Jump to content
pbecker56

Website blocked at address 255.255.255.255

Recommended Posts

Every few seconds I get a message saying a website is being blocked at 255.255.255.255 port 68 outbound. It was coming both from dropbox and svchost.ext. I exited dropbox but the svchost message keeps popping up. Has my computer been compromised?

image.png.52aae8b8370eab2d2f93f6eb47375599.png

Malwarebytes
www.malwarebytes.com

-Log Details-
Protection Event Date: 11/20/17
Protection Event Time: 12:11 PM
Log File: 0f89e6d0-ce2f-11e7-b1c7-0250f26d8703.json
Administrator: Yes

-Software Information-
Version: 3.3.1.2183
Components Version: 1.0.236
Update Package Version: 1.0.3304
License: Premium

-System Information-
OS: Windows 7 Service Pack 1
CPU: x64
File System: NTFS
User: System

-Blocked Website Details-
Malicious Website: 1
, , Blocked, [-1], [-1],0.0.0

-Website Data-
Domain:
IP Address: 255.255.255.255
Port: [68]
Type: Outbound
File: C:\Windows\System32\svchost.exe

 

(end)

Share this post


Link to post
Share on other sites

Have the same issue on 2 x PCs.

Stunningly inadequate response from the Malwarebytes folks thus far. Are they former EA staff!

 

 

Share this post


Link to post
Share on other sites

This is burning up on their threads right now. I don't think I want to shut anything down that might be protecting my system, but 255.255.255.255? Isn't that my own network?

Share this post


Link to post
Share on other sites

We just fixed the block for 255.255.255.255 via a new Database push.

You should be able to remove the  IP exclusion for 255.255.255.255 and everything should work normally.

Can you please give it a try ?

Share this post


Link to post
Share on other sites

I never blocked the address, but I'm still getting the warning. Do I have to block it and then unblock it?

Share this post


Link to post
Share on other sites

I excluded that address and the notices stopped. I deleted the exclusion and the notices reappeared. I am still getting the popup notice after the program change by nikhils.

Share this post


Link to post
Share on other sites

I think what he means is they pushed out a database update and it should be fixed automatically. I would try checking for updates just in case. From the main dashboard click "Updates current".

Mine has stopped, but I also checked for updates

Thanks nikhils. I thought your response was very quick. I appreciate it.

 

Share this post


Link to post
Share on other sites

Please make sure you have the latest Database update.

In the main UI click on Check for updates in the Scan status pane:

image.png.4ac2c1ef216ff33ada432daecf75d550.png

Share this post


Link to post
Share on other sites

Mine was happening on two computers and both have stopped. I'll let you know if it starts up again. Good luck everyone

Share this post


Link to post
Share on other sites

Yes! Manually updating Malwarebytes worked. Thanks, nikhils... that was probably the fastest forum-based tech support solution I've received!

Share this post


Link to post
Share on other sites

I updated the signatures a few minutes ago and have not seen the pop-up since doing so. They were coming up constantly every few minutes before I did that.

Share this post


Link to post
Share on other sites

I'm on the "me too" list now too.  MWB is apparently panicked about Dropbox all the sudden.  Broadcast traffic that is benign. It is blocking syncing to your cloud dropbox.  Basically stopping your syncing.  Adding the exception will let your sync continue.  Just make sure your AV is up to date and running in case there is something up at dropbox.  I've had no triggers as of yet.

Todd

6345    550.904063    192.168.2.74    255.255.255.255    DB-LSP-DISC    242    Dropbox LAN sync Discovery Protocol

Share this post


Link to post
Share on other sites

Same 255.255.255.255 svchost.exe problem and the update has apparently fixed it. Thanks for the very quick response.

Share this post


Link to post
Share on other sites

No, the latest database update does not work for CyberGhost 6 VPN.  I still get the 255.255.255.255 block unless I add an exclusion.  I have version 3.3.1.2183 with component package version 1.0.236 and update package version 1.0.3307.

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now

  • Recently Browsing   0 members

    No registered users viewing this page.

×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.