twentynyne Posted November 24, 2022 ID:1543054 Share Posted November 24, 2022 I have been showing that my computer is compromised for about a week now and I haven't been able to get rid of it. Link to post Share on other sites More sharing options...
Porthos Posted November 24, 2022 ID:1543055 Share Posted November 24, 2022 1 minute ago, twentynyne said: I have been showing that my computer is compromised for about a week now and I haven't been able to get rid of it. Are these blocks inbound or outbound? Link to post Share on other sites More sharing options...
twentynyne Posted November 24, 2022 Author ID:1543057 Share Posted November 24, 2022 1 minute ago, Porthos said: Are these blocks inbound or outbound? These are all inbound. Link to post Share on other sites More sharing options...
Porthos Posted November 24, 2022 ID:1543058 Share Posted November 24, 2022 3 minutes ago, twentynyne said: These are all inbound. The blocks are on addresses that are attempting to do a forced attempt to exploit remote-desktop-protocol. The Real Time Protection of Malwarebytes for Windows is actively doing it's job to protect the system. In most cases the attempted probes will automatically stop on their own. If it continues you can add the IP to the local firewall to prevent it from contacting the computer period. If you wish to do so, here is one how-to guidehttps://www.interserver.net/tips/kb/add-ip-address-windows-firewall/ Link to post Share on other sites More sharing options...
twentynyne Posted November 24, 2022 Author ID:1543059 Share Posted November 24, 2022 5 minutes ago, Porthos said: The blocks are on addresses that are attempting to do a forced attempt to exploit remote-desktop-protocol. The Real Time Protection of Malwarebytes for Windows is actively doing it's job to protect the system. In most cases the attempted probes will automatically stop on their own. If it continues you can add the IP to the local firewall to prevent it from contacting the computer period. If you wish to do so, here is one how-to guidehttps://www.interserver.net/tips/kb/add-ip-address-windows-firewall/ The problem I'm having is that this has been happening since 11/11/2022 and it's many different IP's that are trying to do this, how am I to block them when they change every time? Link to post Share on other sites More sharing options...
Porthos Posted November 24, 2022 ID:1543060 Share Posted November 24, 2022 Do you use Remote Desktop Protocol (RDP)? Do you have a home or pro version of Windows? Link to post Share on other sites More sharing options...
twentynyne Posted November 24, 2022 Author ID:1543061 Share Posted November 24, 2022 1 minute ago, Porthos said: Do you use Remote Desktop Protocol (RDP)? Do you have a home or pro version of Windows? I do not use that, that I know of. I have the pro version of windows. Link to post Share on other sites More sharing options...
Porthos Posted November 24, 2022 ID:1543062 Share Posted November 24, 2022 1 minute ago, twentynyne said: I do not use that, that I know of. I have the pro version of windows. Additionally or alternatively, if this is on Windows 10 PRO and if you do not need or use Remote Desktop, you can turn that off.https://www.tenforums.com/tutorials/92433-enable-disable-remote-desktop-connections-windows-10-pc.html Link to post Share on other sites More sharing options...
twentynyne Posted November 24, 2022 Author ID:1543063 Share Posted November 24, 2022 1 minute ago, Porthos said: Additionally or alternatively, if this is on Windows 10 PRO and if you do not need or use Remote Desktop, you can turn that off.https://www.tenforums.com/tutorials/92433-enable-disable-remote-desktop-connections-windows-10-pc.html My computer already shows that as off. Link to post Share on other sites More sharing options...
Porthos Posted November 24, 2022 ID:1543064 Share Posted November 24, 2022 1 minute ago, twentynyne said: My computer already shows that as off. Do you have a router or are directly connected to your internet providers modem? Link to post Share on other sites More sharing options...
twentynyne Posted November 24, 2022 Author ID:1543065 Share Posted November 24, 2022 1 minute ago, Porthos said: Do you have a router or are directly connected to your internet providers modem? I am connected via modem Link to post Share on other sites More sharing options...
Solution Porthos Posted November 24, 2022 Solution ID:1543066 Share Posted November 24, 2022 Just now, twentynyne said: I am connected via modem I suggest getting a router. Routers offer protection from these type of attacks. Link to post Share on other sites More sharing options...
twentynyne Posted November 24, 2022 Author ID:1543067 Share Posted November 24, 2022 Just now, Porthos said: I suggest getting a router. Routers offer protection from these type of attacks. I do have a router, but I am plugged directly in via the modem. I will connect to the router and check back. Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted December 14, 2022 Root Admin ID:1545536 Share Posted December 14, 2022 Due to the lack of feedback, this topic is closed to prevent others from posting here. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this topic with your request. This applies only to the originator of this topic. Other members who need assistance please start your own topic in a new thread. Tips to help protect from infection Thanks Link to post Share on other sites More sharing options...
Recommended Posts