I keep getting virus alert massages in the day

Viruses and worms
1

and I scan the computer with SAS and MAM and it didn’t stop
please help

2

What is the virus alert you are getting?
Who/what company is giving you this virus alert?

Can you please update MBAM and run a FULL scan. Make sure you “remove selected” button to quarantine anything found. Copy & Paste the entire report in your next reply. Thank you.

3

Malwarebytes’ Anti-Malware 1.50
www.malwarebytes.org

Database version: 5285

Windows 6.1.7600
Internet Explorer 8.0.7600.16385

10/12/2010 09:07:44
mbam-log-2010-12-10 (09-07-44).txt

Scan type: Full scan (C:|D:|F:|G:|)
Objects scanned: 343199
Time elapsed: 56 minute(s), 35 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)

4

Does avast alert you…?
If so, what does it say…?
asyn

5

We need you to give us this information so that we can help you.

Have you done any scans with Avast yet? If so, which scans, and is anything in the Virus Chest? If anything is in the Chest, can you give us a screen shot of the Chest with the files in it? Thank you.

6

after 5-10 alerts in the last 24 hours alerts it stopped, maybe the MAMB scan I did helped. if it happens again I’ll write to you.
Thank you for the your quick replays.

7

MBAM will only help if it quarantined anything. Did it?

8

Yes, It did, in the scan I made yesterday and didn’t send you it quarantined 2 threats.
How can I get to the alert log in Avast 5? I knew how to get to it in avast 4, but in avast 5 i can get only the last popout.
thanks

9

Search your computer for ‘FileSystemShield.txt’
All other logs are in the same directory…
asyn

10

thanks. I have found it and that’s what i get:
nshield
09.12.2010 15:43:07 DCOM Exploit attack, from 85.122.5.58:135
09.12.2010 19:28:03 DCOM Exploit attack, from 85.173.185.71:135
09.12.2010 19:55:53 DCOM Exploit attack, from 85.222.19.175:135
09.12.2010 20:48:27 DCOM Exploit attack, from 85.84.144.114:135
09.12.2010 21:49:10 DCOM Exploit attack, from 85.122.5.58:135
09.12.2010 22:33:26 DCOM Exploit attack, from 85.176.166.85:135
09.12.2010 22:43:45 DCOM Exploit attack, from 85.64.79.144:135
09.12.2010 23:04:22 DCOM Exploit attack, from 89.209.100.13:135
09.12.2010 23:42:10 DCOM Exploit attack, from 89.28.106.71:135
10.12.2010 00:52:44 DCOM Exploit attack, from 89.103.49.36:135
10.12.2010 01:28:47 DCOM Exploit attack, from 89.167.43.99:135
10.12.2010 02:20:55 DCOM Exploit attack, from 89.118.177.83:135
10.12.2010 02:46:00 DCOM Exploit attack, from 89.133.129.89:135
10.12.2010 12:24:22 DCOM Exploit attack, from 89.116.217.5:135

11

You don’t have to worry, these are attacks from outside, that avast stopped.
But, usually your firewall should stop them first. Do you run a firewall…??
asyn

12

I use the win7 stansart firewall

13

Well, the W7 FW is rather good, it should block these DCOM attacks.
Did you change anything in the settings…?? Is the FW running…?
asyn

14

FW running. I will check if I made changes in setting.
thanks again

15

You’re welcome…!
asyn

16

Do you run your Windows Update regularly?Cause it is important to download the security patches for Windows.

17

@ shai234
DCOM Attacks are speculative, not targeted and tries to exploit a vulnerability in out of date OS, if your OS is up to date then you aren’t vulnerable to the exploit. That doesn’t stop them (usually someone from the same ISP with an infected computer) trying to see if it can infect others.

Your firewall should be the first line of defence in this, but avast also monitors common attack ports using the Network Shield, ideally the firewall should block it and avast wouldn’t know about it, but for whatever reason avast is first in line over your firewall.

So they could disappear as quickly as they appeared.

18

+1 ;D Really learnt from you.

19

You’re welcome.

20

the virus alerts keep coming and I would like to stop it:

11.12.2010 16:56:43 DCOM Exploit attack, from 85.64.204.49:135
11.12.2010 17:19:09 DCOM Exploit attack, from 85.211.24.12:135

I got 22 alerts in the last two days’ and 1 or none the in the month before. I made no changes in win7 firewall in the last month.

thank you