Exploit/LSASS2 attack

Hi this strange though that as soon(with in 1 min) as i shifted today to PPPoE client (bridged connection)based access I have started getting this new virus attack warning as detected by my panda antivirus 2006(blocked by it) every 1 minute from large no of airtel IPs .I was having the usual port forwarding problem with my YOZAN ,web dis. II so decided for the change ,though it solved all my problems about P2P usage ,and actually my speed also increased especially the web pages have started loading faster (Avg speed using EMULE and azureus 256 kbps exact,32KBps D/L ,HTTP D/Ls using IDM same speed).Another thing that though i had changed my ip address on advice Airtel CC after this change there seems to be another problem i am sometimes geting warning that there is a system problem and that there is a conflict of ips on network.I am using windows xp sp2 media center 2005 (fresh install 2 days back with all security updates)) so this virus cud not have possibly been present already in the comp.Any advice in matter cud be usefull also if others also had same virus warnings in past few days cud come forward so that this cud be inimatd to airtel to take neccesary precautions so leser speeds.I am not shifted back to previous always on type setting cos it always made my P2P ports invisible.

This is Okay... virus problem is not with your PC, its with other PC on Airtel network that are infected. These PCs are trying to attack your PC. With a LAN based connection router shields you with such attacks (but as you mentioned you have to deal with port forwards) You can use a firewall on PC (Zonealarm is a free download) to avoid these risks.

antivirusantispywarefirewallmust have for any fresh install... before connecting that network cable.

Get ZoneAlarm Security Suite 6. It includes all above components & is fast & good too.

not free dude. but excellent combination of software.

Thanks for replies .As far as securites measures i have tried all these softwares listed but now trust fully panda internet securites 2006 (includes sygates firewall) plus giant antispyware.Dont want to load my computer with tones of security solutions which i used to do prvoiously.My previous installation had kaspersky pro(on demand scn only),nod32(real time protection),giant,zone alarm pro,lavasoft adware pro,spyware doctor.But still i find my old fav panda the best.As far as network attacks i am concerned cos first i have never used any router(cant afford one) before with my previous ISPs sify ,hotwire but still rarely got so much warnings remember i have said that i used both kasperky and nod but now with these two new things Airtel PPPoE type connection and panda 2006 i am having LSASS2 warnings every one minute so either of the two is at fault.Ip conflicts disappeared after airtel cc reconfigured my modem and LAN with new ip and new gateway. hotwire provided static ips so should invite more hazzards similar to airtel PPPoE connection .

Originally posted by sachin214@Oct 1 2005, 10:56 AM
Dont want to load my computer with tones of security solutions which i used to do prvoiously.


Well I use Win 2003 and AVG free only. Free from virus attacks till date.

Not sure about spyware/adware, but my bandwidth is not consumed so not worried.

Originally posted by sachin214@Oct 1 2005, 06:26 AM
Thanks for replies .As far as securites measures i have tried all these softwares listed but now trust fully panda internet securites 2006 (includes sygates firewall) plus giant antispyware.Dont want to load my computer with tones of security solutions which i used to do prvoiously.
[snapback]26811[/snapback]

Click to expand...

[/quote]

Actually, the 2006 product doesn't use the Sygate firewall any more, that's why it's so much more stable!

I have uninstalled panda IS 2006 ,was giving me problems with P2P sharing ,it use to remember firewall rules for 1 day only to forget the next day or after say 6 hrs ,very much in the middle of a download or after a few network attacks,and then whatever rules you specify for P2P stuff it tends to block them.It seems to be bug ,will definately wait for panda to fix it,and then reinstall it.

turn of file and printer sharing in the network properties. It helps a bit too because that is one of the biggest virus exploits.