Jump to content

sc18.rules.mailshell.net


Ch3vr0n

Recommended Posts

Since the past few hours MBAM has been alerting me like almost every 5 minutes that there is an outgoing connection to this host with ip 84.22.100.108. I can find very little information on it. I ran procmon and filtered on sc18 and found C:\ProgramData\AVAST Software\Avast\SpamConf\sc18.bin*

 

the only thing i could find that could be related is http://www.wilderssecurity.com/threads/4-0-474-0-and-dns-requests-to-mailshell-net.264933/ and maybe http://www.backgroundtask.eu/Systeemtaken/taakinfo/37627/nis.bat/257D6D3D0E7D716A6250BF54A1A4EF18/

 

Now my question is. WHY is this happening? Why is MBAM flagging a valid safe? domain?

post-126699-0-16187800-1410889209_thumb.

Link to post
Share on other sites
  • 6 months later...

We're not blocking 84.22.100.100, or anything else on 84.22.100/24.

 

Please ensure you post the actual IP and hostname (where applicable) being blocked, and ensure to do so in your own thread, rather than someone else' please (keeps things clean and organized)

 

Important: Please Read Before Reporting A False Positive

https://forums.malwarebytes.org/index.php?/topic/20806-important-please-read-before-reporting-a-false-positive/

Link to post
Share on other sites

Archived

This topic is now archived and is closed to further replies.

Guest
This topic is now closed to further replies.
  • Recently Browsing   0 members

    No registered users viewing this page.

Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.