DraKuL Posted March 27, 2011 ID:405720 Share Posted March 27, 2011 I recently purchased MBAM PRO and I was told that it can run smooth with Avast Internet Security and SUPERAntiSpyware (paid) without causing any conflicts. But I started getting so many popups from MBAM every few minutes saying it blocked an outgoing connection from process - avastsvc.exe I'm pretty sure that this is not a threat and I want to know how to stop MBAM from blocking it. I tried putting avastsvc.exe to the ignore list but it did not work! I will attach the 2 logs containing the details and will also copy paste a small part of it below just to make it clear.Also I got an error message saying it blocked an outgoing connection from skype.exe ( another popup and again it kept popping up pretty often). Does my Skype process contain any form of malware or is this another false positive? if it is, how can i stop it from popping up ?But I am positive that avast process being blocked it a false positive and Please give me a solution to this soon.The part of the log file containing the process of avast being blocked is pasted below and the log files are attached. 01:36:40 Chatura IP-BLOCK 94.100.30.163 (Type: outgoing, Port: 52310, Process: avastsvc.exe)01:37:21 Chatura IP-BLOCK 94.100.30.163 (Type: outgoing, Port: 52338, Process: avastsvc.exe)01:37:21 Chatura IP-BLOCK 94.100.30.163 (Type: outgoing, Port: 52339, Process: avastsvc.exe)01:42:57 Chatura IP-BLOCK 94.100.18.194 (Type: outgoing, Port: 52536, Process: avastsvc.exe)01:42:57 Chatura IP-BLOCK 94.100.18.194 (Type: outgoing, Port: 52537, Process: avastsvc.exe) Link to post Share on other sites More sharing options...
DraKuL Posted March 27, 2011 Author ID:405744 Share Posted March 27, 2011 Just realized that I havent attached the 2 files. Attached it here.Logs.zipprotection-log-2011-03-26.txtprotection-log-2011-03-27.txt Link to post Share on other sites More sharing options...
MysteryFCM Posted March 27, 2011 ID:405750 Share Posted March 27, 2011 Those IPs don't belong to Avast. The reason the Avast process is showing instead of the actual process accessing the IPs, is because Avast is intercepting the requests. Link to post Share on other sites More sharing options...
DraKuL Posted March 27, 2011 Author ID:405751 Share Posted March 27, 2011 So does it mean that I have a virus/ malware on my computer that tries to connect to that particular IP ? Link to post Share on other sites More sharing options...
MysteryFCM Posted March 27, 2011 ID:405752 Share Posted March 27, 2011 Not necessarily, but those IPs have been known for malicious content so I'd recommend having your machine checked in our HJT section.http://forums.malwarebytes.org/index.php?showtopic=9573 Link to post Share on other sites More sharing options...
DraKuL Posted March 27, 2011 Author ID:405753 Share Posted March 27, 2011 Please check this thread as wellhttp://forums.malwarebytes.org/index.php?showtopic=79277&st=0&gopid=405740entry405740There might be a connection between these 2 issues. All the required logs are attached there. 1 question, can MBM run with Avast Internet Security and SUPERAntiSpyware without causing any conflicts ? Link to post Share on other sites More sharing options...
MysteryFCM Posted March 27, 2011 ID:405755 Share Posted March 27, 2011 They can be ran together, yes. However, you'll likely find one or the other has gotten to it first, which can confuse interception detections such as those you saw here. Link to post Share on other sites More sharing options...
MysteryFCM Posted March 27, 2011 ID:405756 Share Posted March 27, 2011 Please check this thread as wellhttp://forums.malwarebytes.org/index.php?showtopic=79277&st=0&gopid=405740entry405740There might be a connection between these 2 issues. All the required logs are attached there.It's possible there's a connection, yes. However, the IP protection shouldn't be getting disabled unless either yourself, or MBAM, disables it. AdvancedSetup will help determine what's causing it for you. Link to post Share on other sites More sharing options...
DraKuL Posted March 27, 2011 Author ID:405759 Share Posted March 27, 2011 Ok Thanks! I ll solve the rest of the issue on the other thread I posted. Link to post Share on other sites More sharing options...
MysteryFCM Posted March 27, 2011 ID:405760 Share Posted March 27, 2011 No problem Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted March 28, 2011 Root Admin ID:406375 Share Posted March 28, 2011 Please see the following post This post will be closed. Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted March 29, 2011 Root Admin ID:406685 Share Posted March 29, 2011 Post re-opened in other post. As this is not related to FP this post will remain closed. Link to post Share on other sites More sharing options...
Recommended Posts