Jump to content

melonny

Members
  • Posts

    3
  • Joined

  • Last visited

Reputation

0 Neutral
  1. Quick update in case anyone else has this problem. The Malwarebytes block notices didn't happen again for a couple of days. Today they started up again, but only when I visited one of my Pinterest business account boards. I started going through the pins on the board and checking their links - sure enough, one of them led to Malwarebytes' warning page about malware. I deleted that pin, and the block warnings have stopped again. It's only been about an hour since this happened, but because they stopped immediately after deleting the bad link, I feel pretty sure that's all it was.
  2. Hi Advanced Setup, I may have fixed this issue. Yesterday after posting here, I closed Chrome to confirm the connections were only happening when it was open. They were. So then I tried clearing the cookies, which I never do and should do more often. Then I rebooted. Since then, no outbound connections and I'm hearing my fan run much less often. The connections were happening several times an hour before that, so I think this is fixed. If not, I'll come back and try resetting Chrome completely and then we can go from there.
  3. I run Malwarebytes Pro and Emsisoft IS. Both are scanning my system as clean. But Malwarebytes keeps blocking an outgoing connection from Chrome to an IP that is associated with ransomware. Even if my system isn't infected and Malwarebytes is doing its job, I don't like it if there's a file in my computer that's trying to contact a dangerous site. So even though I don't think I'm infected, I'm posting here because I might be and I want to figure this out. Here's the latest Protection Event report: Malwarebytes www.malwarebytes.com -Log Details- Protection Event Date: 9/1/17 Protection Event Time: 12:00 PM Log File: Administrator: Yes -Software Information- Version: 3.1.2.1733 Components Version: 1.0.160 Update Package Version: 1.0.2704 License: Premium -System Information- OS: Windows 10 (Build 14393.1593) CPU: x64 File System: NTFS User: System -Blocked Website Details- Malicious Website: 1 , , Blocked, [-1], [-1],0.0.0 -Website Data- Domain: IP Address: 69.64.147.10 Port: [58763] Type: Outbound File: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (end) That IP address seems to be associated with ransomware, according to a quick search. And here's another one from yesterday: Malwarebytes www.malwarebytes.com -Log Details- Protection Event Date: 8/31/17 Protection Event Time: 9:29 AM Log File: Administrator: Yes -Software Information- Version: 3.1.2.1733 Components Version: 1.0.160 Update Package Version: 1.0.2696 License: Premium -System Information- OS: Windows 10 (Build 14393.1593) CPU: x64 File System: NTFS User: System -Blocked Website Details- Malicious Website: 1 , , Blocked, [-1], [-1],0.0.0 -Website Data- Domain: www.redomestication.com IP Address: 69.64.147.10 Port: [51848] Type: Outbound File: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (end) I was afraid to visit this site to see what it's about. Could these outgoing connections be as simple as having a certain website open in my tabs? I just closed several down 15-20 minutes ago, and stopped getting reports from Malwarebytes. But that may be just coincidence. I don't understand how malvertising or anything on a website could cause Chrome to make outbound connections it shouldn't be making.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.