mbam blocks an ip address that avast can't

[harikrishnan]

I'm using avast free 6.0.1125 and mbam trial. Today while i'm searching by google a pop-up window appeared showing mbam has blocked an IP address. Log given below;

//16:03:58 INTEL IP-BLOCK 115.84.178.208 (Type: outgoing, Port: 49265, Process: avastsvc.exe)

16:03:58 INTEL IP-BLOCK 115.84.178.208 (Type: outgoing, Port: 49266, Process: avastsvc.exe)

16:05:51 INTEL IP-BLOCK 115.84.178.208 (Type: outgoing, Port: 49324, Process: avastsvc.exe)

16:05:51 INTEL IP-BLOCK 115.84.178.208 (Type: outgoing, Port: 49325, Process: avastsvc.exe)//

Is it means MBAM blocked something that Avast! can't...? OR

Either avast network shield/web shield didn't identify it as anything of concern, or possibly mbam got in first.

I wrote about this in avast forum and got one reply that- 'it is not able to get much info on that ip address 115.84.178.208 other than it's in vietnam, "whois" claims it to be unregistered and unknown, best to report the issue to the malwarebytes forum for them to check for you'.

So I'm here.., expecting a reply from the forum....

[daledoc1]

Hello and welcome, harikrishnan:

Please read this article about website blocking here. This is an excerpt:

Why is Malwarebytes' blocking my antivirus?

It isn't, but it may appear so because of the process name shown in the pop up which belongs to your antivirus. This can happen if you use an antivirus software that intercepts all incoming and outgoing internet traffic to look for infections which makes Windows think it is your antivirus initiating the connection and thus Malwarebytes' Anti-Malware thinks the same thing. In the below example you can see that the process name is avp.exe, which belongs to Kaspersky Anti-Virus even though this block was incurred by using Internet Explorer.

Also please read these posts here:

http://forums.malwarebytes.org/index.php?showtopic=20806 and

http://forums.malwarebytes.org//index.php?showtopic=21076

Although I am not an expert (just a home user), it appears you have already researched this enough to know that it is a bad IP.

Chances are, MBAM's active protection module protected you from an infection.

However, it would be best to run scans both with MBAM and AVAST, to be sure.

If there is any possibility -- based on scan findings or computer behavior -- that your computer might be infected, then it would probably be a good idea to have one of the malware experts take a look.

If that is the case, then please do the following, since we do not work on malware removal in this particular part of the forum:

1. First, please go to THIS PAGE, print out, read and follow as many instructions as you can, skipping any you are unable to complete.

2. Then, please describe your computer's symptoms as best you can and post the requested MBAM and DDS logs by starting a new thread at the Malware Removal-HJT forum .

One of the authorized, trained experts will then assist you as soon as possible for one-on-one malware detection and removal.

When you post, please be sure to select Track This Topic & choose one of the email options, so that you will be notified when someone responds.

Please be patient and allow 24-48 hours before bumping your thread.

Other Support Options:

--- Alternatively, as a paying customer using MBAM PRO, you may wish instead to start a support ticket by contacting support at: support@malwarebytes.org; or

--- Premium, fee-based support options are available here.

Also, please use the "Add Reply" button when replying here & at the other boards, so that it will be easier for everyone to follow the thread.

I hope this helps,

daledoc1