nosake

OK, thanks for your help. I'll deal directly with SoftLayer now.

Aloha, I just had an interesting online chat. I used the www.ip-lookup.net link you provided which, indeed, revealed that the addresses belonged to SoftLayer. Their site provided Online Chat so that's what I did. What do you make of it? You are now chatting with 'Jimmy V' Jimmy V: Hello, thank you for contacting SoftLayer. How can I help you today? Tom: I would like to know why my computer is trying to communicate with your IP address? Gratefully, MBAM is blocking it, but who the hell are you? Jimmy V: We are a hosting provider. If you have someone trying to access your ip address, please send logs of the information to our abuse team. Jimmy V: abuse@softlayer.com Jimmy V: Your email will server as documentation against the customer. Tom: Are you associated with HostGator? GoDaddy? Jimmy V: Hostgator is one of our resellers Tom: Well, that might explain things. I host several sites on HostGator. Tom: Thanks for the info. I'll follow up with HG.

I was able to remove the old chrome version after rebooting.

Hope you can enlarge and read the attached jpg. The chrome uninstaller doesn't work. I'm thinking to dump chrome but retain my profile and just reinstall it. I updated FireFox. I deleted ComboFix and ran the OTL execution as well. Looking forward to hearing from you tomorrow morning. Tom

Hope you can enlarge and read the attached jpg. The chrome uninstaller doesn't work. I'm thinking to dump chrome but retain my profile and just reinstall it. I updated FireFox. I deleted ComboFix and ran the OTL execution as well. Looking forward to hearing from you tomorrow morning. Tom

Hope you can enlarge and read the attached jpg. The chrome uninstaller doesn't work. I'm thinking to dump chrome but retain my profile and just reinstall it. I updated FireFox. I deleted ComboFix and ran the OTL execution as well. Looking forward to hearing from you tomorrow morning. Tom

Results of screen317's Security Check version 0.99.62 Windows 7 Service Pack 1 x64 (UAC is enabled) Internet Explorer 9 ``````````````Antivirus/Firewall Check:`````````````` Windows Firewall Enabled! Microsoft Security Essentials Antivirus up to date! `````````Anti-malware/Other Utilities Check:````````` Malwarebytes Anti-Malware version 1.75.0.1300 Adobe Flash Player 11.6.602.180 Mozilla Firefox 19.0.2 Firefox out of Date! Mozilla Thunderbird (17.0.5) Google Chrome 26.0.1410.43 Google Chrome 26.0.1410.64 ````````Process Check: objlist.exe by Laurent```````` Microsoft Security Essentials MSMpEng.exe Microsoft Security Essentials msseces.exe Malwarebytes Anti-Malware mbamservice.exe Malwarebytes Anti-Malware mbamgui.exe `````````````````System Health check````````````````` Total Fragmentation on Drive C: 12% Defragment your hard drive soon! (Do NOT defrag if SSD!) ````````````````````End of Log``````````````````````

Softlayer rings a bell. I think that's one of the problem sites mentioned in the Google Chrome exploit. Anyway, let me run the stuff you mentioned. I'll get back to you after.

Sure, here are a couple of day's worth. I'm glad MBAM is doing its job but am concerned that something has infiltrated my system and is attempting to dispatch data. Is that the case or just a coincidence that there has been a burst of activity lately? Can I dump all the stuff you suggested I download and run, as well as the generated data? Btw, what is the norm in terms of compensating you for your assistance? Give me a figure. protection-log-2013-04-16.txt protection-log-2013-04-17.txt

OK, all done with ComboFix. I have restored my security programs and Firewall, too. ComboFix.txt

Google Chrome. I read earlier today that Chrome was having some trouble, but I don't want to bet the farm that the Bleeping Computer link is safe, do you?

Interestingly enough, I tried downloading ComboFix from Bleeping Computer as suggested, but both times received a warning message about the downloaded file so I opted to discard it. What's up with that? AdwCleanerS1.txt

OK, here you go. AFAIC, we can dump Firefox altogether. I use Chrome and keep FF as a backup. AdwCleanerR1.txt

Aloha, Thanks for looking into this for me. Tom RKreport1_S_04172013_02d0910.txt

I've run scans with MBAM and MBAR. Caught some trojans a couple days back but continue to have outgoing IP Blocking problems when Chrome is running. dds.txt attach.txt

Aloha, I have found Commission Junction to be a dishonest company. I could have sworn CleverBridge was the affiliate contractor for MBAM. If the latter, I'm interested. If the former, not at all.

Have any Windows users tried MBAM without AV protection?

Me too!