Author Topic: I'm curious as to why Avastsvc.exe is connecting to these IPs  (Read 2549 times)

0 Members and 1 Guest are viewing this topic.

VicVegas

  • Guest
I'm curious as to why Avastsvc.exe is connecting to these IPs
« on: December 18, 2012, 09:24:46 PM »
Seeing as I'm the only one in the house who takes care of computer security I figured I take a poke around in my brothers laptop and see whether he was A-OK or not. While digging through various logs and web history I found that MBAM seemed to block certain IP connections by Avastsvc.exe in relation to a website he had been visiting. I could tell for obvious reasons he probably should not be visiting that site.

4.26.235.126 (Type: outgoing, Port: 49409, Process: avastsvc.exe)
204.160.98.253 (Type: outgoing, Port: 49332, Process: avastsvc.exe)
8.27.4.126 (Type: outgoing, Port: 51227, Process: avastsvc.exe)

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: I'm curious as to why Avastsvc.exe is connecting to these IPs
« Reply #1 on: December 18, 2012, 09:29:51 PM »
All internet requests are sent via avastsvc as it is webshield that will take the first look at the site.  So although Avast appears to be implicated it is webshield monitoring where you are going 

VicVegas

  • Guest
Re: I'm curious as to why Avastsvc.exe is connecting to these IPs
« Reply #2 on: December 19, 2012, 12:06:24 AM »
Interesting. I've never had the full version of MBAM running before and I only noticed this because I mistakenly opted-in for the trial.

I'm easily concerned and am really the only careful surfer in the house (for the most part) and I just was curious what it might be. Thanks again.