India Broadband

Archer

Today I got a warning from Avast about a "DCOM Exploit". I got the same warning message 5-6 times already. I wasn't using internet but was active when I got this warning messages. I have Zone Alarm firewall installed but was disabled when this happened. I have also got the similar messages from Zone Alarm before.
What should I do ?

This is the warning message I got in Avast.

025.gif

__________________

itsmemad

Read it... attacts from dcom exploit continue - CNET Computer help Forums

internet_guy

hey i got same type of message 1 month back.from avast

30.10.2008 0208 DCOM Exploit attack
from 59.92.112.212:135
30.10.2008 0222 DCOM Exploit attack
from 59.92.78.28:135
30.10.2008 0206 DCOM Exploit attack
from 59.92.78.28:135

i trace the ip adress and its another bsnl broadband user in chennai

i dont know why he was trying to get in to my system ?

my speed during night unlimitedis very low,is this anything to do with it,is that user hacked my speeds or something considering the fact that this happen during 2am -3am ?

superprash2003

its probably not him.. its probably a virus in his pc that is trying to spread virus and hack your pc.. this is through open ports.. so having a firewall is necessary..

__________________
Check out my tech tutorials at www.prash-babu.com

internet_guy

then how the virus got hold of my ip address,

my port 135 is stealth i ran some online firewall checks ,

Archer

PORT 135 is commonly used for Microsoft Remote Procedure Call (RPC) service. I wonder whether there is any relations between this.

internet_guy

see my second post,some dude from Chennai is accessing my port 135 during 2:50 am

i was not on torrents nor i know him

i assume he or the virus is trying to do some nasty sh*t with my rpc

i was just wondering how he or the virus got my ip

Archer

Same with my case. The IP is from a local place, but I don't even know who that is.

cableguy

Some viruses/worms are designed to automatically search for Windows systems to infect using port 135. If you have a firewall just set it to block any connections to port 135.

__________________

superprash2003

just a random ip.. he wasnt intending to attack YOU particularly.. just any target.. you just happened to be the lucky one :-). try it out yourself.. try some random ip within the bsnl range .. try pinging it, you would get a successful ping..