[preiseahn]

Got it.

Thanks so much.

[Advertisements]

You are welcome.

One last question if you dont mind, did your firewall alert say whether the alert was for an incoming intrusion attempt or an outgoing connection attempt?

UKBiker

[ukbiker]

You are welcome.

One last question if you dont mind, did your firewall alert say whether the alert was for an incoming intrusion attempt or an outgoing connection attempt?

UKBiker

[preiseahn]

I'm not sure whether it was incoming or outgoing.

Also, I am (was) completely up-to-date on patches/updates. And exploit warning is still coming full speed. I've tried doing some searching and lots of people are getting this problem, apparently. The Trend Micro site has its own page for the warning and it says this:

"This detection is not a detection for the vulnerability of your machine. If you got this warning, it is an indication that a malicious piece of code passed through your network or your machine, but was detected by Trend Micro as MS04-011_LSASS_EXPLOIT.

If you have patched your system against the LSASS Vulnerability, then your system should be safe from the damage that may be brought about by this exploit code. "

So, if I'm patched against I should be fine, right? I think I'm patched.

[ukbiker]

Hi

Microsoft patched this vulnerability a while ago, but it is worthwhile checking that you are fully patched anyway. As long as you cleaned out the java cache and all your temps etc as i described before, then purged the system restore by switching it off, rebooting and switching restore back on again tocreate a new, clean restore point you are probably OK. An infected system restore point was probably why you were getting detections from the AV applications but they were unable to fix the problem.

Make sure that you get the applications I suggested, especially ApywareBlaster and Spywareguard, they will give you a good multilayered defence against all the nasties out there.

have a good look around the site here, there is a lot of interesting stuff. Any questions, feel free to PM me.

UKBiker

[preiseahn]

Alright. Thanks.

[ukbiker]

Since this issue appears to be resolved ... this Topic has been closed. Glad we could help.

If you're the topic starter, and need this topic reopened, please contact a staff member with the address of the thread.

Everyone else please begin a New Topic.