I updated avast to avast 4.6.603 and he detect me (from “bouclier reseau” an entering connection : "LSASS exploit (sxp) attack from 82.127.189.130:445 " blocked
It is not a problem, since Avast blocked it
And the LSASS exploit is really old.
Worms like Sasser and Blaster are using this exploit.
Just make sure you have ALL security patches/updates installed for your system.
Nothing to worry about if you have your system up-to-date and have configured Avast and your firewall correctly.
EDIT: Make yourself familiar with the applications you use using the help files. They contain a lot of information.
Also use the search option on this board. A lot of questions have been asked and answered here.
As I said. Don’t worry. Avast is blocking it and that is good.
If you don’t want to see the message, disable in the options of the provider “show detailed information about performd action”
That way Avast will still work and block the attacks but you won’t see the message.
Yo Eddie, I have a question
I’m gettin this attack from two computers on my network but my avast blocks them all the time. Can i run the blaster and sasser removal tools on the infected computers? I tried running avast but no luck.
It is really nice to know that Avast is really taking care of this but the question is - is there any internal file which is trying to introduce this attack which Avast is confronting repeatedly? For example, if this message appears in my PC then should I assumen that LSASS or any other exe file should be healed in order to stop the repeated attempt to hack our computers?
They are external and random attacks, not internal. Normally your firewall should be the one to detect and block these attacks (silently) but for some reason the avast Network Shield is blocking them.