LSASS_RPC_DS_Request

  • Thread starter Thread starter Karen I
  • Start date Start date
K

Karen I

Hi

I'm a home office PC user, with Windows XP.

Over the past few days, my firewall keeps blocking "High
Level" attacks from a MS address:

LSASS_RPC_DS_Request.

Can anyone tell me if this is a high risk thing and if I
should permanently block the address?

Thanks very much indeed.

Karen
 
When you say from a Microsoft Address how do you mean?

LSASS_RPC_DS_Request is a signature for a specific
request to RPC. However this particular signature
carries the hall marks of someone trying to see if you
are vulnerable to the Sasser worm.

I wouldn't worry about it to much, your firewall has
blocked it so you are safe.

But if you can clarify the address then, we can try to
see if it's genuine, my guess is it's not.

Hope this helps

Mike Bright MCP, MSP

e:[email protected]
 
Back
Top