NoStall

Sorry, didn't see request to post log. I have never done this so here goes: Database version: v2013.04.17.10 Windows 7 Service Pack 1 x64 NTFS Internet Explorer 9.0.8112.16421 JPs :: FALCONSLI7 [administrator] Protection: Enabled 4/17/2013 1:45:38 PM mbam-log-2013-04-17 (13-45-38).txt Scan type: Quick scan Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM | P2P Scan options disabled: Objects scanned: 240600 Time elapsed: 1 minute(s), 54 second(s) Memory Processes Detected: 0 (No malicious items detected) Memory Modules Detected: 0 (No malicious items detected) Registry Keys Detected: 0 (No malicious items detected) Registry Values Detected: 0 (No malicious items detected) Registry Data Items Detected: 0 (No malicious items detected) Folders Detected: 0 (No malicious items detected) Files Detected: 0 (No malicious items detected) (end) 2013/04/17 07:11:16 -0700 FALCONSLI7 (null) MESSAGE Starting protection 2013/04/17 07:11:16 -0700 FALCONSLI7 (null) MESSAGE Protection started successfully 2013/04/17 07:11:16 -0700 FALCONSLI7 (null) MESSAGE Starting IP protection 2013/04/17 07:11:17 -0700 FALCONSLI7 (null) MESSAGE IP Protection started successfully 2013/04/17 07:16:32 -0700 FALCONSLI7 JPs IP-BLOCK 50.23.124.152 (Type: outgoing, Port: 49253, Process: firefox.exe) 2013/04/17 07:16:32 -0700 FALCONSLI7 JPs IP-BLOCK 50.23.124.152 (Type: outgoing, Port: 49254, Process: firefox.exe) 2013/04/17 07:20:33 -0700 FALCONSLI7 JPs IP-BLOCK 50.23.124.152 (Type: outgoing, Port: 49433, Process: firefox.exe) 2013/04/17 07:20:33 -0700 FALCONSLI7 JPs IP-BLOCK 50.23.124.152 (Type: outgoing, Port: 49436, Process: firefox.exe) 2013/04/17 07:20:49 -0700 FALCONSLI7 JPs IP-BLOCK 50.23.124.152 (Type: outgoing, Port: 49494, Process: firefox.exe) 2013/04/17 07:20:49 -0700 FALCONSLI7 JPs IP-BLOCK 50.23.124.152 (Type: outgoing, Port: 49495, Process: firefox.exe) 2013/04/17 07:20:49 -0700 FALCONSLI7 JPs IP-BLOCK 50.23.124.152 (Type: outgoing, Port: 49499, Process: firefox.exe) 2013/04/17 07:20:49 -0700 FALCONSLI7 JPs IP-BLOCK 50.23.124.152 (Type: outgoing, Port: 49500, Process: firefox.exe) 2013/04/17 08:14:10 -0700 FALCONSLI7 JPs IP-BLOCK 50.23.124.152 (Type: outgoing, Port: 49989, Process: firefox.exe) 2013/04/17 08:14:10 -0700 FALCONSLI7 JPs IP-BLOCK 50.23.124.152 (Type: outgoing, Port: 49990, Process: firefox.exe) 2013/04/17 08:22:50 -0700 FALCONSLI7 JPs MESSAGE Executing scheduled update: Flash Scan | Hourly | Silent 2013/04/17 08:22:57 -0700 FALCONSLI7 JPs MESSAGE Scheduled update executed successfully: database updated from version v2013.04.17.01 to version v2013.04.17.06 2013/04/17 08:22:57 -0700 FALCONSLI7 JPs MESSAGE Starting database refresh 2013/04/17 08:22:57 -0700 FALCONSLI7 JPs MESSAGE Stopping IP protection 2013/04/17 08:22:57 -0700 FALCONSLI7 JPs MESSAGE IP Protection stopped successfully 2013/04/17 08:23:00 -0700 FALCONSLI7 JPs MESSAGE Database refreshed successfully 2013/04/17 08:23:00 -0700 FALCONSLI7 JPs MESSAGE Starting IP protection 2013/04/17 08:23:00 -0700 FALCONSLI7 JPs MESSAGE Executing scheduled scan: Flash Scan | -terminate 2013/04/17 08:23:00 -0700 FALCONSLI7 JPs MESSAGE Scheduled scan executed successfully 2013/04/17 08:23:01 -0700 FALCONSLI7 JPs MESSAGE IP Protection started successfully 2013/04/17 08:32:15 -0700 FALCONSLI7 JPs IP-BLOCK 50.23.124.152 (Type: outgoing, Port: 50600, Process: firefox.exe) 2013/04/17 08:32:15 -0700 FALCONSLI7 JPs IP-BLOCK 50.23.124.152 (Type: outgoing, Port: 50601, Process: firefox.exe) 2013/04/17 08:34:15 -0700 FALCONSLI7 JPs IP-BLOCK 50.23.124.152 (Type: outgoing, Port: 50690, Process: firefox.exe) 2013/04/17 08:34:15 -0700 FALCONSLI7 JPs IP-BLOCK 50.23.124.152 (Type: outgoing, Port: 50691, Process: firefox.exe) 2013/04/17 08:41:52 -0700 FALCONSLI7 JPs IP-BLOCK 50.23.124.152 (Type: outgoing, Port: 51080, Process: firefox.exe) 2013/04/17 08:41:52 -0700 FALCONSLI7 JPs IP-BLOCK 50.23.124.152 (Type: outgoing, Port: 51086, Process: firefox.exe) 2013/04/17 09:29:55 -0700 FALCONSLI7 JPs MESSAGE Executing scheduled update: Flash Scan | Hourly | Silent 2013/04/17 09:30:00 -0700 FALCONSLI7 JPs MESSAGE Scheduled update executed successfully: database updated from version v2013.04.17.06 to version v2013.04.17.07 2013/04/17 09:30:00 -0700 FALCONSLI7 JPs MESSAGE Starting database refresh 2013/04/17 09:30:00 -0700 FALCONSLI7 JPs MESSAGE Stopping IP protection 2013/04/17 09:30:00 -0700 FALCONSLI7 JPs MESSAGE IP Protection stopped successfully 2013/04/17 09:30:03 -0700 FALCONSLI7 JPs MESSAGE Database refreshed successfully 2013/04/17 09:30:03 -0700 FALCONSLI7 JPs MESSAGE Starting IP protection 2013/04/17 09:30:03 -0700 FALCONSLI7 JPs MESSAGE Executing scheduled scan: Flash Scan | -terminate 2013/04/17 09:30:03 -0700 FALCONSLI7 JPs MESSAGE Scheduled scan executed successfully 2013/04/17 09:30:04 -0700 FALCONSLI7 JPs MESSAGE IP Protection started successfully 2013/04/17 10:37:47 -0700 FALCONSLI7 JPs MESSAGE Executing scheduled update: Flash Scan | Hourly | Silent 2013/04/17 10:37:48 -0700 FALCONSLI7 JPs MESSAGE Database already up-to-date 2013/04/17 11:36:09 -0700 FALCONSLI7 JPs MESSAGE Executing scheduled update: Flash Scan | Hourly | Silent 2013/04/17 11:36:15 -0700 FALCONSLI7 JPs MESSAGE Scheduled update executed successfully: database updated from version v2013.04.17.07 to version v2013.04.17.09 2013/04/17 11:36:15 -0700 FALCONSLI7 JPs MESSAGE Starting database refresh 2013/04/17 11:36:15 -0700 FALCONSLI7 JPs MESSAGE Stopping IP protection 2013/04/17 11:36:15 -0700 FALCONSLI7 JPs MESSAGE IP Protection stopped successfully 2013/04/17 11:36:17 -0700 FALCONSLI7 JPs MESSAGE Database refreshed successfully 2013/04/17 11:36:17 -0700 FALCONSLI7 JPs MESSAGE Starting IP protection 2013/04/17 11:36:18 -0700 FALCONSLI7 JPs MESSAGE Executing scheduled scan: Flash Scan | -terminate 2013/04/17 11:36:18 -0700 FALCONSLI7 JPs MESSAGE Scheduled scan executed successfully 2013/04/17 11:36:18 -0700 FALCONSLI7 JPs MESSAGE IP Protection started successfully 2013/04/17 12:12:09 -0700 FALCONSLI7 JPs MESSAGE Executing scheduled update: Flash Scan | Hourly | Silent 2013/04/17 12:12:10 -0700 FALCONSLI7 JPs MESSAGE Database already up-to-date 2013/04/17 13:43:07 -0700 FALCONSLI7 JPs MESSAGE Executing scheduled update: Flash Scan | Hourly | Silent 2013/04/17 13:43:21 -0700 FALCONSLI7 JPs MESSAGE Scheduled update executed successfully: database updated from version v2013.04.17.09 to version v2013.04.17.10 2013/04/17 13:43:21 -0700 FALCONSLI7 JPs MESSAGE Starting database refresh 2013/04/17 13:43:22 -0700 FALCONSLI7 JPs MESSAGE Stopping IP protection 2013/04/17 13:43:22 -0700 FALCONSLI7 JPs MESSAGE IP Protection stopped successfully 2013/04/17 13:43:24 -0700 FALCONSLI7 JPs MESSAGE Executing scheduled scan: Flash Scan | -terminate 2013/04/17 13:43:24 -0700 FALCONSLI7 JPs MESSAGE Scheduled scan executed successfully 2013/04/17 13:43:25 -0700 FALCONSLI7 JPs MESSAGE Database refreshed successfully 2013/04/17 13:43:25 -0700 FALCONSLI7 JPs MESSAGE Starting IP protection 2013/04/17 13:43:26 -0700 FALCONSLI7 JPs MESSAGE IP Protection started successfully 2013/04/17 13:53:09 -0700 FALCONSLI7 JPs IP-BLOCK 50.97.214.162 (Type: outgoing, Port: 51888, Process: firefox.exe) 2013/04/17 13:53:09 -0700 FALCONSLI7 JPs IP-BLOCK 50.97.214.162 (Type: outgoing, Port: 51890, Process: firefox.exe) 2013/04/17 14:15:48 -0700 FALCONSLI7 JPs MESSAGE Executing scheduled update: Flash Scan | Hourly | Silent 2013/04/17 14:15:49 -0700 FALCONSLI7 JPs MESSAGE Database already up-to-date 2013/04/17 14:17:34 -0700 FALCONSLI7 JPs IP-BLOCK 50.97.218.220 (Type: outgoing, Port: 52303, Process: firefox.exe) 2013/04/17 14:17:34 -0700 FALCONSLI7 JPs IP-BLOCK 50.97.218.220 (Type: outgoing, Port: 52305, Process: firefox.exe) 2013/04/17 14:17:34 -0700 FALCONSLI7 JPs IP-BLOCK 50.97.218.220 (Type: outgoing, Port: 52359, Process: firefox.exe) 2013/04/17 14:17:34 -0700 FALCONSLI7 JPs IP-BLOCK 50.97.218.220 (Type: outgoing, Port: 52378, Process: firefox.exe) 2013/04/17 14:17:34 -0700 FALCONSLI7 JPs IP-BLOCK 50.97.218.220 (Type: outgoing, Port: 52379, Process: firefox.exe) 2013/04/17 14:25:10 -0700 FALCONSLI7 JPs IP-BLOCK 50.97.218.220 (Type: outgoing, Port: 52539, Process: firefox.exe) Hope this helps. Saw earlier post that the company works with MBAM, this is very good. It makes me feel much better and I won't worry so much about all this.

MBAM updated. Flash scan AND Quick Scan run. No malware found. BUT, as I have said and many others, these IP addresses are not showing up in any scan by anything. Back to you. Thanks.

O.K. I was wrong. I posted, yesterday, what I thought was a solution to this problem. Late last night I fired up the computer and lo-and-behold up popped the warning about blocking 50.97.etc etc. F@#$ ! This morning the warning popped up with the 50.23.etc.etc. warning. Sorry. Yesterday when I posted I think there were only 3 entries on this thread, I see that many people are having the problem and have found the same thing I have (Pretty much why I quoted you, HukkaBukka, good post). I haven't read all the entries, but the 50.97 IP address is for a company called SoftLayer in Dallas, and the 50.23 IP is listed for BlueKai in San Jose, CA. I have sent a request to Malwarebytes Customer Service to see if they can help. If I get an answer or discover one on my own I will repost.

HEADS UP Silkphoenix and Jcfigi, this is an update with a solution. If you don't have it already, download and install CCleaner http://www.piriform.com/ccleaner/ Run cleaner with default settings; it will clean out your internet cache etc. etc. You may also want to run its registry cleaner, but be sure to back up the registry before cleaning; I have never had a problem after cleaning but better safe then sorry. I analysed my registry (using CCleaner) and it didn't find anything related to this IP, then I cleaned it. When it is all done, reboot. I just did this and the problem is gone: 50.97. etc.etc does NOT show up anymore. Don't know where I got it, probably from a search sometime this weekend. It does not show up in scans by MB nor Norton (Full system scans). Please post if this solves your problem. Good Luck.

Having the same problem. Happened yesterday and this morning. Malwarebytes, thanks for stopping this if it is malicious, However, I have not had this happen with Firefox in the past. 2013/04/16 09:09:11 -0700 FALCONSLI7 JPs IP-BLOCK 50.97.214.162 (Type: outgoing, Port: 49498, Process: firefox.exe) 2013/04/16 09:09:11 -0700 FALCONSLI7 JPs IP-BLOCK 50.97.214.162 (Type: outgoing, Port: 49497, Process: firefox.exe) This does not seem to be affecting the browser nor internet access, but Google search of the IP indicates it is a legitamate IP, and one entry in the Google search stated they had made contact with the company and that company said it did not know why the poster's computere had the IP address on it. Malwarebytes, give us a hand here. Is this a false positive or do I/we need to dig a little deeper on our PC's to resolve this. Norton and MB do not show any 'baddies' on my PC. Thanks.