Successfully blocked access to a potentially malicious website malwarebytes port 6881 agent.exe

[Mallman]

Have been getting this seemingly randomly for a couple of months now, funnily enough ever since I installed Blizzard's Desktop Launcher .......

 

Message is as follows:

 

Malwarebytes Anti-Malware
Successfully blocked access to a potentially malicious website

218.7.184.226

Type: incoming
Port: 6881, Process: agent.exe

 

 

The IP address varies, I just happened to write down the one above.

 

Have tried running all kinds of malware scanners, etc but can't find anything wrong at all.

 

Any ideas please?

[Jekko]

Hello Mallman,

 

agent.exe is the name of the Blizzard's Updating Software that they use for their games.

 

There are also posts on other forums questioning how valid agent.exe is: http://us.battle.net/d3/en/forum/topic/8796521285

 

Most likely this is a false positive detection.  Does your Blizzard Updater still run and download the updates for your games despite some IP's being blocked?

[Jekko]

Also, on the blizzard website they have a few solutions for users to follow:

https://us.battle.net/support/en/article/battlenet-update-agent-troubleshooting

[Mallman]

Thanks very much for the info and advice.

 

Yes, the Blizzard Updater still works just fine.

 

Will check out the links that you provided.

[Mallman]

Just to bump this a bit, just had a similar alert but a differet process, port and ip address. As follows:

 

Port: 62080

IP: 193.105.134.99

Process: Firefox.exe

 

 

Any ideas please? I'df really like to stop this happening.

[Mallman]

Anyone?

[AdvancedSetup]

I would suggest following the advice from the topic here Available Assistance for Possibly Infected Computers and having one of the Experts assist you with looking into your issue.


Thanks