Malaware bytes keeps blocking something weird...


Recommended Posts

Skype uses a bunch of really nasty techniques and some that it relies on - like the P2P directory, my guess would be it's that.

Or someone on your friends / contacts has contracted something nasty and is bombing that particular port.

Link to comment
Share on other sites

so how is port 10167 even open to your machine? Are you not behind a nat router? Or did the process open up that port via UPnP on your router? Is it tcp or udp?

https://support.skype.com/en-us/faq/FA148/Which-ports-need-to-be-open-to-use-Skype

What port do you have setup for skype to use? See the above link.

Link to comment
Share on other sites

I get this ALL the time.

Taken from the Malwarebytes website

Which was also the first result in a google search for "Malwarebytes skype"

Skype is a Peer-to-Peer (P2P) application. This means that it connects to a wide variety of IP addresses dynamically in order to establish a connection from one point to another.

Because of this, Skype may sometimes connect to IP addresses that are also known for hosting malicious content such as malware. For this reason, Malwarebytes Anti-Malware may block such connections, though this should not affect your usage of Skype or the quality of communication through Skype itself.

If the notifications occur frequently and you wish to disable them while still allowing Malwarebytes Anti-Malware to continue protecting your PC by blocking the malicious websites, then you may do the following:

  1. Open Malwarebytes Anti-Malware and access the Protection tab
  2. Uncheck the box next to Show tooltip balloon when malicious website is blocked.
  3. Click the Exit button

http://helpdesk.malw...are-block-skype

Link to comment
Share on other sites

"I just let it set the ports I didn't change anything.."

Well then it prob is using that port.. And then opened on your router via UPnP? Do you have that enabled?

No unsolicited traffic should even get to your machine from behind a nat router. So either the traffic is an answer to your initiated traffic, or you have the port open via a forward or a UPnP some software opened it up. for example not setting a port on skype to use, and letting it use UpnP.

WW seems to have the answer to what the traffic is -- not some old trojan/backdoor.

Link to comment
Share on other sites

This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.