1. You are viewing our forum as a guest. For full access please Register. WindowsBBS.com is completely free, paid for by advertisers and donations.

MS_Windows_LSASS_RPC_DS_Request Attacks

Discussion in 'Security and Privacy' started by richy_kiss_kiss, 2005/03/12.

Thread Status:
Not open for further replies.
  1. 2005/03/12
    richy_kiss_kiss

    richy_kiss_kiss Inactive Thread Starter

    Joined:
    2003/03/02
    Messages:
    37
    Likes Received:
    0
    Hi

    My firewall has been reporting this intrusion attempt for the last few weeks now. Is this just the most common attack right now or do I have a more serious problem?

    My norton anti-virus and firewall are up-to-date. My Windows XP Sp1 is up-to-date (including the up-date for this attack type). I have spy-bot and ad-ware working on my machine as well.

    Any ideas?
     
    richy_kiss_kiss,
    #1
  2. 2005/03/12
    PeteC

    PeteC SuperGeek Staff

    Joined:
    2002/05/10
    Messages:
    28,896
    Likes Received:
    389
    I guess you've seen this from Symantec?
     
    PeteC,
    #2


  3. to hide this advert.

  4. 2005/03/13
    richy_kiss_kiss

    richy_kiss_kiss Inactive Thread Starter

    Joined:
    2003/03/02
    Messages:
    37
    Likes Received:
    0
    yes...i've got this up-date for this attack type..but still no joy!
     
    richy_kiss_kiss,
    #3
  5. 2005/03/13
    PeteC

    PeteC SuperGeek Staff

    Joined:
    2002/05/10
    Messages:
    28,896
    Likes Received:
    389
    I would interpret this as the firewall is doing it's job - i.e blocking the attempt and reporting the fact to you. You might have a look through the firewall logs. There may be a check box to stop these notifications and let the firewall do it's job 'silently'.

    Which firewall are we talking about?
     
    PeteC,
    #4
  6. 2005/03/13
    richy_kiss_kiss

    richy_kiss_kiss Inactive Thread Starter

    Joined:
    2003/03/02
    Messages:
    37
    Likes Received:
    0
    Norton firewall

    The reason why I asked this question was because I thought that an attacker using this attack could only do this to someone with a vunerability to it.

    Can someone just send this attack even with the proper up-dates against it?
     
    richy_kiss_kiss,
    #5
  7. 2005/03/13
    PeteC

    PeteC SuperGeek Staff

    Joined:
    2002/05/10
    Messages:
    28,896
    Likes Received:
    389
    These probing attacks are sent out en mass - the attackers have no idea whether you are vulnerable or not, but they do know that there are plenty of PC's out there which are vulnerable. Your computer is not being specifically targeted.

    Your firewall is doing it's job (sorry, not familiar with Norton FW, use Kerio) and if you don't want to be bugged by every block that it makes look in Options for a means of turning off notifications.
     
    PeteC,
    #6
  8. 2005/03/13
    charlesvar

    charlesvar Inactive Alumni

    Joined:
    2002/02/18
    Messages:
    7,024
    Likes Received:
    0
    charlesvar,
    #7
Thread Status:
Not open for further replies.

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Accept Learn More...