Ms windows lsass dpc request

[jorge_catarino]

Alguem está com este problema numa rede que tenha ou no seu computador - Ms_windows_lsass_dpc_request???

[[PT]CableGuy]

Olá jorge_catarino:

...Ms_windows_lsass_dpc_request???...

DPC ? Não será RPC ?

LSASS = Local Security Authority Subsystem Service
"Description:
lsass.exe is a system process of the Microsoft Windows security mechanisms.
It specifically deals with local security and login policies, and is NOT to be confused with the lsas.exe virus. "

RPC = Remote Procedure Call
"Description:
Remote Procedure Call (RPC) dynamic port allocation is used by remote administration applications such as Dynamic Host Configuration Protocol (DHCP) Manager, Windows Internet Name Service (WINS) Manager, and so on. RPC dynamic port allocation will instruct the RPC program to use a particular random port above 1024."

Podes explicar melhor qual é o problema em si ? (please)

PS: Existe um virus (Sasser) que explora vulnerabilidades do RPC no LSASS....será isso ?

[scrat]

Código: Seleccionar todos

% DPC Time counter *
"Well-behaved" NT device drivers rely on deferred procedure calls (DPC’s) for the bulk of their processing. Unlike interrupt service routines that mask off lower-level interrupts, DPC’s run with interrupts enabled.
* Both interrupt services routines and deferred procedure calls run at higher priority than user and kernel threads.

Código: Seleccionar todos

Processor: Interrupts/sec and Processor: % DPC Time. Use these counters to determine how much time the processor is spending on interrupts and deferred procedure calls (DPCs). These two factors can be another source of load on the processor. Client requests can be a major source of each. Some new network adapter cards include interrupt moderation, which accumulates interrupts in a buffer when the level of interrupts becomes too high.

encontrei isso sobre dpc agora nao sei se ajuda ou não

[jorge_catarino]

Tens razão é RPC, enganei-me ao escrever.... o que se passa é que bloqueia-me a rede, e deixa-me de dar internet, esse erro aparece-me na firewall do Norton...

[[PT]CableGuy]

OK...defenitivamente é o virus Sasser.
Visita o seguinte link:

Clean Sasser Virus V2... ( Vbscript )

Nesse link , existe um script (vbscript) que contém rotinas para descarregar o "patch da microsoft" além de limpar o virus.
Podia explicar-te todos os passos , mas o script é verdadeiramente bom.
Descarrega-o do link e executa-o , para limpar qualquer PC do virus Sasser.
Boa Sorte.