Eset nod32 av

[giarmul]

Malwarebytes always blocks update server of ESET NOD32 AntiVirus, which is located on 222.186.11.132

[1PW]

Disregard - please see next post.

[1PW]

Hello giarmul:

You may wish to re-check. The IP address 222.186.11.132 resolves to Beijing, China and has been responsible for dictionary attacks in the past.

Would you please Copy/Paste a line from your protection-log that shows this?

Example:

15:40:53   Owner   IP-BLOCK   184.173.97.196 (Type: outgoing)

Thank you.

[giarmul]

Hello giarmul:

You may wish to re-check. The IP address 222.186.11.132 resolves to Beijing, China and has been responsible for dictionary attacks in the past.

Would you please Copy/Paste a line from your protection-log that shows this?

Example:

15:40:53   Owner   IP-BLOCK   184.173.97.196 (Type: outgoing)

Thank you.

14:28:57 Evita & Viktors IP-BLOCK 222.186.11.132 (Type: outgoing, Port: 59389, Process: ekrn.exe)

[1PW]

I am checking on this now.

[MysteryFCM]

The IP in question is nothing to do with Eset itself. Eset is being shown because it is querying the IP aswell.

I'd recommend having your machine checked for infection;

http://forums.malwarebytes.org/index.php?showtopic=9573

[giarmul]

The IP in question is nothing to do with Eset itself. Eset is being shown because it is querying the IP aswell.

I'd recommend having your machine checked for infection;

http://forums.malwarebytes.org/index.php?showtopic=9573

This is one of they update servers, hosts is

http://um10.cn.eset.com/eset_upd

http://um11.cn.eset.com/eset_upd

http://um12.cn.eset.com/eset_upd

http://um13.cn.eset.com/eset_upd

http://um14.cn.eset.com/eset_upd

http://um15.cn.eset.com/eset_upd

http://um16.cn.eset.com/eset_upd

Host is eset.com, and in what i should believe, how do you think? Windows are new (6 days). After install it i installed Comodo Firewall + ESET NOD32 + Yours product + Keyscrambler, file hosts in system directory is clear (Turned on all invisible files: hidden and system, there is only one hosts file)

And now i had checked resolve host to ip, for example um11.cn.eset.com and it resolves to 222.186.11.132, and all another updates servers is from that subnet... It is not one false block of yours product, but it is the most unlikely!

Why i should do all by myself?

[MysteryFCM]

Wondering when that happened if that is the case as they never used to have a server there (I use NOD32 myself).

I'll take another look.

[MysteryFCM]

This will be unblocked on the next update. My apologies for the confusion.