Reply
Mon 10 Jan, 2005 05:57 pm
Since 23 December, my Norton Personal Firewall keeps intercepting (several times a day) an intrusion entitled MS_Windows_LSASS_RPC_DS_Request.
The IP is different each time but I've run a trace on network-tools.com and the origin is always the same IP: 66.98.241.1 and host name is gphou-66-98-244-1.ev1.net.
Who is this? While this keeps getting blocked, it's extremely annoying. How do I prevent this?
Or is "Hop 1" my IP and the higher Hop is the origin? I suspect this "trojan" is generated by Road Runner. Can this be?