VBoxNetNAT Blocked by ANtivirus

Discussions related to using VirtualBox on Windows hosts.
Post Reply
farkas
Posts: 37
Joined: 5. Mar 2015, 09:16

VBoxNetNAT Blocked by ANtivirus

Post by farkas »

Hi I have installed latest 5.2 of VBox at my Window 10
Version 5.2.18 r124319 (Qt5.6.2)
I have configured NAT and Host only network adapters.

I have received a blocked request from VBoxNetNAT.exe
updateNotePadpp3.PNG
updateNotePadpp3.PNG (23.58 KiB) Viewed 964 times
This site is blocked by Trend-Micro:
skyprobar.PNG
skyprobar.PNG (13.04 KiB) Viewed 964 times
Is it a malicious request?

Thanks,
Sandor
mpack
Site Moderator
Posts: 39134
Joined: 4. Sep 2008, 17:09
Primary OS: MS Windows 10
VBox Version: PUEL
Guest OSses: Mostly XP

Re: VBoxNetNAT Blocked by ANtivirus

Post by mpack »

If your question is "Why is Trend Micro OfficeScan blocking my attempts to access <skyprobar website URL>" then I believe you should direct that question to Trend Micro.

VBoxNetNat.exe is simply the application which routed your request. It did not originate the request nor block it.
socratis
Site Moderator
Posts: 27329
Joined: 22. Oct 2010, 11:03
Primary OS: Mac OS X other
VBox Version: PUEL
Guest OSses: Win(*>98), Linux*, OSX>10.5
Location: Greece

Re: VBoxNetNAT Blocked by ANtivirus

Post by socratis »

Another piece of advice, would be to completely uninstall Trend Micro OfficeScan. You don't need it, Win10 has an excellent built-in antivirus, which simply works.

As opposed to the overzealous Trend Micro OfficeScan...
Do NOT send me Personal Messages (PMs) for troubleshooting, they are simply deleted.
Do NOT reply with the "QUOTE" button, please use the "POST REPLY", at the bottom of the form.
If you obfuscate any information requested, I will obfuscate my response. These are virtual UUIDs, not real ones.
farkas
Posts: 37
Joined: 5. Mar 2015, 09:16

Re: VBoxNetNAT Blocked by ANtivirus

Post by farkas »

VrusTotal has a report of 4/67 as skyprobar.info is a malicious site.
I think this is why Trend-Micro blocked this site.
I will investigate the guest OS which was running at last detection. But I did updating Notepad++ at host when received the last notification, so it is not from my interaction at guest.

Thanks!
Post Reply