Author Topic: Someone is really annoying!  (Read 2505 times)

0 Members and 1 Guest are viewing this topic.

Java Junkie

  • Guest
Someone is really annoying!
« on: October 29, 2010, 03:38:40 PM »


I remembered that IP or whatever, it is constantly appearing! It's annoying, I can't even hear a song without woman warning me (and no I don't want to mute her :P ) What is that anyway I have no idea about viruses. I installed Avast because one of my friends (IT guy) suggested it. Is there anything I can do to stop it from attacking me? What is it? Hacker?

Offline Rednose

  • Pirate Party Member
  • Avast Überevangelist
  • Massive Poster
  • *****
  • Posts: 3740
  • Bits of Freedom : https://www.bof.nl
    • Nederlandstalig Avast! forum
Re: Someone is really annoying!
« Reply #1 on: October 29, 2010, 03:56:41 PM »
Hi Java Junkie, welcome to the forum :)

Some info ( screenshot is from Avast! 4.8 ):

http://www.killertechtips.com/2010/01/14/avast-network-shield-blocked-dcom-exploit

If there are any questions left, feel free to ask them.

Greetz, Red.
« Last Edit: October 29, 2010, 03:59:26 PM by Rednose »
OS: Win 10 / iOS 17 / Debian 12 / Tails 6
Real Time: Avast Premium Security
On Demand: Malwarebytes
VPN: NordVPN ( NordLynx ) with Threat Protection ( Lite )

Online DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89646
  • No support PMs thanks
Re: Someone is really annoying!
« Reply #2 on: October 29, 2010, 04:00:19 PM »
DCOM Attacks are speculative (which this is), not targeted and tries to exploit a vulnerability in out of date OS, if your OS is up to date then you aren't vulnerable to the exploit. That doesn't stop them (usually someone from the same ISP with an infected computer) trying to see if it can infect others.
 
Your firewall should be the first line of defence in this, but avast also monitors common attack ports using the Network Shield, ideally the firewall should block it and avast wouldn't know about it, but for whatever reason avast is first in line over your firewall.

Edit: Unfortunately that techtips article is old and relates to avast 4.8.

There are inaccuracies in it. Switching of DCOM won't stop the speculative attempt to exploit the system. Also the implication that this is as a result of a virus or worm on your system is a giant leap in speculation as there are inbound attacks. If they were outbound attacks they are likely to show a different MAL:URL alert something trying to connect to a malicious site.

So my advice would be to ignore this old advice for avast 4.8, aside from any other inaccuracies.
« Last Edit: October 29, 2010, 04:08:45 PM by DavidR »
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD - 27" external monitor 1440p 2560x1440 resolution - avast! free  24.8.6127 (build 24.8.9372.870) UI 1.0.818/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security