Emergency Update attempts to Connect To Haliburton Company ?

My firewall alerts me that AVAST Emergency Update tries to connect to IP 34.149.149.62, Houston TX 77032 Halliburton Company.

Is this a legitimate AVAST IP ? It seems suspicious to me.

Thank you in advance.

https://i.postimg.cc/MKBK6GYC/Screenshot-2022-07-12-at-21-35-10-34-149-149-62-Whois-lookup-Whois.png

Hi,

Can you attach a screenshot of the firewall alert?

Yes, thank you.

https://i.postimg.cc/2S2PHJ4K/Screenshot-804.png

https://i.postimg.cc/fLtnSKSg/Screenshot-805.png

My VPN is also not activating.

Attempts to log into 3 email accounts of mine have been made, from a source in America. I’m in the UK.

So is this a normal connection for the update?

Hi,

Yes. I can confirm that analytics tools can use this IP in Avast. In the case of AvEmUpdate- it is used to obtain information about delivered and applied micro-updates.
If you look at these Geo database websites https://who.is/whois-ip/ip-address/34.149.149.62 and https://whatismyipaddress.com/ip/34.149.149.62
Google Datacenter and not Halliburton use the IP. (The website you are using to check the IP is probably using an outdated Geo database).

Is this an Avast or non Avast VPN?

Did you use or was the VPN running in the background while accessing your email? Probably a good idea to use multi-factor authentication with your accounts as well.

I don’t ever use the VPN, but I checked it and now it won’t run.

I take it this is not an Avast VPN. If it is not running, I would suggest that you contact the VPN provider.

It is the AVAST VPN.

It’s like this all the time:

https://i.postimg.cc/GmqsbjQ9/Screenshot-826.png

Hi,

Please uninstall any other antivirus/malware application as well as any other VPN application.

Hi, I do not have any other antivirus or VPN software on my PC. AVAST is the only one.

Please temporarily disable ZoneAlarm, close and re-open Avast One and see if that helps.
If not, please provide a support file ID. https://support.avast.com/article/Submit-support-file