LSASS Exploit (SXP) attacks???

[CellBel]

Can someone please help me out here. My VM gprs is down for the whole day, now i am using my MTN backup again. The problem is that everytime i use my MTN sim i get this attacks called; "LSASS Exploit (SXP) attacks" But the ip address is not always the same. I did scan my XP in the past after these attacks, but nothing suspicious was found.

 

[gregmcc]

What package is giving you this info?

It might just be a warning that something was trying to attack your box using a LSASS vulnerability. Make sure that your box is 100% patched and you should be ok.

 

[CellBel]

Avast on-access scanner picks it up.
Avast blocks this attack everytime, but i would really like to know why this only happens with the MTN sim and not with the VM sim.

 

[gregmcc]

Maybe VM filter out the attacks with an IPS or something and MTN doesnt do any filtering.

 

[CellBel]

Maybe because VM is not a standalone service provider.
Thx gregmcc