Website blocked at address 255.255.255.255

[pbecker56]

Every few seconds I get a message saying a website is being blocked at 255.255.255.255 port 68 outbound. It was coming both from dropbox and svchost.ext. I exited dropbox but the svchost message keeps popping up. Has my computer been compromised?

Malwarebytes
www.malwarebytes.com

-Log Details-
Protection Event Date: 11/20/17
Protection Event Time: 12:11 PM
Log File: 0f89e6d0-ce2f-11e7-b1c7-0250f26d8703.json
Administrator: Yes

-Software Information-
Version: 3.3.1.2183
Components Version: 1.0.236
Update Package Version: 1.0.3304
License: Premium

-System Information-
OS: Windows 7 Service Pack 1
CPU: x64
File System: NTFS
User: System

-Blocked Website Details-
Malicious Website: 1
, , Blocked, [-1], [-1],0.0.0

-Website Data-
Domain:
IP Address: 255.255.255.255
Port: [68]
Type: Outbound
File: C:\Windows\System32\svchost.exe

 

(end)

[nikhils]

Hello @pbecker56

Can you please add an IP exclusion for 255.255.255.255

That should help fix the issue for now.

Thank you

[Surbiton]

How do I do that??

[SlimChance]

I am getting the same message at the same frequency as reported above. I will try excluding the site and report back

[Gioia]

Is that safe?

[pbecker56]

If the site possibly malicious, why would I want to exclude it from being blocked?

[KevinRudd]

Have the same issue on 2 x PCs.

Stunningly inadequate response from the Malwarebytes folks thus far. Are they former EA staff!

 

 

[Gioia]

This is burning up on their threads right now. I don't think I want to shut anything down that might be protecting my system, but 255.255.255.255? Isn't that my own network?

[nikhils]

We just fixed the block for 255.255.255.255 via a new Database push.

You should be able to remove the  IP exclusion for 255.255.255.255 and everything should work normally.

Can you please give it a try ?

[Gioia]

I never blocked the address, but I'm still getting the warning. Do I have to block it and then unblock it?

[cameronsamuel]

Same with me.

[SlimChance]

I excluded that address and the notices stopped. I deleted the exclusion and the notices reappeared. I am still getting the popup notice after the program change by nikhils.

[pbecker56]

I think what he means is they pushed out a database update and it should be fixed automatically. I would try checking for updates just in case. From the main dashboard click "Updates current".

Mine has stopped, but I also checked for updates

Thanks nikhils. I thought your response was very quick. I appreciate it.

 

[nikhils]

Please make sure you have the latest Database update.

In the main UI click on Check for updates in the Scan status pane:

[SlimChance]

I updated my database before I replied and still got the message.

[pbecker56]

Mine was happening on two computers and both have stopped. I'll let you know if it starts up again. Good luck everyone

[Gioia]

Yes! Manually updating Malwarebytes worked. Thanks, nikhils... that was probably the fastest forum-based tech support solution I've received!

[Mal1935]

Same problem as everyone else.

[Curley]

I updated the signatures a few minutes ago and have not seen the pop-up since doing so. They were coming up constantly every few minutes before I did that.

[nikhils]

You are welcome.

[toddk01]

I'm on the "me too" list now too.  MWB is apparently panicked about Dropbox all the sudden.  Broadcast traffic that is benign. It is blocking syncing to your cloud dropbox.  Basically stopping your syncing.  Adding the exception will let your sync continue.  Just make sure your AV is up to date and running in case there is something up at dropbox.  I've had no triggers as of yet.

Todd

6345    550.904063    192.168.2.74    255.255.255.255    DB-LSP-DISC    242    Dropbox LAN sync Discovery Protocol

[JonKing]

Same 255.255.255.255 svchost.exe problem and the update has apparently fixed it. Thanks for the very quick response.

[zakman545]

Same problem, same address, seems to be fixed now. Thanks!

[nikhils]

Glad to know everything worked out with the latest Database update.

Thank you.

[Unicore]

No, the latest database update does not work for CyberGhost 6 VPN.  I still get the 255.255.255.255 block unless I add an exclusion.  I have version 3.3.1.2183 with component package version 1.0.236 and update package version 1.0.3307.