Author Topic: Network Shield: blocked "DCOM" Exploit  (Read 5394 times)

0 Members and 1 Guest are viewing this topic.

AndyB23

  • Guest
Network Shield: blocked "DCOM" Exploit
« on: August 15, 2006, 07:48:53 PM »
Hi there ive just installed and activated avast, i keep getting the following message appear in the bottom right,

Network Shield: blocked "DCOM Exploit" - attack from xxx.xx.xxx.xxx:135/tcp  (x being the attackers IP)
I get this message every few minutes, which has me concerned because i didnt have my pc firewalled initially.

What is the risk of this attack and what does the attack achieve by doing it?

Thanks

Andy

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67194
Re: Network Shield: blocked "DCOM" Exploit
« Reply #1 on: August 15, 2006, 07:55:20 PM »
You have two problems:
1. Your Windows is not updated.
2. You're not using a firewall.

Network Shield is a protection against known Internet worms/attacks. It analyses all network traffic and scans it for malicious contents. It can be also taken as a lightweight firewall (or more precisely, an IDS (Intrusion Detection System).

Messages like:
Network Shield: blocked "DCOM Exploit" - attack from 81.178.115.162:135/tcp
are due to the RPC/DCOM exploit, which is a vulnerability that allows an attacker to gain access to the destination machine by sending a malformed packet to the DCOM service. It uses the RPC TCP port 135. Basically, it could be infected by Internet worms such as Win32.CodeRed, Win32.SQLSlammer, Win32.Blaster, in32.Welchia (Nachi) and Win32.Sasser.
The best things in life are free.

AndyB23

  • Guest
Re: Network Shield: blocked "DCOM" Exploit
« Reply #2 on: August 15, 2006, 08:16:59 PM »
Im only on SP1 because my copy of XP isnt genuine so i cant receive updates  :-X

Am i protected now that avast is installed? what other measures could i take?

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67194
Re: Network Shield: blocked "DCOM" Exploit
« Reply #3 on: August 15, 2006, 08:19:39 PM »
Am i protected now that avast is installed? what other measures could i take?
Install a free firewall...
For instance: Comodo, Kerio, Jetico, ZoneAlarm.
http://forum.avast.com/index.php?topic=22742.0;topicseen  :)
The best things in life are free.

Offline bob3160

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 48568
  • 64 Years of Happiness
    • bob3160 Protecting Yourself, Your Computer and, Your Identity
Re: Network Shield: blocked "DCOM" Exploit
« Reply #4 on: August 16, 2006, 01:01:02 AM »
Im only on SP1 because my copy of XP isnt genuine so i cant receive updates  :-X

Am i protected now that avast is installed? what other measures could i take?
Use WindizUpdate:


Go HERE for full instructions. You'll need to install FireFox or another non IE based browser.
Free Security Seminar: https://bit.ly/bobg2023  -  Important: http://www.organdonor.gov/ -- My Web Site: http://bob3160.strikingly.com/ - Win 11 Pro v22H2 64bit, 16 Gig Ram, 1TB SSD, Avast Free 23.5.6066, How to Successfully Install Avast http://goo.gl/VLXdeRepair & Clean Install https://goo.gl/t7aJGq -- My Online Activity https://bit.ly/BobGInternet

drhayden1

  • Guest
Re: Network Shield: blocked "DCOM" Exploit
« Reply #5 on: August 16, 2006, 02:30:37 AM »
thanks for the program bob....works well with netscape 8.1 browser 8)

Offline Marc57

  • Avast Evangelist
  • Super Poster
  • ***
  • Posts: 1944
  • KISS Rules The World!!!
    • KISS Army
Re: Network Shield: blocked "DCOM" Exploit
« Reply #6 on: August 16, 2006, 04:44:36 AM »
You should probably go here and get DCOMbobulator.


http://www.grc.com/freeware/dcom.htm
You Wanted the Best You Got the Best the Hottest Band in the World KISS!!!