Mamakiks

Thank you again

MBAM blocked a outgoing ip adress from skype, can i see somewhere what that ip was? I were too slow to copy it.

Oh okay Results of screen317's Security Check version 0.99.77 Windows 7 Service Pack 1 x64 (UAC is enabled) ``````````````Antivirus/Firewall Check:`````````````` Windows Firewall Enabled! WMI entry may not exist for antivirus; attempting automatic update. `````````Anti-malware/Other Utilities Check:````````` Malwarebytes Anti-Malware version 1.75.0.1300 Java 7 Update 45 Adobe Flash Player 11.9.900.117 Adobe Reader XI Mozilla Firefox (25.0) ````````Process Check: objlist.exe by Laurent```````` Malwarebytes Anti-Malware mbamservice.exe Malwarebytes Anti-Malware mbamgui.exe Malwarebytes' Anti-Malware mbamscheduler.exe `````````````````System Health check````````````````` Total Fragmentation on Drive C: 19% Defragment your hard drive soon! (Do NOT defrag if SSD!) ````````````````````End of Log``````````````````````

Perfectly thank you so much :-)

# AdwCleaner v3.012 - Report created 13/11/2013 at 16:49:25 # Updated 11/11/2013 by Xplode # Operating System : Windows 7 Ultimate Service Pack 1 (64 bits) # Username : MJ - MJ-PC # Running from : E:\Dokumenter\Downloads\AdwCleaner(1).exe # Option : Clean ***** [ Services ] ***** ***** [ Files / Folders ] ***** ***** [ Shortcuts ] ***** ***** [ Registry ] ***** ***** [ Browsers ] ***** -\\ Internet Explorer v0.0.0.0 -\\ Mozilla Firefox v25.0 (da) [ File : C:\Users\MJ\AppData\Roaming\Mozilla\Firefox\Profiles\nqa012v3.default\prefs.js ] ************************* AdwCleaner[R0].txt - [6991 octets] - [10/11/2013 22:50:06] AdwCleaner[R1].txt - [868 octets] - [10/11/2013 22:55:19] AdwCleaner[R2].txt - [1040 octets] - [13/11/2013 16:48:13] AdwCleaner[R3].txt - [1110 octets] - [13/11/2013 16:48:56] AdwCleaner[s0].txt - [7024 octets] - [10/11/2013 22:51:40] AdwCleaner[s1].txt - [928 octets] - [10/11/2013 22:55:55] AdwCleaner[s2].txt - [1106 octets] - [13/11/2013 16:48:31] AdwCleaner[s3].txt - [1032 octets] - [13/11/2013 16:49:25] ########## EOF - C:\AdwCleaner\AdwCleaner[s3].txt - [1092 octets] ########## And the Malwarebytes quickscan. ############################################################################### Malwarebytes Anti-Malware (Trial) 1.75.0.1300 www.malwarebytes.org Database version: v2013.11.13.06 Windows 7 Service Pack 1 x64 NTFS Internet Explorer 8.0.7601.17514 MJ :: MJ-PC [administrator] Protection: Enabled 11/13/2013 4:56:57 PM mbam-log-2013-11-13 (16-56-57).txt Scan type: Quick scan Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM Scan options disabled: P2P Objects scanned: 208542 Time elapsed: 2 minute(s), 8 second(s) Memory Processes Detected: 0 (No malicious items detected) Memory Modules Detected: 0 (No malicious items detected) Registry Keys Detected: 0 (No malicious items detected) Registry Values Detected: 0 (No malicious items detected) Registry Data Items Detected: 0 (No malicious items detected) Folders Detected: 0 (No malicious items detected) Files Detected: 0 (No malicious items detected) (end)

Hi thank you This is all i got from it. RogueKiller V8.7.7 _x64_ [Nov 11 2013] by Tigzy mail : tigzyRK<at>gmail<dot>com Feedback : http://www.adlice.com/forum/ Website : http://www.adlice.com/softwares/roguekiller/ Blog : http://tigzyrk.blogspot.com/ Operating System : Windows 7 (6.1.7601 Service Pack 1) 64 bits version Started in : Normal mode User : MJ [Admin rights] Mode : Scan -- Date : 11/13/2013 11:33:02 | ARK || FAK || MBR | ¤¤¤ Bad processes : 0 ¤¤¤ ¤¤¤ Registry Entries : 5 ¤¤¤ [HJ SMENU][PUM] HKCU\[...]\Advanced : Start_TrackProgs (0) -> FOUND [HJ DESK][PUM] HKCU\[...]\ClassicStartMenu : {645FF040-5081-101B-9F08-00AA002F954E} (1) -> FOUND [HJ DESK][PUM] HKCU\[...]\NewStartPanel : {645FF040-5081-101B-9F08-00AA002F954E} (1) -> FOUND [HJ DESK][PUM] HKLM\[...]\NewStartPanel : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> FOUND [HJ DESK][PUM] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> FOUND ¤¤¤ Scheduled tasks : 0 ¤¤¤ ¤¤¤ Startup Entries : 0 ¤¤¤ ¤¤¤ Web browsers : 1 ¤¤¤ [FF][PROXY] nqa012v3.default : user_pref("network.proxy.type", 2); -> FOUND ¤¤¤ Particular Files / Folders: ¤¤¤ ¤¤¤ Driver : [NOT LOADED 0x0] ¤¤¤ ¤¤¤ External Hives: ¤¤¤ ¤¤¤ Infection : ¤¤¤ ¤¤¤ HOSTS File: ¤¤¤ --> %SystemRoot%\System32\drivers\etc\hosts ¤¤¤ MBR Check: ¤¤¤ +++++ PhysicalDrive0: (\\.\PHYSICALDRIVE0 @ IDE) ST31000524AS ATA Device +++++ --- User --- [MBR] 3167db0199d3b8e1a1db435e8274f4f2 [bSP] 32e2b36c997cb201e72d8e6e3b94e888 : Windows 7/8 MBR Code Partition table: 0 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 2048 | Size: 953866 Mo User = LL1 ... OK! User = LL2 ... OK! +++++ PhysicalDrive1: (\\.\PHYSICALDRIVE1 @ SCSI) OCZ-SOLI D3 SCSI Disk Device +++++ --- User --- [MBR] 1339195fda6d2df57601ab069445165c [bSP] f67b77795a6786151d16c16b68486352 : Windows 7/8 MBR Code Partition table: 0 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 2048 | Size: 57239 Mo User = LL1 ... OK! Error reading LL2 MBR! Finished : << RKreport[0]_S_11132013_113302.txt >>

Hi i'm getting this popup thats getting blocked by MBAM, it seems to be popping when i load new sites or refreshes. I'm getting this message from MBAM - "2013/11/10 23:00:52 +0100 MJ-PC MJ IP-BLOCK 128.204.198.72 (Type: outgoing, Port: 49407, Process: firefox.exe)". I already did all the steps to get here, i would really appreciate some help. Regards Mamakiks. Attach and dds uploaded. attach.txt dds.txt