Jump to content

Recommended Posts

Hello everyone,

 

I keep getting an error message that Antimalware is blocking an IP address every time I start my computer. See logs below. It's always related to Process: ave.exe which is Kaspersky Internet Security. I couldn't find the answere and was wondering if anyone could help me configure  the software correctly, not sure if it's Antimalware or KIS that needs to be configured.

protection-log-2014-01-18.txt

Link to post
Share on other sites

Hello and :welcome: , andriy:
 
Kaspersky (and some other anti-virus programs) scans HTTP data streams.
IOW, Kaspersky filters the traffic in to and out from your computer.
So, even though it is actually your browser program that is generating the block, it appears to Windows that it is Kaspersky being blocked.

So the block shows up as a block of the Kaspersky process, not your browser.
This is explained in more detail here: Why is Malwarebytes Anti-Malware blocking my antivirus?
 
Having said that, the IPs in question in your log are in Romania and most are hosted by voxility.net.
They are associated with malicious content.

If you are seeing many such blocks, especially with no open browsers, it could be a sign of infection.
 
It might be a good idea to follow the advice  in this pinned topic: Available Assistance For Possibly Infected Computers.
A malware analyst will assist you with looking into the issue.

Thanks,

daledoc1

post-29793-0-19548000-1390130025_thumb.p

Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.