Need help with IP address stuff
November 25th, 2013
I need some advice i have an ip address being blocked outbound by malwarebytes antimalware, i also use Kaspersky internet security
It is happening quite a lot not sure if its part of a legit program or not but seems to be like 2 or 3 different ip addresses just trying to phone home or whatever.
I have blocked most program or all that i know need to be blocked from phoning home and so on.
here is part of a log file
22:53:36 L#%^&ke IP-BLOCK 193.106.172.172 (Type: outgoing, Port: 63370, Process: avp.exe)
22:53:36 L#%^&ke IP-BLOCK 193.106.172.172 (Type: outgoing, Port: 63374, Process: avp.exe)
22:54:08 L#%^&ke IP-BLOCK 193.106.172.172 (Type: outgoing, Port: 63433, Process: avp.exe)
22:54:08 L#%^&ke IP-BLOCK 193.106.172.172 (Type: outgoing, Port: 63437, Process: avp.exe)
22:54:24 L#%^&ke IP-BLOCK 193.106.172.172 (Type: outgoing, Port: 63450, Process: avp.exe)
22:54:24 L#%^&ke IP-BLOCK 193.106.172.172 (Type: outgoing, Port: 63454, Process: avp.exe)
22:54:41 L#%^&ke IP-BLOCK 193.106.172.172 (Type: outgoing, Port: 63471, Process: avp.exe)
22:54:41 L#%^&ke IP-BLOCK 193.106.172.172 (Type: outgoing, Port: 63475, Process: avp.exe)
I also searched the net for a tool to track where these ips are coming from or in my case going too and it showed some map of nowhere in Russia somewhere i think. Just curious on how to find out exactly what it is and who or what it is trying to send info too.
Any help would be great
What is avp.exe? That’s the program that’s phoning home, don’ t really matter where it phones.
I run my firewall on interactive so I can decide what gets to phone home, and what does not =D
SmAsHeDr replied: What is avp.exe?
I believe that is in Kaspersky, lolz
gilly replied: I believe that is in Kaspersky, lolz
Wow, why would Kaspersky block itsself from the internet?
Get comodo firewall, its free.
http://personalfirewall.comodo.com/free-download.html
SmAsHeDr replied: gilly replied: I believe that is in Kaspersky, lolz
Wow, why would Kaspersky block itsself from the internet?
Get comodo firewall, its free.
http://personalfirewall.comodo.com/free-download.html
It’s not blocking itself, 1975wazza is blocking it by the looks of his post.
Kinda defeats the object of having it installed in the first place.
Here is a detailed description on your file, including instructions on how to remove ….
http://www.file.net/process/avp.exe.html
Thanks all for the responses.
I have never blocked avp.exe with anything by my own doing as i did know that it’s meant to be part of Kaspersky internet security, but it’s malwarebytes that is doing the blocking.
And when i say blocking it says it has stopped outbound to address in my initial post I am running legit K.I.S nothing weird seems to happen when the avp.exe gets blocked hmmm but i also do not participate in there user rating things or give the program more rights to do whatever the hell it wants whenever it wants.
Maybe i should not use malwarebytes or find out where within it i can edit and stop it blocking avp.exe which yes i do believe is part of K.I.S. but is that wise to block a major component of K.I.S. but i don’t see why this avp.exe needs to be phoning home or whatever it is really trying to do as often as is does it seems to happen in spurts not continually.
Any opinions or advice on what i really should do i.e edit malwarebytes blocking lists , get rid of malwarebytes completely , but sigh i like that program and some of its features.
Really it just spins me out when i see malwarebytes popup window saying it’s blocked avp.exe and the ip address it was trying to get too all outbound never really seen it stop much inbound except if ur surfing sites u may never goto normally which have been deemed suspect by these companies who make K.I.S & Malwarebytes.
Thanks all for taking the time to have a read of this.
I have scanned my computer many times nothing has been found and done online scans also nothing suspect found.
Thanks All
Just add an exclusion rule in Malwarebytes (ignore list)
Thanks all for input i have taken the advice from “gilly”
and yes i don’t have the popups from malwarebytes.
But it seemed to happen way to often, I mean like way more often then u would expect from the programs update definitions functions im sure it’s all good as it’s a legit version but just leaves well me wondering exactly what is it trying to send out.
Im no IT expert and don’t claim to be at all but i do know my fair share on computers and gets me wondering about things that can and do get sent from most computers.
Thanks all for all inputs and my system atm it’s only a fairly new install of
Win 7 64 bit pro edition legit and everything.
And I have only noticed this above mentioned happenings in like the last month after installing the latest version of K.I.S 2012 downloaded from there secure server it was a fresh install as in the 1st firewall / virus checker to be put on the new install of windows..
I have to shut up now or i will never stop sorry about that
thanks again everyone