Ch3vr0n Posted September 16, 2014 ID:879654 Share Posted September 16, 2014 Since the past few hours MBAM has been alerting me like almost every 5 minutes that there is an outgoing connection to this host with ip 84.22.100.108. I can find very little information on it. I ran procmon and filtered on sc18 and found C:\ProgramData\AVAST Software\Avast\SpamConf\sc18.bin* the only thing i could find that could be related is http://www.wilderssecurity.com/threads/4-0-474-0-and-dns-requests-to-mailshell-net.264933/ and maybe http://www.backgroundtask.eu/Systeemtaken/taakinfo/37627/nis.bat/257D6D3D0E7D716A6250BF54A1A4EF18/ Now my question is. WHY is this happening? Why is MBAM flagging a valid safe? domain? Link to post Share on other sites More sharing options...
sswriter Posted September 16, 2014 ID:879666 Share Posted September 16, 2014 I just started getting the same message. What's up? Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted September 16, 2014 Root Admin ID:879734 Share Posted September 16, 2014 I've asked someone to check on this. Thank you for reporting Link to post Share on other sites More sharing options...
kevs999 Posted September 16, 2014 ID:879742 Share Posted September 16, 2014 Noticed same thing as well this evening, constantly pops up. Link to post Share on other sites More sharing options...
Staff shadowwar Posted September 16, 2014 Staff ID:879744 Share Posted September 16, 2014 will be fixed in about 20 mins. Thanks for reporting. Link to post Share on other sites More sharing options...
captainsherry Posted March 25, 2015 ID:950285 Share Posted March 25, 2015 I am having the same problem. How to fix? Link to post Share on other sites More sharing options...
doncarola2 Posted March 26, 2015 ID:950575 Share Posted March 26, 2015 i'm having same problem started 2 days ago.i've sent 2 emails to support trying to solicate a response.there is nothing on the web. Link to post Share on other sites More sharing options...
MysteryFCM Posted March 26, 2015 ID:950666 Share Posted March 26, 2015 We're not blocking 84.22.100.100, or anything else on 84.22.100/24. Please ensure you post the actual IP and hostname (where applicable) being blocked, and ensure to do so in your own thread, rather than someone else' please (keeps things clean and organized) Important: Please Read Before Reporting A False Positive https://forums.malwarebytes.org/index.php?/topic/20806-important-please-read-before-reporting-a-false-positive/ Link to post Share on other sites More sharing options...
Recommended Posts