Jump to content

FP or not? outgoing IP block 67.215.241.141


daledoc1

Recommended Posts

Hi, all:

MBAM PRO just alerted to an outgoing IP block to: 67.215.241.141 on port 62554 (process: avp.exe, which I know is KIS, acting as a proxy).

At the time, I had 2 Firefox tabs open -- my home page,

www.huffingtonpost.com

and, of all things, the KL user forum:

http://forum.kaspersky.com/index.php?showforum=4

I just ran a manual Quick Scan with MBAM (defs 5821), with KIS, and with SuperAntiSpyware, and they are all clean.

There are no other IP blocks in the MBAM protection logs going back > 1 week.

I have not installed any new software recently.

There are no strange programs in my startup folder.

There is nothing to suspect infection.

With RTP from both KIS2011 and MBAM PRO, I'm not all that concerned.

Could it have been some FF extension phoning home to a home page on a wonky IP range**?

Do I need to do anything else (e.g. start a thread at HJT)?

TIA,

daledoc1

(**I did get a similar outgoing IP block to a different IP (94.100.23.211) on BOTH computers upon updating a FF extension (downloadhelper) last week; I deduced that the extension dev's home page (which opens in a new tab after updating) is being hosted on a scary IP range; but that was 8 days ago and has not been repeated. Needless to say, I haven't tried to replicate this by navigating to that particular page.)

Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.