Outgoing attacks

[Dmitriy Fox]

Occasionally Avast's firewall blocks outgoing attacks. There are no malicious programs in the system, it was scanned by antivirus scanners and by the antivirus itself. What is it?

[Asyn]

Hi, see: https://pentest.blog/what-is-llmnr-wpad-and-how-to-abuse-them-during-pentest/

[j.bonzo]

Maybe to disable WPAD?
http://www.ibtimes.co.uk/how-disable-wpad-windows-so-hackers-cant-hijack-your-computer-1576111

[Dmitriy Fox]

Hi, see: https://pentest.blog/what-is-llmnr-wpad-and-how-to-abuse-them-during-pentest/

I read it. Very interesting. But what should I do in this situation? The computer is in my home, not in the company.

[Asyn]

Hi, see: https://pentest.blog/what-is-llmnr-wpad-and-how-to-abuse-them-during-pentest/

I read it. Very interesting. But what should I do in this situation? The computer is in my home, not in the company.

Scroll down to "Mitigations against WPAD".

[Dmitriy Fox]

Group Policy Editor is not available in my version of Windows. And on the first variant I do not understand how to do it, I'm not a programmer, but an ordinary user)

[Asyn]

As Avast blocks it, nothing to worry about.

[Dmitriy Fox]

As Avast blocks it, nothing to worry about.

The situation became even more interesting. Now many incoming connections are blocked. Is it that someone is attacking me?

[Pondus]

This is what firewalls do, they filter traffic. Firewall logs can be complicated stuff and in most cases what you see is normal
If you are behind a router firewall, then most of what you see probably come from your own network

Also why I think win firewall is best for the average user, it does what it is supposed to do without complications


Google is your friend, just Google the names in the log to find info