Hello Avast! community I'm new to this and Im kinda desperate about my PC situation, first of all, greetings from Mexico City to all of you guys...this is your casa anytime
Well I just bought Avast Professional 4.6 (latest version) cause I had around 10 viruses and my PC was going insane (no regedit, no msconfig open, no task manager etc) it cleaned well but there is something bothering me yet.
I have a problem with the lsass.exe thing especially something my Antivirus blocks called "LSASS EXP and SXP Exploits"...
Even though my computer is supposed to be clean and the Web Protection says they're blocked on a red-letter yellow-background box...my PC still reboots by itself after 50 minutes of activity or less (being online) it says save all your info and I see this timer clock, the process is Authorized by NT/AUTHORITY and the error is
always with the
C:\Windows\system32\lsass.exe.I heard about Sasser and Blaster fuc$%rs, so I downloaded the supposed patch standing for
blaster at Windows website but it won't work, I got the Symantec
sasser patch from the official site and it says Sasser wasn't detected (And all folders scanned)
After this thing takes place my PC is rebooted showing me LSA Shell (Export Version) found a problem and had to close, the specific locations of the files with "problems" are these...this is what I find in my desktop, they look like temp directories to me but I still dont know how to erase or if they're safe to delete or infected, I ran Deep Scan like 3 hours ago and Avast didn't detect any thing.
And these are the attacks I usually get, they get blocked but still reboot my PC.
19.04.2006 03:20:29 DCOM Exploit attack
from 200.58.4.114:135
19.04.2006 03:22:39 DCOM Exploit attack
from 85.178.112.193:135
19.04.2006 17:55:11 LSASS Exploit (SXP) attack
from 65.24.130.150:445
19.04.2006 18:27:08 DCOM Exploit attack
from 61.197.116.152:135
19.04.2006 18:33:18 DCOM Exploit attack
from 81.242.204.105:135
19.04.2006 18:43:28 DCOM Exploit attack
from 200.64.30.80:135
20.04.2006 00:04:32 LSASS Exploit (SXP) attack
from 200.64.58.17:445
20.04.2006 00:19:49 LSASS Exploit (EXP) attack
from 209.234.151.130:445
20.04.2006 00:22:30 LSASS Exploit (SXP) attack
from 59.115.54.164:445
20.04.2006 00:37:43 LSASS Exploit (SXP) attack
from 65.24.130.150:445
Help me out friends I really dont wanna format and I still trust in Avast, tried other antivirus programs (Panda, Norton, NOD32) and didnt get as good results as with Avast!, could I have downloaded the wrong patches? is there a module I have to activate so I fix this? what could it be??!!.....I wait for your answers thanks in advance and greetings from your friend. :'(