Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Dcoh Exploit Trying To Access My Pc All The Time


  • Please log in to reply
6 replies to this topic

#1 mariska

mariska

  • Members
  • 86 posts
  • OFFLINE
  •  
  • Location:Turku
  • Local time:04:47 PM

Posted 15 March 2008 - 10:58 AM

Hi i wasn'ty really sure where to post this as it is not a big problem as such but just annoying,the thing is i'm constantly alerted that DCOH EXPLOIT is trying to gain access to my pc, and it gives the ip adress as follows 91.152.99.135.187:135 TCP
The thing is it doesn't matter where i'mj browsing,i could be innactive on google page and the alert comes or even on microsoft page...can anyone shed any light on this or info on where this barrage is coming from?
Thanks Chris

BC AdBot (Login to Remove)

 


#2 Orange Blossom

Orange Blossom

    OBleepin Investigator


  • Moderator
  • 37,111 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Location:Bloomington, IN
  • Local time:08:47 AM

Posted 15 March 2008 - 11:13 PM

Hello mariska,

What is giving you the alerts?

Orange Blossom :thumbsup:
Help us help you. If HelpBot replies, you MUST follow step 1 in its reply so we know you need help.

Orange Blossom

An ounce of prevention is worth a pound of cure

SpywareBlaster, WinPatrol Plus, ESET Internet Security, NoScript Firefox ext.


animinionsmalltext.gif

#3 mariska

mariska
  • Topic Starter

  • Members
  • 86 posts
  • OFFLINE
  •  
  • Location:Turku
  • Local time:04:47 PM

Posted 16 March 2008 - 03:04 AM

Hi Orange blossom...thanks for replying :thumbsup: The alerts are coming from Avast.It's not really a problem as such cos' they are being blocked,but i'm just curious to know where its coming from as it is just so relentless..thanks
Regards
Chris

#4 Orange Blossom

Orange Blossom

    OBleepin Investigator


  • Moderator
  • 37,111 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Location:Bloomington, IN
  • Local time:08:47 AM

Posted 16 March 2008 - 02:12 PM

Thanks mariska,

I wish to clarify the spelling: Is it DCOH or DCOM exploit?

What is your operating system: Windows XP, Vista, etc.? Do you have all critical updates installed?

Orange Blossom :thumbsup:
Help us help you. If HelpBot replies, you MUST follow step 1 in its reply so we know you need help.

Orange Blossom

An ounce of prevention is worth a pound of cure

SpywareBlaster, WinPatrol Plus, ESET Internet Security, NoScript Firefox ext.


animinionsmalltext.gif

#5 mariska

mariska
  • Topic Starter

  • Members
  • 86 posts
  • OFFLINE
  •  
  • Location:Turku
  • Local time:04:47 PM

Posted 17 March 2008 - 11:42 AM

Hi Orange Blossom,well, i have windows xp sp2 and have automatic updates,but i do occasionly visit microsoft.com to check if any have slipped through the net,so i'm quite confident that i'm not missing anything.
As for the malware names it appears now to be different ones but ALL of the exploit variety DCOH,DCOM and SLASS.They are still coming thick and fast...but Avast is blocking them :thumbsup: Is everybodys Computer under these sort of attacks?Is this unusual?
Thanks again
Mariska

#6 Orange Blossom

Orange Blossom

    OBleepin Investigator


  • Moderator
  • 37,111 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Location:Bloomington, IN
  • Local time:08:47 AM

Posted 24 March 2008 - 09:39 PM

Hello mariska,

Wanted to let you know that I'm consulting with others on this issue. When you say AVAST, are you referring to the AntiVirus program or are you referring to a firewall?

Can you provide a screen shot of a couple of these alerts?

Orange Blossom :thumbsup:
Help us help you. If HelpBot replies, you MUST follow step 1 in its reply so we know you need help.

Orange Blossom

An ounce of prevention is worth a pound of cure

SpywareBlaster, WinPatrol Plus, ESET Internet Security, NoScript Firefox ext.


animinionsmalltext.gif

#7 Grinler

Grinler

    Lawrence Abrams


  • Admin
  • 43,717 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:USA
  • Local time:08:47 AM

Posted 25 March 2008 - 03:37 PM

Are they always the same IP address, or different ones? Sounds like some worms or script kiddies targetting your range of ip addresses. Your firewall is blocking them so you are ok.




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users