go_rangers

It has not done that (attempt to connect to malware sites) again since that day. I have checked all the protection logs from then to now and there's nothing bad in them, no scans have found anything, Is there a scenario where something was temporarily in place, because of some web page that was browsed, and then exiting Chrome, rebooting, MWB blocking the attempts, something along any of those lines caused it to go away before it could implant itself firmly? I guess I am coming to the conclusion that nothing is wrong, but I can't say I'm 100% comfortable. I do still find that Chrome acts a bit strange in sometimes timing out or complaining of DNS problems trying to reach sites that Firefox can reach fine. I guess I can't prove that's not some intermittent internet issue.

Still here. Ball is in your court? Did I not provide what you requested? For some reason it did not email me that your latest post was there.

That was quick. I assume you meant just open MWB and copy the existing file, and not run another scan of any sort. Here it is. I also included yesterday's file, which has the detections in it. MWB Protection log 0424.txt MWB Protection log 0425.txt

Hi. I upgraded to the paid version of MWB a few weeks ago. Yesterday, just as I was exiting Chrome, I got a popup saying a connection attempt to a malicious website (54.213.72.133, domain qeswu.com) was blocked. A couple of hours later, there was another one (same address, domain was wt2secure.com this time.) The second time I wasn't doing anything at all on the machine. From what I can see, this address is on a list of hacker sites so this is concerning. I have checked the MWB protection logs going back about 2 weeks - there are no other instances of this. I have noticed some odd behavior on this machine (which I could describe if it helps), so I would feel better if someone could advise me whether there is something to be concerned about here. I have run a full scan with MWB and MSE, neither detected anything. I ran a couple of rootkit detectors, Sophos and GMER, neither of them found anything either. I'm including the FRST log and addition file here. I also ran aswMBR yesterday (since other dialogs about this issue have suggested it) and I have that log if it's needed. I haven't attempted to actually do anything and am not planning to pending further input. Thanks for any help you can provide. Addition.txt FRST.txt