What does this really mean -

[Joe for Clark]

MSRPC Malicious LSASS DS Request BO (1)

I am getting this a lot from 12.72 something something.

I think this is some kind of worm - so what do you do??? What does that even mean, really?

(From someone just happy his computer comes on in the morning)

Thanks,

Joe

[CBGLuthier]

1. May be a worm

The worm that tore things up real bad a few years ago used the lsass service.

But I am sure you should be patched agaisnt all that.


MSRPC = Microsoft Remote Procedure Call
LSASS = Local Security Authority Subsystem Service

Although I despise symantec, you may want to read the following

http://www.symantec.com/avcenter/attack_sigs/s20631.html

[Joe for Clark]

2. SO - that means I don't really have to do anything - right??

I really am just as dumb as I sound about this.

I use Norton and all that - and I keep windows up to date.

SO I can just ignore those crappy little messages that come up - I guess that was what I am asking -
"Your system has been attacked" - all that.

I learned what in integer over flow is, I guess - but when it says malicious - makes me curious.

My inclination is to ignore it - if I shouldn't be - if I should be having the computer guy in to do something - I'd appreciate that input.

Like I said - I pray every morning that the damn thing comes on.

Thanks,

Joe