Dalz
Members-
Posts
15 -
Joined
-
Last visited
Reputation
0 Neutral-
Recurring outbound process/website blocked
Dalz replied to Dalz's topic in Resolved Malware Removal Logs
Oops, I didn't see your response on the second page. Thanks for getting back to me and for your time. -
Recurring outbound process/website blocked
Dalz replied to Dalz's topic in Resolved Malware Removal Logs
Just thought I'd check in. -
Recurring outbound process/website blocked
Dalz replied to Dalz's topic in Resolved Malware Removal Logs
Here are the latest. Addition.txt FRST.txt -
Recurring outbound process/website blocked
Dalz replied to Dalz's topic in Resolved Malware Removal Logs
It may not be necessary, but I forgot I had attached this to the false positive thread but not this one. -
Recurring outbound process/website blocked
Dalz replied to Dalz's topic in Resolved Malware Removal Logs
Since it started, I get the warning regularly - basically if I'm browsing, I get it, usually several times every few minutes. -
Recurring outbound process/website blocked
Dalz replied to Dalz's topic in Resolved Malware Removal Logs
Thanks for taking another look. I understand now how they're both trying to intercept the request, but shouldn't I be concerned that the request is happening in the first place? I don't know why that web site is trying to do anything (daily, repeatedly) on my system... -
Recurring outbound process/website blocked
Dalz replied to Dalz's topic in Resolved Malware Removal Logs
Thanks again for the assistance. Here are my files. Protection log.txt mbar-log-2015-01-21 (19-15-10).txt system-log.txt Addition.txt FRST.txt -
Recurring outbound process/website blocked
Dalz replied to Dalz's topic in Resolved Malware Removal Logs
Yep. What would you advise as a next step? -
Thank you. Should I take this back to the help forum? Nothing was found on our first go (which was why it was suggested I post here), but I'd really like to get this fixed...
-
Oops, sorry about that. I'm actually not sure this is a false positive, but was referred here after receiving some help in the malware removal thread and not finding any issues... The IP being reported is local: 192.162.102.151. I've attached a screen shot of the actual pop-up.
-
Hello, I have recently started getting a regular pop-up from Malwarebytes: Malicious website blocked www.kikbonus.com port 50096 outbound c:\program files (x86)\norton security\engine\22.1.0.9\ns.exe Initially the process was listed as Norton's Identity Safe executable. I uninstalled it when I upgraded to the newest Norton, hoping that would end this activity, but I'm still getting it. Only now it's referencing the new NS executable and not the one I uninstalled. I've run complete scans in Norton, Malwarebytes, and Superantispyware but none have found or resolved the problem. As an aside, I use the Kik text app on my phone and recently received a message that seemed to be from Kik, directing me to this very website... Seems a little too coincidental. Any help figuring this out would be greatly appreciated. (Previously posted here - thanks to TwinHeadedEagle for his help there.)
-
Recurring outbound process/website blocked
Dalz replied to Dalz's topic in Resolved Malware Removal Logs
Will do. Thanks. -
Recurring outbound process/website blocked
Dalz replied to Dalz's topic in Resolved Malware Removal Logs
Thanks for your quick response. Any idea what could be causing that site to keep attempting an outgoing process? I'm concerned about the reported process changing from the Identity Safe executable to the Norton Security executable when I uninstalled the former and installed the latter. Google searches on www.kikbonus.com are also not promising... -
Recurring outbound process/website blocked
Dalz replied to Dalz's topic in Resolved Malware Removal Logs
Thank you for your help! Here are the logs. (Oi, the first item in your post has me worried - I've logged in to many sites since this problem started, though most logins have been auto-filled by Norton Identity Safe. Not sure if that prevents capture or not...?) Addition.txt FRST.txt -
Hello, I have recently started getting a regular pop-up from Malwarebytes: Malicious website blocked www.kikbonus.com port 50096 outbound c:\program files (x86)\norton security\engine\22.1.0.9\ns.exe Initially the process was listed as Norton's Identity Safe executable. I uninstalled it when I upgraded to the newest Norton, hoping that would end this activity, but I'm still getting it. Now it's referencing the new NS executable. I've run complete scans in Norton, Malwarebytes, and Superantispyware but none have found or resolved the problem. As an aside, I use the Kik text app on my phone and recently received a message that seemed to be from Kik, directing me to this very website... Any help figuring this out would be greatly appreciated.