Author Topic: Can not understand  (Read 2477 times)

0 Members and 1 Guest are viewing this topic.

Michman

  • Guest
Can not understand
« on: June 15, 2007, 02:00:13 PM »
The Regard from Russia!

Help me to understand with such message my AVAST. The Version 4.7 Home Edition. Here is this message:


Message of the scanner of the access
Network screen disarmed: "DCOM Exploit" - an attack with address 10.208.194.119:135/tcp


That this for message? The Attack hacker or something another?  ??? Help me, please!  :'(

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67183
Re: Can not understand
« Reply #1 on: June 15, 2007, 02:14:36 PM »
Network Shield is a protection against known Internet worms/attacks. It analyses all network traffic and scans it for malicious contents. It can be also taken as a lightweight firewall (or more precisely, an IDS (Intrusion Detection System).

Network Shield protects you from internet worms that spread themselves via various security holes in your system. Typicaly these kind of viruses don't infect files but instead  they attack running processes on your PC (either Windows components or some server programs like SQL Server, IIS etc.). These kind of attacks are not easily catched by ordinary antivirus during file or mail scanning. It is not a duplicate work with Standard Shield.

Basically, it covers all Internet worms. Such as Win32.CodeRed, Win32.SQLSlammer, Win32.Blaster, in32.Welchia (Nachi) and Win32.Sasser.

Messages like:
Network Shield: blocked "DCOM Exploit" - attack from 81.178.115.162:135/tcp
are due to the RPC/DCOM exploit, which is a vulnerability that allows an attacker to gain access to the destination machine by sending a malformed packet to the DCOM service. It uses the RPC TCP port 135.

Which firewall do you use?
And, most important, is your operational system updated?
The best things in life are free.

Michman

  • Guest
Re: Can not understand
« Reply #2 on: June 15, 2007, 02:57:49 PM »
Excuse me for my english, I translate the texts through electronic translator.


Except AVAST 4.7 Home Edition no other antivirus of the programs and firewall on my computer are not installed.

The Renovations Windows XP HE were not produced since 2003. My internet traffic very costly so I can not constantly update its operating system. You think that this is somehow connected with these attack and you will advise update my operating system?

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67183
Re: Can not understand
« Reply #3 on: June 15, 2007, 03:20:40 PM »
Except AVAST 4.7 Home Edition no other antivirus of the programs and firewall on my computer are not installed.
Well, you'll have DCOM attacks if you don't use a firewall. avast is not a full firewall, just block very few kinds of attacks, like these ones.

The Renovations Windows XP HE were not produced since 2003. My internet traffic very costly so I can not constantly update its operating system. You think that this is somehow connected with these attack and you will advise update my operating system?
If you had your Windows updated, you won't see these attacks as they're due to a Microsoft unpatched system. If you want (and find a Russian version), I'll suggest Autopatcher (http://www.autopatcher.com/).
The best things in life are free.

Michman

  • Guest
Re: Can not understand
« Reply #4 on: June 15, 2007, 03:36:19 PM »
Thank You very mach for help, Tech!