WBT

Hi Maurice. I did a full scan as directed and there's nothing there. It's strange that the firewall doesn't block the ransomware attempts like it blocks the compromised site attempts, but since you say there's nothing to worry about, I'll ignore the warnings. Than you for all your help. It's very much appreciated!

Hi Maurice. Thank you for the information. Scan is clean. Logs attached. The strange part is that the firewall isn't blocking. If it's an external threat like the compromised sites, shouldn't the firewall stop it from ever reaching my system? I like the notices and would like to block the attempts from ever reaching my machine if possible.Thanks again. scan.txt

I added ALL the IP addresses I found into the Firewall block list (10 or so). After that, no more compromised block pop-ups. However, one of the IP's I already blocked yesterday via the firewall, is now giving me a ransomware threat instead. Logs attached. Thanks for the help so far. 1 problem down, 1 to go. mbst-grab-results.zip

That's strange, because I see a LOT of very different IP's. Images attached. 114.32... 108.175... 120.21... etc. Are they all RDP attempts? Or are just the 185.xx.xx.xx IP's RDP attempts?

That was fast! So I'm 100% NOT infected, and it 100% IS someone trying to hack in from outside? That's a relief. The only problem is that they constantly change the IP address, so I can't put a one time block on it. Where in the logs did you see this information? I searched and didn't see anything. I would like to learn how to identify this issue in case they stop now and it happens again in the future. Thanks!

Hello all. I was asked to post here, so here goes. I keep getting inbound compromised event warnings every few minutes. All web browsers are closed, email is closed, etc. The only active programs (that I know about) are in the tray. I didn't install anything new. MB doesn't tell me the source of the problem. Malwarebytes scan is clean. ADWcleaner scan is clean. Logs attached as requested. Thank you for any help. These warnings are freaking me out. MB Version: 4.1.0.56 (Windows x64)Update package: 1.0.23654Component package: 1.0.896 mbst-grab-results.zip FRST.txt Addition.txt

@exile360 I tried those tools first. Clean MalwareBytes scan. Clean AWDcleaner scan. Didn't see anything sketchy in the Farbar scan either. I'll check that out too though. Thanks.

The zip file is attached. Thanks for replying. mbst-grab-results.zip

Hello. I keep getting compromised event warnings every few minutes. All web browsers are closed, email is closed, etc. The only active programs (that I know about) are in the tray. I didn't install anything new. MB doesn't tell me the source of the problem. Malwarebytes scan is clean. ADWcleaner scan is clean. The good thing seems to be that the connections are inbound instead of outbound. Is someone trying to gain access to my box from outside, and MB is blocking it? I'm at a loss. MB Version: 4.1.0.56 Update package: 1.0.23654 Component package: 1.0.896 Thanks in advance.