Author Topic: LSASS Exploit...What is it?  (Read 3175 times)

0 Members and 1 Guest are viewing this topic.

Offline Vuyo

  • Jr. Member
  • **
  • Posts: 32
  • I'm a llama!
LSASS Exploit...What is it?
« on: May 29, 2005, 07:59:36 PM »
avast! has been stopping something called 'lsass exploit and dcom exploit', what are these. I don't understand because I have downloaded and installed all the updates that Windows updates says I need. I use Windows XP Home with SP2. What must I do to make my pc more secure? The message says that avast has blocked'lsass exploit:xxx.xx.xxx.x/tcp' and the number is that of my ISP. Thanks
Win 10 Pro, avast Pro Antivirus, SpywareBlaster v5, SuperAntiSpyware Pro v8.0.1038, Comodo Firewall.

Offline DavidR

  • Avast √úberevangelist
  • Certainly Bot
  • *****
  • Posts: 87078
  • No support PMs thanks
Re: LSASS Exploit...What is it?
« Reply #1 on: May 29, 2005, 08:16:13 PM »
If you have all the windows updates you are not vulnerable to this exploit, however it doesn't stop sites, etc. trying speculatively to get it past your firewall/AV.

In this case Network Shield has recognised traffic attempting to target that exploit (avast doesn't know you have the relevant patches, etc.), blocked it and warned you... You don't have to do anything else.

The IP might well be in the range for your ISP, but that range includes its users/customers, people like yourself who may have an infected system trying to infect others.
« Last Edit: May 29, 2005, 08:17:56 PM by DavidR »
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 22.10.6038 (build 22.10.7633.734) UI 1.0.733/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Offline Vuyo

  • Jr. Member
  • **
  • Posts: 32
  • I'm a llama!
Re: LSASS Exploit...What is it?
« Reply #2 on: May 29, 2005, 08:37:50 PM »
Thanks. Glad I have avast! to protect my pc. Thanks again.  ;D
Win 10 Pro, avast Pro Antivirus, SpywareBlaster v5, SuperAntiSpyware Pro v8.0.1038, Comodo Firewall.