Author Topic: Malwarebytes IP blocking 208.109.78.133  (Read 4413 times)

0 Members and 1 Guest are viewing this topic.

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37532
  • Not a avast user
Malwarebytes IP blocking 208.109.78.133
« on: October 11, 2009, 12:39:26 PM »
Malwarebytes IP blocking (208.109.78.133) is popping up at this topic?
 http://forum.avast.com/index.php?topic=49597.0
« Last Edit: October 11, 2009, 12:44:05 PM by Pondus »

spg SCOTT

  • Guest

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33900
  • malware fighter
Re: Malwarebytes IP blocking 208.109.78.133
« Reply #2 on: October 11, 2009, 04:40:42 PM »
Hi malware fighters,

See this report:
http://www.unmaskparasites.com/security-tools/find-hidden-links/site/?siteUrl=208.109.78.133

So this controversy is obvious,

polonus
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline nmb

  • Avast Evangelist
  • Massive Poster
  • ***
  • Posts: 3054
Re: Malwarebytes IP blocking 208.109.78.133
« Reply #3 on: October 11, 2009, 05:29:17 PM »

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37532
  • Not a avast user
Re: Malwarebytes IP blocking 208.109.78.133
« Reply #4 on: October 11, 2009, 06:17:12 PM »
So what is it in that Avst forum topic that is trigging the Malwarebytes IP popup?

spg SCOTT

  • Guest
Re: Malwarebytes IP blocking 208.109.78.133
« Reply #5 on: October 11, 2009, 06:20:13 PM »
The image I think, hosted at the posters domain...

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33900
  • malware fighter
Re: Malwarebytes IP blocking 208.109.78.133
« Reply #6 on: October 11, 2009, 06:24:08 PM »
Hi Pondus,

As you go through the original posting all I find mentioned is a decompression bomb flagged.
Decompression bomb — an attack that targets antivirus software during malware analysis.
The attack occurs when antivirus decompresses or unpacks a decompression bomb and attempts to run it in a virtual machine.
Decompression bomb may crash the antivirus and/or subject the system to a denial of service attack by heavily loading the CPU.

One should then boot into safe mode, and run the av again. if it still cannot remove it, youll have to do it manually,

or scan with a non-resident online scanner or use ClamWin,

polonus
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37532
  • Not a avast user
Re: Malwarebytes IP blocking 208.109.78.133
« Reply #7 on: October 11, 2009, 06:29:11 PM »
So it is the image in  " The111 " post?

spg SCOTT

  • Guest
Re: Malwarebytes IP blocking 208.109.78.133
« Reply #8 on: October 11, 2009, 07:01:32 PM »
So it is the image in  " The111 " post?

Yes, the image is hosted at his site, which is a GoDaddy Domain, and they get blocked by MBAM.