Endpoint Protection

 View Only

  • 1.  Traffic from IP address X.X.X.X Blocked...MSRPC server service BO detected

    Posted Dec 30, 2009 04:26 AM
      |   view attached

    Hi,
    Please look at the attachment. I can't understand about this warning. I am getting this some times. 1 of my laptop using this IP address.
    I am using SEP 11.0 with 11 user licensed in win 2008 server.

    Anything more need to know?

    ~r



  • 2.  RE: Traffic from IP address X.X.X.X Blocked...MSRPC server service BO detected

    Posted Dec 31, 2009 01:33 AM
    Look like that pc (ip add.31) having some infection.Pls scan that pc in safe mode also assure that in all your pcs having latest virus definition and patches. Also try to reduce the no of shares..  


  • 3.  RE: Traffic from IP address X.X.X.X Blocked...MSRPC server service BO detected
    Best Answer

    Posted Dec 31, 2009 01:40 AM
    Hi,

    make sure that the machine is updated with all the microsoft security patches. Expecially KB 958644

    Check the security logs and Isolate the computer fro which you are getting these attacks.
    Make sure these computers have all the features installed with updates definitions and windows security patches.

    Aniket