Alecun Posted June 7, 2011 ID:437792 Share Posted June 7, 2011 Hi, I'm just trying out the product and am concerned by regular IP blocking messages which MBAM claims were initiated by Skype. I've been using Skype for a long time and it has never opened any sites however, being freeware I have no doubt it is supported by ads. Is Skype trying to reach sites to download ad banners please, and if that is the case, why does MBAM consider such sites as malicious? Link to post Share on other sites More sharing options...
1PW Posted June 7, 2011 ID:437820 Share Posted June 7, 2011 Hello Alecun: In a reply, please post an excerpt of the MBAM log that documents your observation.Thank you! Link to post Share on other sites More sharing options...
Alecun Posted June 7, 2011 Author ID:437870 Share Posted June 7, 2011 08:48:18 PBC MESSAGE Protection started successfully08:48:22 PBC MESSAGE IP Protection started successfully11:03:12 PBC IP-BLOCK 222.65.178.149 (Type: incoming, Port: 63754, Process: skype.exe)11:03:12 PBC IP-BLOCK 222.65.178.149 (Type: incoming, Port: 63754, Process: svchost.exe)11:03:12 PBC IP-BLOCK 222.65.178.149 (Type: incoming, Port: 63754, Process: svchost.exe)12:06:34 PBC DETECTION C:\Users\PBC\AppData\Local\Temp\7zS3110.tmp\check.exe Trojan.Agent QUARANTINE19:00:13 PBC MESSAGE Scheduled update executed successfully19:00:43 PBC MESSAGE IP Protection stopped19:00:45 PBC MESSAGE Database updated successfully19:00:46 PBC MESSAGE IP Protection started successfully20:20:49 PBC IP-BLOCK 200.63.43.50 (Type: outgoing, Port: 63754, Process: skype.exe)20:20:49 PBC IP-BLOCK 200.63.43.50 (Type: outgoing, Port: 63754, Process: skype.exe)20:20:49 PBC IP-BLOCK 200.63.43.50 (Type: outgoing, Port: 63754, Process: skype.exe)20:26:25 PBC IP-BLOCK 89.28.94.180 (Type: outgoing, Port: 63754, Process: skype.exe)20:26:33 PBC IP-BLOCK 89.28.94.180 (Type: outgoing, Port: 63754, Process: skype.exe)20:26:33 PBC IP-BLOCK 89.28.94.180 (Type: outgoing, Port: 63754, Process: skype.exe)22:03:20 PBC IP-BLOCK 89.28.24.36 (Type: outgoing, Port: 53704, Process: skype.exe)22:03:20 PBC IP-BLOCK 89.28.24.36 (Type: outgoing, Port: 63754, Process: skype.exe)22:03:28 PBC IP-BLOCK 89.28.24.36 (Type: incoming, Port: 63754, Process: skype.exe)22:03:28 PBC IP-BLOCK 89.28.24.36 (Type: incoming, Port: 63754, Process: svchost.exe)22:03:28 PBC IP-BLOCK 89.28.24.36 (Type: incoming, Port: 63754, Process: svchost.exe)00:38:43 PBC IP-BLOCK 213.155.31.248 (Type: outgoing, Port: 63754, Process: skype.exe)00:38:43 PBC IP-BLOCK 213.155.31.248 (Type: outgoing, Port: 63754, Process: skype.exe)00:38:51 PBC IP-BLOCK 213.155.31.248 (Type: outgoing, Port: 63754, Process: skype.exe)06:10:04 PBC IP-BLOCK 89.28.94.180 (Type: outgoing, Port: 63754, Process: skype.exe)06:10:04 PBC IP-BLOCK 89.28.94.180 (Type: outgoing, Port: 63754, Process: skype.exe)06:10:12 PBC IP-BLOCK 89.28.94.180 (Type: outgoing, Port: 63754, Process: skype.exe) Link to post Share on other sites More sharing options...
1PW Posted June 9, 2011 ID:438955 Share Posted June 9, 2011 Hello Alecun:One or more of those IP addresses could be considered worrisome.Your Skype application may be acting as a Supernode. When Skype isn't actually in-use, it's best to terminate all its processes, even the one in the system tray.HTH Link to post Share on other sites More sharing options...
Mainard Posted June 10, 2011 ID:438970 Share Posted June 10, 2011 Hello Alecun,As I do not want to degrade the time and effort John A made within his post I suggest reading the reply he created Here. This will explain why we block some IPs while using Skype.If you have any further questions I will be glad to assist you further.Thank you very much! Link to post Share on other sites More sharing options...
Alecun Posted June 10, 2011 Author ID:439039 Share Posted June 10, 2011 @ 1PWThanks for your suggestions however, I use Skype as a telephone replacement allowing customers, suppliers, and friends to contact me whenever they wish. This obliges me to have Skype active in online mode which means in the system tray. MBAM's IP blocking is not preventing me from using Skype which is good but I was curious as to why MBAM considered these IP's as malicious as well as why Skype was making outbound connections to those IP addresses without any input from myself? John A's post has kind of answered those questions although I still don't see why ThreeGuser feels that Skype should be on the software to avoid list.@ MainardThanks for your reply. Do you see Skype as malevolent, as in should I replace it with something else? I have to admit I find MSN Messenger far more intrusive but at least MBAM doesn't have a problem with it at this time. Link to post Share on other sites More sharing options...
Mainard Posted June 10, 2011 ID:439245 Share Posted June 10, 2011 Hello Alecun,Skype isn't harmful per se, It does have the ability to connect to other IPs and when you do connect to one that is considered malicious MBAM steps in and blocks that connection. I personally use skype and MBAM Pro with ease, sometimes I get the block as Skype attempts to connect to a malicious IP. I do enjoy seeing MBAM perform it's function in blocking anything potentially malicious to my system.Hope this answers your question. If you still have any other questions please do not hesitate to ask. Thank you! Link to post Share on other sites More sharing options...
Alecun Posted June 10, 2011 Author ID:439260 Share Posted June 10, 2011 Thanks for your reassurance Mainard. Link to post Share on other sites More sharing options...
Mainard Posted June 10, 2011 ID:439289 Share Posted June 10, 2011 Alecun,You are quite welcome! Have a great day. Link to post Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now