[ Motoe770 @ 10.10.2007. 10:14 ] @
Imam instaliran kaspersky internet security 7 i jutros je počeo da izbacuje jedno 20 poruka u o blokiranim napadima
nazivi napada iz izveštaja su:
9.10.2007 23:51:05 Intrusion.Win.LSASS.ASN1-kill-bill.exploit 81.18.61.222 TCP 445
10.10.2007 0:02:49 Intrusion.Win.LSASS.exploit 81.18.60.179 TCP 445
10.10.2007 0:02:50 Intrusion.Win.LSASS.ASN1-kill-bill.exploit 81.18.60.179 TCP 445
10.10.2007 0:29:02 Intrusion.Win.LSASS.exploit 81.18.66.54 TCP 445
10.10.2007 0:54:54 Intrusion.Win.LSASS.ASN1-kill-bill.exploit 65.171.238.160 TCP 139
10.10.2007 1:10:35 Intrusion.Win.NETAPI.buffer-overflow.exploit90.2.21.95 TCP 139
10.10.2007 1:21:00 Intrusion.Win.NETAPI.buffer-overflow.exploit 86.145.217.185 TCP 139
10.10.2007 1:33:31 Intrusion.Win.LSASS.exploit 81.4.195.201 TCP 139
10.10.2007 1:33:32 Intrusion.Win.LSASS.ASN1-kill-bill.exploit 81.4.195.201 TCP 139
10.10.2007 1:53:31 Intrusion.Win.LSASS.exploit 81.18.49.14 TCP 445
10.10.2007 1:53:31 Intrusion.Win.LSASS.ASN1-kill-bill.exploit 81.18.49.14 TCP 445
10.10.2007 2:14:10 Intrusion.Win.LSASS.exploit 81.18.61.141 TCP 445
10.10.2007 2:14:10 Intrusion.Win.LSASS.ASN1-kill-bill.exploit 81.18.61.141 TCP 445
10.10.2007 2:20:40 Intrusion.Win.NETAPI.buffer-overflow.exploit 61.229.146.159 TCP 139
10.10.2007 3:14:33 Intrusion.Win.LSASS.exploit 81.4.195.201 TCP 139
10.10.2007 3:14:37 Intrusion.Win.LSASS.ASN1-kill-bill.exploit 81.4.195.201 TCP 139
10.10.2007 3:43:53 Intrusion.Win.LSASS.exploit 81.18.61.50 TCP 445
10.10.2007 3:43:53 Intrusion.Win.LSASS.ASN1-kill-bill.exploit 81.18.61.50 TCP 445
10.10.2007 6:19:37 Intrusion.Win.LSASS.exploit 81.18.61.50 TCP 445
10.10.2007 6:19:42 Intrusion.Win.LSASS.ASN1-kill-bill.exploit 81.18.61.50 TCP 445
10.10.2007 8:45:39 Intrusion.Win.LSASS.exploit 81.18.50.146 TCP 445
10.10.2007 8:45:40 Intrusion.Win.LSASS.ASN1-kill-bill.exploit 81.18.50.146 TCP 445
10.10.2007 9:04:39 Intrusion.Win.LSASS.exploit 81.18.59.254 TCP 445
10.10.2007 9:04:39 Intrusion.Win.LSASS.ASN1-kill-bill.exploit 81.18.59.254 TCP 445
10.10.2007 9:06:06 Intrusion.Win.LSASS.exploit 81.18.61.141 TCP 445
10.10.2007 9:06:06 Intrusion.Win.LSASS.ASN1-kill-bill.exploit 81.18.61.141 TCP 445
10.10.2007 9:08:51 Intrusion.Win.LSASS.exploit 81.18.59.20 TCP 445
10.10.2007 9:08:51 Intrusion.Win.LSASS.ASN1-kill-bill.exploit 81.18.59.20 TCP 445
10.10.2007 9:12:12 Intrusion.Win.LSASS.exploit 81.18.59.114 TCP 445
10.10.2007 9:12:12 Intrusion.Win.LSASS.ASN1-kill-bill.exploit 81.18.59.114 TCP 445
10.10.2007 9:43:43 Intrusion.Win.LSASS.exploit 81.18.59.50 TCP 445
10.10.2007 9:43:43 Intrusion.Win.LSASS.ASN1-kill-bill.exploit 81.18.59.50 TCP 445


Mene interesuje samo šta je pokušano da se uradi sa tim napadima?
i interesantno je da su te ip adrese od neobee provajdera kao i moja?
[ Marcony @ 10.10.2007. 10:56 ] @
Neko je pokusao da pristupi File and Printer servisu tvog racunara.

Uradi sledece:

Network Connections --> desni klik na ADSL konekciju --> Properties --> odcekiraj File and Printer Sharing for Microsoft Newtorks

Pozdrav!
[ Slobodan Trebovac @ 10.10.2007. 13:29 ] @
Ako ne rijesis problem, nastavi u ovoj temi:
http://www.elitesecurity.org/t146828-Kaspersky-mozda-problem