Help with Avast, please!

[vasa1]

My friend has avast! Free Antivirus ver. 5.0.594 on a Win XP3 PC.

While connected to the internet, he frequently sees this:

avast! Network Shield has blocked a threat.
No further action is required.

Object: 59.95.218.38:135/tcp
Infection: DCOM Exploit
Action: Blocked

The threat was detected and blocked just before the attack.

Please note that the Object referred to above is not constant. We just saw another from 59.95.169.123:135/tcp while typing this post.

Since avast! claims that it has blocked the threat and that no further action is required, should he worry, apart from the minor irritation of the avast! notification?

[MidnightCowboy]

These would all appear to be originating from the same Indian source.

NIB (National Internet Backbone)
descr: Bharat Sanchar Nigam Limited
descr: Sanchar Bhawan,20, Ashoka Road, New Delhi-110001

Which firewall is he using and does it pass the standard GRC Shields Up! test?

If it is indeed an exploit attempt then this explains how it works

http://www.securitypronews.com/secur...PCExploit.html

[vasa1]

Originally Posted by MidnightCowboy

These would all appear to be originating from the same Indian source.

NIB (National Internet Backbone)
descr: Bharat Sanchar Nigam Limited
descr: Sanchar Bhawan,20, Ashoka Road, New Delhi-110001

Which firewall is he using and does it pass the standard GRC Shields Up! test?

If it is indeed an exploit attempt then this explains how it works

http://www.securitypronews.com/secur...PCExploit.html

Thanks, MC! The source is his and my ISP!

Both of us use a D-Link ADSL router to get our so-called broadband internet connection over the phone line. The router is configured in our homes by surly employees.

I have PCTools FW as a software firewall which got GRC's all-green signal.

He is even less savvy than I and has no software firewall because he has been told by his broker that any non-connectivity of his trading terminal has its root in the software firewall. So I didn't force him. And so far, other than this avast! warning he doesn't seem to have any other noticeable problem.

Again, I guess it's a matter of, "if it ain't broke...".

[MidnightCowboy]

Originally Posted by vasa1

Thanks, MC! The source is his and my ISP!

Both of us use a D-Link ADSL router to get our so-called broadband internet connection over the phone line. The router is configured in our homes by surly employees.

I had some of those in here too when I swapped from Claro wireless to cable