I’ve looked thru all the reports I could find in AVAST (free version) and have been unable to locate a report that showed what AVAST reported while I was on Internet.
AVAST please Note It would have been nice if you had put the NAME of the Real-time Shield Scan in the reports provided. They all look the same and I’m not sure if the pgm is working correctly or alerts of stopped attacks are not written to a report file.
AVAST popup stated it blocked a DCOM attack… I can not find a report that shows this. I thought it would of been under WEB shield but it only showed the following –
*
The DCOM notice was from the Network Shield and there is no log/report file for that.
Ideally your firewall should block these exploit attempts, the network shield only monitors a limited set of ports, commonly used to exploit a system. What is your firewall ?
Thanks for the reply and the info. It is a shame that I could not find that info in AVAST.
You state –
"DCOM notice was from the Network Shield and there is no log/report file for that".
However, if I click on Network Shield - It says there are no settings, but when I click on "Show Report File’
it opens NetworkShield.txt in Notepad that showed following –
avast! Real-time Shield Scan Report
This file is generated automatically
Started on: Friday, March 26, 2010 12:19:57 PM
avast! Real-time Shield Scan Report
This file is generated automatically
Started on: Friday, March 26, 2010 3:47:53 PM
It was between these Date/Time stamps that I got the AVAST notification.
Regarding a Firewall - I do not have one… I have not located a Free version as of yet to install.
Do you know how I can identify which ports are open on my PC?
My comment relates to the fact that the attack detections aren’t recorded in any log/report as you found. Whilst if you check the network shield directly after such a notice, you will see the Last blocked detection: field will have been completed, that will only remain until the next notification or reboot…
You most certainly need a firewall as the network shield isn’t a full firewall but a limited intrusion detection protection on certain ports.
Tech – thanks for the list I’ll check them and see what runs on W2K.
DavidR – I’ll check after the next block… Avast had just blocked a DCOM attack, I got the screen print so I could get the info down… I had checked the report, but no info. I failed to notice “Last blocked detection: field will have been completed”.
No problem, but the best solution is for a firewall to do this task (which blocks silently) rather than have avast alert and scare the pants off you ;D