Im new to avast! Today I’ve been getting some pop up messages on my antivirus… here is the log. jsut keep in mind that a few days ago I joined a social website with an interest to vampires, I jsut thought it was cool. I think I might have to avoid it for future reffernce. Avast has been able to prevent certain things to pop up, but I do like the community there. So I MIGHT continue contributing to the forums etc (its like a facebook site for goths, even though Im not one) BUT with your suggestions, I will stop if you think thats where I became a target for these attacks.
Heres the log. Now I should point out I had been going to the “Vampire Freaks” website for some time (about a week) and its only recently this has been happeneing. (I tried to find the logs where it said the 27th of December, but I couldnt find it.)
28.12.2009 02:10:38 Network Shield: blocked access to malicious site ad.yieldmanager.com/pixel?id=586727&t=2 [ C:\Program Files (x86)\Internet Explorer\iexplore.exe ( 4584 ) ]
28.12.2009 02:10:44 Network Shield: blocked access to malicious site ad.yieldmanager.com/imp?Z=728x90&s=739769&_salt=917214615&B=10&u=http%3A%2F%2Fvampirefreaks.com%2FNe0_GeishA&r=1 [ C:\Program Files (x86)\Internet Explorer\iexplore.exe ( 4584 ) ]
28.12.2009 02:10:47 Network Shield: blocked access to malicious site ad.yieldmanager.com/pixel?id=586727&t=2 [ C:\Program Files (x86)\Internet Explorer\iexplore.exe ( 4584 ) ]
29.12.2009 19:52:32 DCOM Exploit attack
from 10.250.24.187:135
29.12.2009 19:55:16 DCOM Exploit attack
from 10.250.47.27:135
29.12.2009 20:00:40 DCOM Exploit attack
from 10.250.24.187:135
29.12.2009 20:02:22 DCOM Exploit attack
from 10.250.24.187:135
29.12.2009 21:11:19 DCOM Exploit attack
from 10.192.10.229:135
29.12.2009 21:40:25 DCOM Exploit attack
from 10.192.10.229:135
29.12.2009 21:46:20 DCOM Exploit attack
from 10.192.10.229:135
What do you guys think is going on? It said it blocked it, but I dont know. I hope Im not infected… Im running a scan as we speak, and after I’ll run spybot
MBAM and SAS, Im sorry, I never heard of them b4… why not spybot? Jsut curious, I’ve used it all my life.
But I do use Windows 7 and Spybot doesnt imunise everything… unlike when I was using vista, it was 100% compatible. Anyway, I’ll look it up and I’ll take your word for it.
So does anyone know anything about DCOM exploit… I read a few things on it on this forum but they were very old threads. I just want to know if the warning messages are just notifications and if its normal that your computer normally gets about 5 - 10 attempts a day.
I thought that after 5 years (2004 was the latest thread I’ve read) windows would have fixed this kind of exploit… or unless its a windows seven issue.
The thread you posted mentioned something about using a firewall, and I have never turned off my firewall (the normal windows one) the only time I let things through are my games, like steam and MMO games.
one of the guys mentioned that he turned on his windows firewall and the attacks stopped… strange, that means stuff is grtting through my normal windows firewall and avast is taking care of the issue. Man, I wonder if other virus scanners have this feature, cause I never noticed this at all beore whilst using NOD32, AND the avast program Im using is only the free version.
In anycase, this makes me feel a bit better, I know that nothing is getting through and if some does, then avast is taking care of it. I just hope that if something does get through, I can remidy it with the virus scan section of avast.
Fingers crossed… cause I jsut finished installing all my things to my new Windows 7 OS… its all new, fresh and shiny.
I have to ask though… what would happen if one of these got through… say I was on tech support with microsoft using easy assit (lets them control the computer) and it gets through?
They are speculative, random, not targeted attacks in the hope of finding a system that is not up to date and are vulnerable. You would be surprised just how many are vulnerable to attack (out of date OS, not incorporating the security updates, or newer OSes, etc.), these attacks are often from computers that are already infected, trying to infect others.
If one of them got through, a) your OS isn’t vulnerable to the attack and b) the standard shield is also a line of defence against the attack; so the attack is likely to fail for those reasons.
Well, I hate to ask this on an avast forum. But a mate of mine who works at a computer store gave me a spare copy of 2012 Kaspersky - Internet Security.
I currently use the free version of Avast. I know this may sound a bit, mutinous, but would you think Id be better off with kaspersky?
Jsut wondering. Its a fresh new copy and I just got it for nothing except that he was going to use it himself but decided not to since the computer he was going to install it to wasnt going to be connected to the internet.
Well, by spare copy I mean, he was going to use one of the proper copies to instal to his computer, opened the box, which broke the seal, realised he didnt need it and then jsut gave it to me, CD key intact and not yet installed.