:46 AM
.....LoL..... :D

it is a known problem of the new version or a real attack?
Title: Re: LSASS exploit (sxp) attack
Post by: Eddy on February 23, 2005, 09:49:39 AM
It is not a problem, since Avast blocked it ;)
And the LSASS exploit is really old.
Worms like Sasser and Blaster are using this exploit.
Just make sure you have ALL security patches/updates installed for your system.

Nothing to worry about if you have your system up-to-date and have configured Avast and your firewall correctly.

EDIT: Make yourself familiar with the applications you use using the help files. They contain a lot of information.
Also use the search option on this board. A lot of questions have been asked and answered here. ;)
Title: Re: LSASS exploit (sxp) attack
Post by: -Wilbird- on February 23, 2005, 10:05:18 AM

I have just  updated window. 

that then I to make of other : the message is always   ?
thx
Title: Re: LSASS exploit (sxp) attack
Post by: Eddy on February 23, 2005, 10:48:39 AM
Sorry, but I don't know what you mean.
http://world.altavista.com may be of help to you with translating to English.
Title: Re: LSASS exploit (sxp) attack
Post by: -Wilbird- on February 23, 2005, 12:39:01 PM
sorry..... :-\

 the message of alarm always appears, same after the updates window

 What do I have to make?
thx
Title: Re: LSASS exploit (sxp) attack
Post by: Eddy on February 23, 2005, 12:44:42 PM
As I said. Don't worry. Avast is blocking it and that is good.
If you don't want to see the message, disable in the options of the provider "show detailed information about performd action"

That way Avast will still work and block the attacks but you won't see the message.
Title: Re: LSASS exploit (sxp) attack
Post by: -Wilbird- on February 23, 2005, 01:19:00 PM
OK,
thank you eddy for your helping

 ;)
Title: Re: LSASS exploit (sxp) attack
Post by: drgooding on April 18, 2005, 08:32:42 PM
Yo Eddie, I have a question
I'm gettin this attack from two computers on my network but my avast blocks them all the time. Can i run the blaster and sasser removal tools on the infected computers? I tried running avast but no luck.

Title: Re: LSASS exploit (sxp) attack
Post by: Lisandro on April 18, 2005, 11:08:16 PM
Yo Eddie, I have a question
Eddy is not being logged last days  :-\ :'(

I'm gettin this attack from two computers on my network but my avast blocks them all the time. Can i run the blaster and sasser removal tools on the infected computers? I tried running avast but no luck.
And, what happens if you disable avast! to run the removal tools?
Are you sure that this particular computer is infected?
Title: Re: LSASS exploit (sxp) attack
Post by: colekata on October 25, 2010, 05:26:30 PM
It is really nice to know that Avast is really taking care of this but the question is - is there any internal file which is trying to introduce this attack which   (http://astore.amazon.com/panasonic-usa-20/detail/B002JB3BC2)Avast is confronting repeatedly? For example, if this message appears in my PC then should I assumen that LSASS or any other exe file should be healed in order to stop the repeated attempt to hack our computers?
Title: Re: LSASS exploit (sxp) attack
Post by: Asyn on October 25, 2010, 05:38:07 PM
It is really nice to know that Avast is really taking care of this but the question is - is there any internal file which is trying to introduce this attack which Avast is confronting repeatedly? For example, if this message appears in my PC then should I assumen that LSASS or any other exe file should be healed in order to stop the repeated attempt to hack our computers?

FYI: You posted to a way outdated thread...!!
Please start a new topic to ask for help in the forum.
asyn
Title: Re: LSASS exploit (sxp) attack
Post by: SpeedyPC on October 25, 2010, 05:42:35 PM
It is really nice to know that Avast is really taking care of this but the question is - is there any internal file which is trying to introduce this attack which Avast is confronting repeatedly? For example, if this message appears in my PC then should I assumen that LSASS or any other exe file should be healed in order to stop the repeated attempt to hack our computers?

FYI: You posted to a way outdated thread...!!
Please start a new topic to ask for help in the forum.
asyn


From 2005 ??? ??? ??? Are you travelling on a computer time machine or drinking to much beer ;D 
Title: Re: LSASS exploit (sxp) attack
Post by: DavidR on October 25, 2010, 06:41:51 PM
It is really nice to know that Avast is really taking care of this but the question is - is there any internal file which is trying to introduce this attack which   (http://astore.amazon.com/panasonic-usa-20/detail/B002JB3BC2)Avast is confronting repeatedly? For example, if this message appears in my PC then should I assumen that LSASS or any other exe file should be healed in order to stop the repeated attempt to hack our computers?

They are external and random attacks, not internal. Normally your firewall should be the one to detect and block these attacks (silently) but for some reason the avast Network Shield is blocking them.

What is your firewall ?