13hour

sho-dan, that is likely a correct action on your part, based on a TELEPHONE CALL from a malware expert who cleans and restores OS systems for a living. He read a previous post on this forum from a User who said it could NOT be a "false positive" although that response was muddled at best. Here's what this IT Professional did. He took a computer he knew was clean, but had not been used for several weeks, so the MBAM definitions were not current. He used the WMP and other Apps without incident. He then updated the definitions, clicked his WMP -- "malicious site 213.174.154.144 has been blocked." In an effort to help others, we had posted a response in the wrong sub-section that might have saved much worry or work, but that post was deleted. It could have easily been moved. I do hope this helps, and that we haven't annoyed anyone with this False Positive, non-infection annoyance. I do hope we posted correctly and haven't offended anyone.

We had a long post to Karimoo deleted by Maurice Naggar that we put in the "HiJack This! sub-forum" because we hadn't read the terms of use and were alarmed by this IP that is being blocked. It is nasty. I won't repeat everything we've been through from a sense of alarm, and I do hope it's okay to post here -- it's rare that we join forums so please forgive us if we breach any protocol. E-SET (NOD32) helped examine our OS and said we do NOT have an infection. Further, without an infection to submit and examine, there is nothing they can do. We do not believe all of these computers are infected but time will tell. The experts at SUPERAntiSpyware are working on this as well, sent a highly detailed response saying it is HIGHLY UNLIKELY we have an infection, but they will continue examining. So it will be interesting. I do hope we haven't annoyed anyone with this non-infection annoyance, but that IP address represents some very ugly subjects and is alarming.

I have the EXACT same problem which started today. The moment I open WMP a popup says malicious site 213.174.154.144 has been blocked. I searched the net and this seems to be a nasty IP. I found a google chat that suggests they are involved with porn and I don't know what to think because we are careful about what sites we visit and do not go to adult type sites at all. We have three computers running XP3 with MBAM on all three, yet this warning only appears on one computer. The only difference between the three is we having been playing WAW online using the machine which now has the MBAM blocking malicious site 213.174.154.144. We have completed scans with MBAM and NOD-32 among others, yet nothing has been found. This is extremely frustrating because clearly something is wrong and I don't think it's a false positive because the other two computers do not spark this warning. Any suggestions you might have would be greatly appreciated.