Outgoing IP block - Help

[Zontie]

Hello

Basically the problem is, whenever I have a browser open I receive a notification stating that a certain website IP is potentially malicious and has been blocked, it's always the same IP address (109.163.226.68) the type is outgoing, the port is 51676, and the process comes under avastsvc.exe (which is my anti-virus).

So basically, my question is, is this a natural procedure for Malwarebytes, or am I infected or something similar?

Thank you.

[daledoc1]

Hi, Zontie:

Welcome.

IP blocks can indicate a number of things:

• They could indicate that MBAM is doing its job of blocking bad content on websites.
  

• They can also occur when running Skype and certain P2P programs, such as torrents.. For example, please see this help desk topic about Skype and this one about P2P.
  

• In some cases the blocks are a false positive.
  

• However, they can also be a sign of infection, especially if the blocks are outgoing and they occur when no browsers are open.
  

--> There is more information about the IP blocking module in the FAQ - Section G (and in the Helpdesk topics HERE and HERE).

They explain why it appears that MBAM is blocking your AV (it isn't -- it's just because your AV filters network traffic). See HERE.

You may also research the IP in question at www.ip-lookup.net or a similar site - for the IP you mention, it resolves to an IP range hosted in Romania (see screen shot).

On the other hand, if you think the IP blocks might be a false positive, then please read this article before starting a new topic in the False Positives forum.

Alternatively, if you think you might be infected, based on the IP blocks and/or other suspicious computer behavior, then please read the following to begin the cleaning process.

In your case, that might be the safest option with which to start.

• First, please print out, read and carefully follow the instructions in the "I'm Infected - What Do I Do Now?" sticky topic.
  
• Then please start a new post in the Malware Removal forum.
  
• An authorized, trained malware expert will provide free, one-on-one assistance as soon as one becomes available.
  

Thanks!

daledoc1