avastsvc.exe blocked

Viruses and worms
1

I have two antivirus programs because i needed a second to help deal with an infection. Now my secondary antivirus is blocking outgoing connections from Process: avastsvc.exe from accessing IP address 5.9.106.214

Since i was previously infected i need to know if this is a false positive. What is IP address 5.9.106.214 ?

2

Today’s logs of the blocked outbound attempts are as follows (ROB-PC and Rob are PC identification and username):

2013/12/18 20:55:36 -0500 ROB-PC Rob IP-BLOCK 5.9.106.214 (Type: outgoing, Port: 50063, Process: avastsvc.exe)
2013/12/18 20:55:36 -0500 ROB-PC Rob IP-BLOCK 5.9.106.214 (Type: outgoing, Port: 50064, Process: avastsvc.exe)
2013/12/18 20:57:53 -0500 ROB-PC Rob IP-BLOCK 5.9.106.214 (Type: outgoing, Port: 50180, Process: avastsvc.exe)
2013/12/18 20:57:53 -0500 ROB-PC Rob IP-BLOCK 5.9.106.214 (Type: outgoing, Port: 50181, Process: avastsvc.exe)

3

http://en.utrace.de/whois/5.9.106.214

Read this topic, and attach the logs
http://forum.avast.com/index.php?topic=53253.0

4

Okay, I read the whois, and now i’m confused. For the less computer literate among us, does this mean the IP is NOT a legitimate AVAST connection?

5

Chemist, I encountered the same issue and found this thread researching it. This might help you, it’s from malwarebytes forums:

https://forums.malwarebytes.org/index.php?showtopic=135271

Good luck!

6

I initially didn’t try the protocol suggested because I had already tried a different but similar protocol using multiple scanners. So, I tried uninstalling avast I already had Malwarebytes and it detected problems that eluded my scanners. Now, when I try to reboot my machine usually gets stuck a loop of redirects. Trying the protocol suggested above. If you don’t hear back it means the system is dead and I’m waiting on a new version of Windows…