Hello, I have avast internet security and randomly every day im getting message the “Exploit Blocked” - check attached picture.
All exploits are from similar IPs but not exactly same IPs.
When I look in Firewall > Firewall Logs then it is not logged here.
DCOM Attacks are speculative, not targeted and tries to exploit a vulnerability in out of date OS, if your OS is up to date then you aren’t vulnerable to the exploit. That doesn’t stop them (usually someone from the same ISP with an infected computer) trying to see if it can infect others.
Your firewall should be the first line of defence in this, but avast also monitors common attack ports using the Network Shield, ideally the firewall should block it and avast wouldn’t know about it, but for whatever reason avast is first in line over your firewall.
What is surprising me is that the Avast! firewall isn’t getting in there first before the network shield and just blocking (ignoring) the DCOM connection/exploit attempt silently. However, I’m not using the AIS version, so I don’t have any experience of the avast! firewall.
You can actually attach images/files to your posts using the Reply window, Additional Options for .gif, .jpg, .png, .txt and .log files up to a total of 200KB. This saves you having to host it and we don’t have to click on off-site links. There is also a problem some people can’t access imageshack.us as it has some weird access policy.
It’s not listed in the firewall shield because it’s the network shield that is detecting it. Like David says, the firewall module should have blocked it first though. Or better yet, your router.