Jump to content

Malwarebytes

ip block avwebgrd.exe


4 replies to this topic

#1
redsparro

    New Member

  • Members
  • Pip
  • 7 posts
Hi all,
Have just recently installed Avira Premium alongside my MBAM and am recieving the following IP blocks

13:47:40 Glenn IP-BLOCK 91.207.6.86 (Type: outgoing, Port: 6806, Process: avwebgrd.exe)
13:47:40 Glenn IP-BLOCK 91.207.6.86 (Type: outgoing, Port: 6808, Process: avwebgrd.exe)
13:48:28 Glenn IP-BLOCK 94.228.210.47 (Type: outgoing, Port: 6997, Process: avwebgrd.exe)
13:48:28 Glenn IP-BLOCK 94.228.210.47 (Type: outgoing, Port: 6999, Process: avwebgrd.exe)
13:51:26 Glenn IP-BLOCK 94.228.210.47 (Type: outgoing, Port: 7724, Process: avwebgrd.exe)
13:51:26 Glenn IP-BLOCK 94.228.210.47 (Type: outgoing, Port: 7726, Process: avwebgrd.exe)
14:16:13 Glenn IP-BLOCK 94.228.210.47 (Type: outgoing, Port: 13605, Process: avwebgrd.exe)
14:16:13 Glenn IP-BLOCK 94.228.210.47 (Type: outgoing, Port: 13607, Process: avwebgrd.exe)
14:16:37 Glenn IP-BLOCK 94.228.210.47 (Type: outgoing, Port: 13693, Process: avwebgrd.exe)
14:16:37 Glenn IP-BLOCK 94.228.210.47 (Type: outgoing, Port: 13695, Process: avwebgrd.exe)
14:18:47 Glenn IP-BLOCK 91.207.6.86 (Type: outgoing, Port: 14725, Process: avwebgrd.exe)
14:18:47 Glenn IP-BLOCK 91.207.6.86 (Type: outgoing, Port: 14727, Process: avwebgrd.exe)
14:18:47 Glenn IP-BLOCK 94.228.210.47 (Type: outgoing, Port: 14735, Process: avwebgrd.exe)
14:18:47 Glenn IP-BLOCK 94.228.210.47 (Type: outgoing, Port: 14737, Process: avwebgrd.exe)
14:18:55 Glenn IP-BLOCK 89.28.12.163 (Type: outgoing, Port: 14761, Process: avwebgrd.exe)
14:18:55 Glenn IP-BLOCK 89.28.12.163 (Type: outgoing, Port: 14764, Process: avwebgrd.exe)

The process is obviosly avira's webguard module, but i dont understand why MBAM would be blocking it? Is there anyway of excluding the webguard module from the IP blocking? Is this a compatability issue, two things trying to do the same thing?
Many thanks.

#2
miekiemoes

    Forum Deity

  • Administrators
  • PipPipPipPipPipPip
  • 7,351 posts
  • Gender:Female
  • Location:Belgium
Hi,

Quote

Is this a compatability issue, two things trying to do the same thing?
Yes it is.
In this case, both mbam and Avira block the same here, but mbam "reads" the blocking by Avira's Webguard process. It's not really blocking the avwebgrd.exe, it's just listing what process "intercepts" this IP.
If your Avira webguard would be disabled, then mbam should list the actual process. In either way, in this case, you are protected via both ways.. via Avira and mbam :)
Mieke Verburgh
Director of Research

Posted Image

Follow us: Twitter, Become a fan: Facebook

#3
redsparro

    New Member

  • Members
  • Pip
  • 7 posts
Thanks very much for clarifying that, good to know both are working well together.

#4
miekiemoes

    Forum Deity

  • Administrators
  • PipPipPipPipPipPip
  • 7,351 posts
  • Gender:Female
  • Location:Belgium
You're most welcome :)
Mieke Verburgh
Director of Research

Posted Image

Follow us: Twitter, Become a fan: Facebook

#5
badrotcat

    New Member

  • Members
  • Pip
  • 1 posts

View Postmiekiemoes, on 05 January 2011 - 10:02 AM, said:

Hi,

Yes it is.
In this case, both mbam and Avira block the same here, but mbam "reads" the blocking by Avira's Webguard process. It's not really blocking the avwebgrd.exe, it's just listing what process "intercepts" this IP.
If your Avira webguard would be disabled, then mbam should list the actual process. In either way, in this case, you are protected via both ways.. via Avira and mbam :)


I am very late with an reaction to this case. I had (or still have) the same reaction on my system. I tried to get an explanation from Avira as well. Because I can't understand, why Avira is not logging this attempts. If there would be an entrance in a log-file than I had a better feeling believing your explanation. So I have doubt where you are fishing this information from the webguard from Avira.
Can you give such an information? Avira is not able (and not willing) to give an explanation in such mixed installations.





1 user(s) are reading this topic

0 members, 1 guests, 0 anonymous users

Follow Us