normar1949

Have been on vacation, and no pc access for a few weeks. Upon checking my MWB Pro "More Tools" I see Chameleon, StartupLite, and Anti-rootkit have been added since my last visit. I assume after checking a few threads, I need to download and save all 3. Is Anti-rootkit something I need to run occasionly as a precaution or on an as needed basis. Once downloaded, does Chameleon do its job as needed, or should I save it to a flash drive also. I assume StartupLite needs to be run when downloaded. If these answers are somewhere already answered, a link to such a place will be fine.

So if we have the paid version, Chameleon is installed and working, and no downloading again is necessary?

Will do as you suggest daledoc1. Yes, it is indeed Labor Day Weekend. Will wait until next week to proceed. Thanks again.

If I do use your resources, it will be option 2. I assume I should attach a copy of my log to the message I send describing my issues. What is the best way to do that.

Thanks again. I will research the posts I found in Google first, to see if there is any info there to help first. Incidently, this follows the FBI Moneypak Scam malware that I used your free version as well as my MSE tools to free myself of a few days ago. Don't know if this related to my issue with the ip address or not.

If you do a search using the MWB forum search, indeed nothihng comes up on the ip add. If you google the address, several MWB forum posts come up concerning this address. Users names, mitty, JeffW, Maxy, and others.

I meant is the specific IP address one that has caused others grief. My pc is working ok, and my scans come up clean. After doing a Google on the add, the results seemed to indicate it was a pretty widespread issue specific to the 91. address. I was wondering if any others here had reported an issue with the exact same add. And if so, was any further action needed. All that my log shows is a block to the address every minute or so. I will just roll with it as long as my pc functions ok.

Thank you for your reply. Is this outgoing address an issue others have reported?

One more question, after checking my logs, I see LOTS of outgoing blocks to 91.218.121.57 After googleing this I find it is some sort if hijacker ware. My scans come up clean. Do I just let MWB do its job, or is it something I need to address.

'Snice. Thanks.

Had XP replaced by 7 on my PC and the person that did the job didn't back up my MWB pro version for reinstall. I found my id and key numbers from my original installation last year. Also, will it be compatible with the Microsoft Security Essentials I have now? I temp installed the free version of MWB, so I guess the first thing I need to do is remove that version. Where do I go to re install the paid version. Thanks.

just had xp replaced with 7, and as a result my MWB paid version is gone. I have my Ref #, ID #, Key, and receipt. Where do I go from here.

Good to go. Thanks.

Yes, I am happy now. Only thing, is when I close the MWB screen, then re open it, the scheduled scan option is exactly like I left it, but the update screen comes back on hourly. However in the area above, where the options you chose are listed, it still says "daily". I ain't messing with it no more. Thanks.

I assume I'm running the current version. My updater is working fine. How can I check what version I am running to be sure.

The tutorials explain very nicely. However, when I try to click the "Remove and quarentine" and "Restart the computer" boxes, and click add, I get the following error message. "An error has occured. Please report this error to our support team" "PROGRAM_ERROR_SCHEDULER_ADD(5011,0,Schedule Task) The object is already on the list."

Any reason that when I try to change settings on my MWB scan scheduler, that nothing seems to change. If I try to change the settings on my scan from daily to weekly, from quick scan to full, or check any of the boxes, such as "Remove and quarentine all threats automatically" then close the window, then click back, everything reverts back to "quick scan", "daily" and non of the six boxes checked. Seems to be working ok according to logs, just can't change anything about the scheduled scans.

I don't have any issues with my computer, so I assume it's not infected. I guess whatever the attackers are searching for, was already protected by firewalls, etc. It is somewhat scary to realize that every minute or so there is someone, probably a bot program, looking for vuneralabilites on our machines. Thanks again.

Spoke too soon, thanks Gary, saw where you answed my question. I figured that would work, just wanted to make sure. Still wonder about their intent, as stated above.

Thanks Gary. My question about turning the baloon pop up off was not answered, but I assume if I uncheck the "Show tooltip baloon" box on their Protection Screen it will stop. I will be good with that. I still have to question how malicious these things are. As I said in my first post, obviously they did not start when MWB paid started blocking them, and announcing it in their pop up baloon. And I get them all the time now. So what has happened in the past before MWB was stopping them. If they were indeed trying to infect my machine, why hasn't it stayed infected. But, all that said, still very happy with my purchase of the paid version.

Can I just uncheck the "Show tooltip baloon when malicious web site is blocked" button to stop the pop up? Then check the logs occasionly to see if any other threats were blocked.

Just installed the paid version of MWB yesterday, and immediately started getting the pop-up baloon saying that MWB has "Succesfully blocked access to a potentially malicious website" "Type Incoming." with an ip address (same 4 keep recurring all in Bejing). Occurs evey minute or so. Have ran scans and found no infection. I know from reading this forum that I am not alone here. I realize that this may not be a problem, just the software doing its job. I realize also that this did not start when I installed the paid version. So this has been occurring for a time, just didn't have the tool to pick it up. It doesn't seem like it can be much of a threat if it hasn't done so in all the months I didn't have paid MWB, of course I could be wrong. Any idea who/what is the cause. I don't think I have any software loaded that they could be trying to communicate with. If I uncheck the "Show tooltip baloon when malicious website is blocked" button will this stop the pop-up, and I can just check the logs for actions taken? BTW, installed the paid version after a VERY good experience with the free version.