I'am getting alerts from Symantec Endpoint like (SID:20386) MS RPCSS attack(2)is detected and the alerts keep on changing with some time interval.Changed IP server codes are also being displayed in the alerts.Is there any way of repairing the problem?
Hi,
A simple search by entering the SID in google would have answered this for you. However, I am glad to help point you in the right direction. Follow this link and check out the information. I believe this will answer your questions.
http://www.symantec.com/connect/forums/sid-20386-ms-rpcss-attack-2-detected-help-please
Brian
563 views
Usually answered in minutes!
×