Author Topic: Latest Avast! download  (Read 5451 times)

0 Members and 1 Guest are viewing this topic.

debrick

  • Guest
Latest Avast! download
« on: November 17, 2004, 06:13:13 AM »
I also had great success with the latest download! But I'm wondering about something NEW that I just noticed: Every so often I have noticed what starts out as a warning about an incoming virus, but it's not...something called an "exploit". Can anyone explain to a newbie when it comes to security? Thanks Much!

Offline Eddy

  • Avast Evangelist
  • Maybe Bot
  • ***
  • Posts: 31079
  • Watching (over?) you
    • Malware removal, Biljart and other things.
Re:Latest Avast! download
« Reply #1 on: November 17, 2004, 09:22:11 AM »
Please read my post HERE

debrick

  • Guest
Re:Latest Avast! download
« Reply #2 on: November 18, 2004, 04:07:26 AM »
Oh, that explains a lot! NOT!! Trying to decipher what you wrote just makes my head swim and it doesn't sound like the answer I was searching for...but thanks anyway!

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67194
Re:Latest Avast! download
« Reply #3 on: November 18, 2004, 04:29:33 AM »
Oh, that explains a lot! NOT!! Trying to decipher what you wrote just makes my head swim and it doesn't sound like the answer I was searching for...but thanks anyway!

Will this be better or worse?

A new resident protection module was added to avast! 4.5: the Network Shield. It is meant as a protection against known Internet worms/attacks. It analyses all network traffic and scans it for malicious contents. It can be also taken as a lightweight firewall (or more precisely, an IDS (Intrusion Detection System).

Network Shield protects you from internet worms that spread themselves via various security holes in your system. Typicaly these kind of viruses don't infect files but instead  they attack running processes on your PC (either Windows components or some server programs like SQL Server, IIS etc.). These kind of attacks are not easily catched by ordinary antivirus during file or mail scanning. It is not a duplicate work with Standard Shield.

On anything of speed <= 100 mbps the performance penalty should be negligible (unless you have very old hardware). On gigabit/10gigabit networks it may slowi things down considerably though. Few people are using these speeds to access the Internet...

Basically, it covers all Internet worms. Such as Win32.CodeRed, Win32.SQLSlammer, Win32.Blaster, in32.Welchia (Nachi) and Win32.Sasser.

Messages like:
Network Shield: blocked "DCOM Exploit" - attack from 81.178.115.162:135/tcp
are due to the RPC/DCOM exploit, which is a vulnerability that allows an attacker to gain access to the destination machine by sending a malformed packet to the DCOM service. It uses the RPC TCP port 135.
The best things in life are free.

debrick

  • Guest
Re:Latest Avast! download
« Reply #4 on: November 18, 2004, 05:02:35 AM »
Now thats more like it!! Thanks a bunch Technical!  Avast! gets better and better!

SKYCOMP

  • Guest
Re:Latest Avast! download
« Reply #5 on: November 19, 2004, 12:12:55 AM »
I also appreciate those details:  Thanks  8)