Avast WEBforum

Other => Viruses and worms => Topic started by: Vuyo on May 29, 2005, 07:59:36 PM

Title: LSASS Exploit...What is it?
Post by: Vuyo on May 29, 2005, 07:59:36 PM

avast! has been stopping something called 'lsass exploit and dcom exploit', what are these. I don't understand because I have downloaded and installed all the updates that Windows updates says I need. I use Windows XP Home with SP2. What must I do to make my pc more secure? The message says that avast has blocked'lsass exploit:xxx.xx.xxx.x/tcp' and the number is that of my ISP. Thanks

Title: Re: LSASS Exploit...What is it?
Post by: DavidR on May 29, 2005, 08:16:13 PM

If you have all the windows updates you are not vulnerable to this exploit, however it doesn't stop sites, etc. trying speculatively to get it past your firewall/AV.

In this case Network Shield has recognised traffic attempting to target that exploit (avast doesn't know you have the relevant patches, etc.), blocked it and warned you... You don't have to do anything else.

The IP might well be in the range for your ISP, but that range includes its users/customers, people like yourself who may have an infected system trying to infect others.

Title: Re: LSASS Exploit...What is it?
Post by: Vuyo on May 29, 2005, 08:37:50 PM

Thanks. Glad I have avast! to protect my pc. Thanks again.  ;D