Avast free 5 (dcom exploit blocked)

Avast Free Antivirus / Premium Security
1

I occasionally notice from avast that Exploit BLOCKED
I scanned my PC with Malwarebytes and Avast and have nothing my pc is Clean
what the problem was???

I found the location from which he tried to attack my pc is
IP address: 46.102.36.200
IP country: Bucharest Romania

Avast shows this notice (see picture)

2

That IP address belongs to a Romanian ISP. Probably one of their clients has network worm infection. That alert is probably generated by Avast Network filter.

You should enable at least Windows’ firewall or install a firewall software that suits you best.

Have a look at this as well:

http://www.grc.com/freeware/dcom.htm

3

DCOM attacks are speculative.
If you search the forum you’ll find a lot of information from David about them.

4

Here it is ;D

DCOM Attacks are speculative, not targeted and tries to exploit a vulnerability in out of date OS, if your OS is up to date then you aren’t vulnerable to the exploit. That doesn’t stop them (usually someone from the same ISP with an infected computer) trying to see if it can infect others.

Your firewall should be the first line of defence in this, but avast also monitors common attack ports using the Network Shield, ideally the firewall should block it and avast wouldn’t know about it, but for whatever reason avast is first in line over your firewall.

What is your firewall ?

5

I use Windows firewall and I blocked with firewall— DCOM(135) —
When I blocked the dcom 135 I have not had an attack on my pc
avast now does not inform about the attack from that IP

So far, everything works fine, I’ll see tomorrow if all goes well, then that port was the only failure
For now everything is fine no notification of the attack.

6

I use DCOMbobulator to close port 135:
http://www.grc.com/freeware/dcom.htm

7

I disable port 135 with DCOMbobulator
and I checked if the port is closed, everything is fine

Thanks everyone who helped me with this problem