Author Topic: MBAM blocking avastsvc.exe outgoing  (Read 4382 times)

0 Members and 1 Guest are viewing this topic.

beck

  • Guest
MBAM blocking avastsvc.exe outgoing
« on: June 30, 2011, 03:23:25 PM »
08:12:10   NewUser   IP-BLOCK   74.55.136.34 (Type: outgoing, Port: 50452, Process: avastsvc.exe)
08:12:10   NewUser   IP-BLOCK   74.55.136.34 (Type: outgoing, Port: 50453, Process: avastsvc.exe)
08:12:10   NewUser   IP-BLOCK   74.55.136.34 (Type: outgoing, Port: 50455, Process: avastsvc.exe)
08:12:10   NewUser   IP-BLOCK   74.55.136.34 (Type: outgoing, Port: 50456, Process: avastsvc.exe)

That is from the log for MBAM. I think it was correct since this is not a normal avast IP address for avast to send to. So, is my system infected with something that both cannot see?

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67194
Re: MBAM blocking avastsvc.exe outgoing
« Reply #1 on: June 30, 2011, 03:28:02 PM »
I'm not used to this, but isn't this Web Shield scanning of avast that is being "detected" by MBAM?
The best things in life are free.

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89438
  • No support PMs thanks
Re: MBAM blocking avastsvc.exe outgoing
« Reply #2 on: June 30, 2011, 03:59:30 PM »
It is the web shield handling browser requests to connect to that IP or it might even be one of avasts IP's which MBAM considers a malicious IP as I believe they have some at the planet internet services. Check out the servers.def file and you also see some IPs in that range 74.55. which are avast update servers, mots of which are test5beta

Personally I have switched off the MBAM malicious IP as I found it more of a hindrance than a help (a pain in the rear), it is too damn sensitive. Not all IPs are malicious either, so the blocking isn't just for malicious IPs, too widespread.
« Last Edit: June 30, 2011, 04:06:52 PM by DavidR »
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.6.6121 (build 24.6.9241.848) UI 1.0.809/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

scrub

  • Guest
Re: MBAM blocking avastsvc.exe outgoing
« Reply #3 on: June 30, 2011, 08:35:04 PM »
It is the web shield handling browser requests to connect to that IP or it might even be one of avasts IP's which MBAM considers a malicious IP as I believe they have some at the planet internet services. Check out the servers.def file and you also see some IPs in that range 74.55. which are avast update servers, mots of which are test5beta

Personally I have switched off the MBAM malicious IP as I found it more of a hindrance than a help (a pain in the rear), it is too damn sensitive. Not all IPs are malicious either, so the blocking isn't just for malicious IPs, too widespread.

How do you switch off the mbam malicious IP scan?

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89438
  • No support PMs thanks
Re: MBAM blocking avastsvc.exe outgoing
« Reply #4 on: June 30, 2011, 08:48:38 PM »
It is in the Protection tab of the mine interface, see image.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.6.6121 (build 24.6.9241.848) UI 1.0.809/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

DonZ63

  • Guest
Re: MBAM blocking avastsvc.exe outgoing
« Reply #5 on: June 30, 2011, 11:11:29 PM »
Personally I have switched off the MBAM malicious IP as I found it more of a hindrance than a help (a pain in the rear), it is too damn sensitive. Not all IPs are malicious either, so the blocking isn't just for malicious IPs, too widespread.

I found just the opposite. I so far have had MBAM Pro IP blocker block one IP and that is when I purposely browsed to a porn site to see what the popup blocker would catch.

I turned it off because it was causing major slow downs and disconnects in IE8. MBAM IP blocker doesn't seem to be very compatiable with Avast's web shield.

 

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89438
  • No support PMs thanks
Re: MBAM blocking avastsvc.exe outgoing
« Reply #6 on: June 30, 2011, 11:48:55 PM »
Basically you are confirming what I said, it is more of a hindrance than a help. Whilst some would consider p.o.r.n. sites objectionable that should be no reason to block them as the protection is meant to (as it is named) protect against malicious sites.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.6.6121 (build 24.6.9241.848) UI 1.0.809/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security