Can anyone tell me how to figure out why explorer.exe is attempting to reach this ip? WHy is maleware bytes reporting from explorer.exe? Is this a catchall for unknown origins? Is there a way to drill down to a process list? I am an expert at malware removal however this malwarebyte log is driving me nuts. I dont have any rootkits or infections and this is happenning for the last few days almost nonstop. 2012/02/29 13:28:20 -0500 MARCHOMEPC Marc IP-BLOCK 222.231.8.226 (Type: outgoing, Port: 51117, Process: explorer.exe) 2012/02/29 13:28:20 -0500 MARCHOMEPC Marc IP-BLOCK 222.231.8.226 (Type: outgoing, Port: 51118, Process: explorer.exe) 2012/02/29 13:28:20 -0500 MARCHOMEPC Marc IP-BLOCK 222.231.8.226 (Type: outgoing, Port: 51119, Process: explorer.exe) 2012/02/29 13:28:20 -0500 MARCHOMEPC Marc IP-BLOCK 222.231.8.226 (Type: outgoing, Port: 51120, Process: explorer.exe) 2012/02/29 13:28:20 -0500 MARCHOMEPC Marc IP-BLOCK 222.231.8.226 (Type: outgoing, Port: 51121, Process: explorer.exe) 2012/02/29 13:28:20 -0500 MARCHOMEPC Marc IP-BLOCK 222.231.8.226 (Type: outgoing, Port: 51122, Process: explorer.exe) Sorry this is my first post on this forum just move this if Im in the wrong forum.
