Jump to content

Search the Community

Showing results for tags 'blocked'.

  • Search By Tags

    Type tags separated by commas.
  • Search By Author

Content Type


Forums

  • Announcements
    • Malwarebytes News
    • Beta Testing Program
  • Malware Removal Help
    • Windows Malware Removal Help & Support
    • Mac Malware Removal Help & Support
    • Mobile Malware Removal Help & Support
    • Malware Removal Self-Help Guides
  • Malwarebytes for Home Support
    • Malwarebytes for Windows Support Forum
    • Malwarebytes for Mac Support Forum
    • Malwarebytes for Android Support Forum
    • Malwarebytes for iOS Support
    • Malwarebytes Privacy
    • Malwarebytes Browser Guard
    • False Positives
    • Comments and Suggestions
  • Malwarebytes for Business Support
    • Malwarebytes Endpoint Protection
    • Malwarebytes Incident Response (includes Breach Remediation)
    • Malwarebytes Endpoint Security
    • Malwarebytes Business Products Comments and Suggestions
  • Malwarebytes Tools and Other Products
    • Malwarebytes AdwCleaner
    • Malwarebytes Junkware Removal Tool Support
    • Malwarebytes Anti-Rootkit BETA Support
    • Malwarebytes Techbench USB (Legacy)
    • Malwarebytes Secure Backup discontinued
    • Other Tools
    • Malwarebytes Tools Comments and Suggestions
  • General Computer Help and Security Updates
    • BSOD, Crashes, Kernel Debugging
    • General Windows PC Help
  • Research Center
    • Newest Rogue-Ransomware Threats
    • Newest Malware Threats
    • Newest Mobile Threats
    • Newest IP or URL Threats
    • Newest Mac Threats
    • Report Scam Phone Numbers
  • General
    • General Chat
    • Forums Announcements & Feedback

Find results in...

Find results that contain...


Date Created

  • Start

    End


Last Updated

  • Start

    End


Filter by number of...

Joined

  • Start

    End


Group


AIM


MSN


Website URL


ICQ


Yahoo


Jabber


Location


Interests

  1. Malwarebytes is blocking a shared server that I host websites on. I am aware that this server host many other customers. It has been blocked for months now by Malwarebytes. I have exhausted all efforts with Arivxe support staff to remedy this by contacting you about it. Please remove the following IP and shared host from your blockage list: IP: 207.210.200.212 Shared hostname: dallas163.arvixeshared.com SNAPSHOTS: hXXps://www.mediafire.com/folder/5bjhx3g63bblx/Arvixe The snapshot shows Firefox & Malwarebytes at the same time. If you see a serious problem with the above IP or shared host, please notify Arvixe about your blockage and reasons why? Arvixe was recently sold last year and their support staff probaly could use your insight for the reasons why and maybe they could rectify the issue on their end. In the meantime this is my short findings: VIRUS TOTAL REPORT: https://www.virustotal.com/en/url/1ba2b28b2714c68b5c25468c6d38b0536aa367c5380b91be95c6e358875dafa2/analysis/1485607848/ IP: 207.210.200.2112 RESULT: CLEAN FIREFOX: Reporting IP as Deceptive. But if you closely read Firefox's info about it, this could easily be a result of having a simple form to fill out on the website that would throw this alert and blockage from the browser itself. Blacklist websites used to check for blacklist: hXXps://www.whatismyip.com/blacklist-check/ REPORTING: SpamCannibal SURBL multi (Combined SURBL list) multi.surbl.org hXXps://mxtoolbox.com/SuperTool.aspx?action=blacklist:207.210.200.212&run=problempage# REPORTING: SpamCannibal MY CONSLUSION It is my conclusion from about 15 minutes of investigating someone had used the server for "email spam" in the past. I dont know if it is continuing or not. That's why I reported to Arvixe and they said, " we have escalated the problem". Let's just hope they do something. Thanks!
  2. Hi all, I'm currently using Malwarebytes 3.0 premium trial and for the past few days I've been getting a notification each time I boot up my PC and launch Chrome saying an outgoing connection (usually to bleutrack.com) was blocked. I've sent a support ticket and have been in contact with them for a few days and they told me to scan using FRST, adwcleaner, JRT, HitmanPro, adware removal tool by TSA, and several other programs, but I still haven't been able to find anything. What can I do now?
  3. I keep having a little box in the corner of my screen popping up and telling me that svchost.exe is being blocked by Malwarebytes. Mainly the website is found under the same IP, but the port is always different. This pop-up occurs very frequently, and typically in quick succession. I would really appreciate any help I could get in removing the cause of this problem. Thanks!
  4. Hi Attached pop-up occuring constantly. IP' is not always the same. Is there something wrong with svchost.exe or ...?
  5. Hi, We have a user who's Malwarebytes Anti-Exploit keeps blocking an object scanned at "C:\Program" as it shows in the Malwarebytes Management Console. On his PC's Anti-Exploit logs, it shows that "C:\Program Files (x86)\Microsoft Office\Office14\EXCEL.EXE" is being blocked. His Excel opens up fine by itself but when he uses a program called "Cash Suite" which has a feature built into the program to use Excel, it doesn't successfully open Excel. Any ideas on what is causing this? Thanks!
  6. I have the latest premium version of your program. Recently, perhaps after it upgraded, I have been getting constant (every second or two) popups saying a malicious website was blocked -- over and over again. Outbound sites including Joye-Luck.com are shown over and over again as being blocked. Why do I need to see this thousands of times - or at all? These popups so annoying that I have had to shut off malicious website blocking - even though I would prefer to have it on. Before doing that I have spent over three hours using various AV, anti-rootkit, cleaners & removal tools to try to eliminate the sources. I feel that your next revision should have a setting option to allow the protection while not showing the popups for malicious website blocking. If checked it would still display other threats. The popups are huge and distracting about 4"x4" on my 23" screen. They should be made smaller. What can be done to help? Thank you.
  7. User receiving error message via MBAE "Exploit Code Executing from HEAP Memory Blocked". I have attached contents of MBAE folder on users PC. Malwarebytes Anti-Exploit.zip
  8. Hello, www.optimusdigital.ro (109.163.234.27), a legitimate e-commerce website is blocked. Here's the protection log entry: Malicious Website Protection, IP, 109.163.234.27, www.optimusdigital.ro, 50210, Outbound, C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  9. Our client received an anti-exploit alert with "File/Process Blocked" and "Attacking URL" both saying "N/A." We are wondering how to troubleshoot this without that information. Specifically, the alert says it's "Internet Explorer (and add-ons)," Protection Layer: "Application Hardening," and Protection Technique: "Anti-Exploit fingerprinting attempt detected." Thanks in advance for your help!
  10. Hello Malwarebytes Since yesterday, I have been experiencing a lot of blocked connections on Rundll32.exe. I run ESET Endpoint Security and with certain breaks it attmpts to access domains that a considered malicious. Today I recieved a Postmaster mail telling me one of my mails was blocked because of malware. So something is definately wrong. It started after I tried to install a Nokia Unlock Tool, in the attempt to help a colleague unlock his Nokia 6230i. As I have seen other places, everything starts with Farbar Security Scan Tool. I have attached my FRST.txt and Addition.txt I know the rules about Piracy and torrent programs. This is a work-station and we use peer to peer traffic to transfer files. I work with graphics and marketing and our image library is shared through BitTorrent Sync. New material is sometimes transferred through uTorrent. Addition.txt FRST.txt
  11. Please consider reviewing this shared hosting server with IP: 217.26.70.100. There were two accounts with infected files which are cleaned and quarantined now. Please feel free to contact us if needed. Ivan Zivkovic BeotelNet ISP
  12. A client of ours has reported that their login our server, using a secure cPanel port and the hostname, has been blocked as a Malicious Website. As this is necessary for cPanel and webmail logins for our clients and it's not a malicious site, we are requesting a removal of the listing as well as any potential reason for why it may have been listed. Thank you in advance for your assistance. Domain: gator4257.hostgator.com IP: 108.167.189.101 Please see the attached screenshot for an example.
  13. A client of ours has reported that their login our server, using a secure cPanel port and the hostname, has been blocked as a Malicious Website. As this is necessary for cPanel and webmail logins for our clients and it's not a malicious site, we are requesting a removal of the listing as well as any potential reason for why it may have been listed. Domain: gator4074.hostgator.com IP: 192.185.4.85 Please see the attached screenshot for an example.
  14. Hello, our website was blocked by your software because one of te templates we offering was compromised (Joomla template related to Joomla Useragent attack) we cleaned this tempalte and fixed this vulnerability. Can you please remove our site and all subdomains from your blacklist. billiondigital.com *.billiondigital.com *.*.billiondigital.com *.*.*.billiondigital.com IP:46.165.203.211 THanks!
  15. Our programmer has been getting blocked web site notifications on his computer very randomly. This is all through our Anti-Exploit app. The one he got yesterday, he said he got right after he updated his Notepad++. The ones today he got after visiting our training page: http://bvsperformance.bvsinc.com/ and then he logged out and navigated to https://www.wrike.com. I tried to replicate this on my computer and I didn't get that block from Anti-Exploit. I've checked his browser plugins and extensions and he doesnt have anything different than I do. Any suggestions?
  16. Hi, Today I noticed an inbound connection that was blocked by malwarebytes. C:\Windows\System32\svchost.exe Port 123 I checked yesterdays protection log and noticed the same block, however from different IP address. I checked logs from rest of the week, and found no sings from it. The detection from today seems to come from Netherlands, and the yesterdays one from Lithuania. Since these were inbound instead of outbound that means that Malwarebytes is doing its job right? But I don't think that its normal to be "under attack" like this. And i'm kinda paranoid when it comes to pc viruses so better to be safe than sorry. I did a clean install for Windows 10 about 2 weeks ago, formatted my drives. I moved some files over, from my old PC, such as pictures, text documents, music and skype chat history. Among the first things I installed on this PC were Avira antivirus (free) and Malwarebytes premium. I have avira and malwarebytes set for daily scans. I have attached the protection logs from today and yesterday and a full scan report of malwayrebytes which came up with nothing. Are these random attacks? Should I be worried? Am I under attack? Am I infected? Am I just paranoid? Thank you very much for your help in advance. Really appreciate what you are doing here. Full disclosure: I had p2p software "Deluge" installed, but I uninstalled it since the rules say so. I added skype.exe to process exclusions. Protectionlog 30.1.2016.txt Protectionlog 31.1.2016.txt scanlog 31.1.2016.txt
  17. Hello, Our website (hxxp://bip.malopolska.pl) is being blocked by Malwarebytes. I've checked the server for presence of malware, server came up clean. Also I've checked some blacklists like: hxxp://www.blacklistalert.org/ hxxp://whatismyipaddress.com/blacklist-check hxxp://mxtoolbox.com/SuperTool.aspx?action=blacklist%3a91.213.108.36 In additional this is not shared IP so I believe it to be a false positive. Please kindly fix this, Cheers malwarebytes_log.xml
  18. Our website is clean but blocking. The database has been updated.
  19. hxxp://idealistconsulting.com is being blocked for containing malware which is false. Please remove this block.
  20. Today suddenly when i opened computer Detection, 9/27/2015 1:57 PM, SYSTEM, LASSEWHO-PC, Protection, Malicious Website Protection, IP, 91.198.22.70, checkip.dyndns.org, 49361, Outbound, C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe, Detection, 9/27/2015 1:57 PM, SYSTEM, LASSEWHO-PC, Protection, Malicious Website Protection, IP, 91.198.22.70, checkip.dyndns.org, 49361, Outbound, C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe, This came as blocked which is weird i never had this before atleast what i have seen, and its weird because its from NVIDIA Netservice (i deleted it just incase right after this) im not sure if this is falsepositive or just some virus
  21. I am hosting 7 different websites with hostgator. I have not been on them in a while and when I went to one earlier, I got two of the following malwarebytes messages: Malicious Website Blocked Domain: c11n4.i.teaserguide.com IP: 91.226.33.54 Port: 55276 Type: outbound process: c:\program files (x86)\Google\Chrome\Application\chrome.exe Malicious Website Blocked Domain: kfc.i.illuminationes.com IP: 91.226.33.54 Port: 55279 Type: outbound process: c:\program files (x86)\Google\Chrome\Application\chrome.exe The above sites ARE NOT the websites that I'm trying to open. Below are the websites that I'm trying to open, which are mine, hosted by me. ehinitiative . org fairfieldtutoring . org happyhourinhouston . com powerwasherreviews . net theknifehut . com thetruckingsource . com whatsinwhatyoueat . org Now you will probably have me run all these anti-virus/malware/bot/etc on my computer, and perhaps you're right. However, I've opened 236 other webpages since this started happening and malwarebytes does not block any of them. Yet as soon as I try to open one that I am hosting, I get that message. I am still able to open the webpages but that message keeps popping up. To me, it seems like my websites were hacked and they're trying to redirect something to those sites. I spoke with my hosting company and they don't see any issues. Of course they don't have malwarebytes installed either. I send them the screen shots of malwarebytes but they were of no help. Since then I've deleted some files that were created in a time frame that I don't remember messing with the site, but the message still pops up. I know this may be an issue for the hosting company, but if you could point me in the right direction, it would be of great help! Thanks, Jeff
  22. Hello. The Server URL for the very Popular Game Rocket League has been blocked! URL: psyonix-rl.appspot.com
  23. Okay so tonight all of a sudden this IP starts getting by Malwarebytes IP, 80.82.70.163 As soon as I opened Google Chrome it appeared, googled the IP and its apparently somewhere in Switzerland, it's been recorded as part of a spam gang, hackers group commonly used IP http://anti-hacker-alliance.com/index.php?details=80.82.70.163 Wondering what the safest course of action is here? please help? Malwarebytes Anti-Malwarewww.malwarebytes.orgUpdate, 6/30/2015 9:31 AM, SYSTEM, DYLAN-PC, Scheduler, Malware Database, 2015.6.29.3, 2015.6.30.1, Protection, 6/30/2015 9:31 AM, SYSTEM, DYLAN-PC, Protection, Refresh, Starting, Protection, 6/30/2015 9:31 AM, SYSTEM, DYLAN-PC, Protection, Malicious Website Protection, Stopping, Protection, 6/30/2015 9:31 AM, SYSTEM, DYLAN-PC, Protection, Malicious Website Protection, Stopped, Protection, 6/30/2015 9:32 AM, SYSTEM, DYLAN-PC, Protection, Refresh, Success, Protection, 6/30/2015 9:32 AM, SYSTEM, DYLAN-PC, Protection, Malicious Website Protection, Starting, Protection, 6/30/2015 9:32 AM, SYSTEM, DYLAN-PC, Protection, Malicious Website Protection, Started, Scan, 6/30/2015 10:19 AM, SYSTEM, DYLAN-PC, Context, Start:6/30/2015 9:31 AM, Duration:48 min 10 sec, Threat Scan, Completed, 0 Malware Detections, 0 Non-Malware Detections, Update, 6/30/2015 11:14 AM, SYSTEM, DYLAN-PC, Scheduler, Malware Database, 2015.6.30.1, 2015.6.30.2, Protection, 6/30/2015 11:14 AM, SYSTEM, DYLAN-PC, Protection, Refresh, Starting, Protection, 6/30/2015 11:14 AM, SYSTEM, DYLAN-PC, Protection, Malicious Website Protection, Stopping, Protection, 6/30/2015 11:14 AM, SYSTEM, DYLAN-PC, Protection, Malicious Website Protection, Stopped, Protection, 6/30/2015 11:17 AM, SYSTEM, DYLAN-PC, Protection, Refresh, Success, Protection, 6/30/2015 11:17 AM, SYSTEM, DYLAN-PC, Protection, Malicious Website Protection, Starting, Protection, 6/30/2015 11:18 AM, SYSTEM, DYLAN-PC, Protection, Malicious Website Protection, Started, Update, 6/30/2015 2:22 PM, SYSTEM, DYLAN-PC, Scheduler, Malware Database, 2015.6.30.2, 2015.6.30.4, Protection, 6/30/2015 2:22 PM, SYSTEM, DYLAN-PC, Protection, Refresh, Starting, Protection, 6/30/2015 2:22 PM, SYSTEM, DYLAN-PC, Protection, Malicious Website Protection, Stopping, Protection, 6/30/2015 2:22 PM, SYSTEM, DYLAN-PC, Protection, Malicious Website Protection, Stopped, Protection, 6/30/2015 2:22 PM, SYSTEM, DYLAN-PC, Protection, Refresh, Success, Protection, 6/30/2015 2:22 PM, SYSTEM, DYLAN-PC, Protection, Malicious Website Protection, Starting, Protection, 6/30/2015 2:22 PM, SYSTEM, DYLAN-PC, Protection, Malicious Website Protection, Started, Update, 6/30/2015 5:29 PM, SYSTEM, DYLAN-PC, Scheduler, Rootkit Database, 2015.6.26.1, 2015.6.30.1, Update, 6/30/2015 5:29 PM, SYSTEM, DYLAN-PC, Scheduler, Malware Database, 2015.6.30.4, 2015.6.30.5, Protection, 6/30/2015 5:29 PM, SYSTEM, DYLAN-PC, Protection, Refresh, Starting, Protection, 6/30/2015 5:29 PM, SYSTEM, DYLAN-PC, Protection, Malicious Website Protection, Stopping, Protection, 6/30/2015 5:29 PM, SYSTEM, DYLAN-PC, Protection, Malicious Website Protection, Stopped, Protection, 6/30/2015 5:29 PM, SYSTEM, DYLAN-PC, Protection, Refresh, Success, Protection, 6/30/2015 5:29 PM, SYSTEM, DYLAN-PC, Protection, Malicious Website Protection, Starting, Protection, 6/30/2015 5:29 PM, SYSTEM, DYLAN-PC, Protection, Malicious Website Protection, Started, Update, 6/30/2015 6:36 PM, SYSTEM, DYLAN-PC, Scheduler, Failed, Unable to access update server, Update, 6/30/2015 7:26 PM, SYSTEM, DYLAN-PC, Scheduler, Malware Database, 2015.6.30.5, 2015.6.30.6, Protection, 6/30/2015 7:26 PM, SYSTEM, DYLAN-PC, Protection, Refresh, Starting, Protection, 6/30/2015 7:26 PM, SYSTEM, DYLAN-PC, Protection, Malicious Website Protection, Stopping, Protection, 6/30/2015 7:26 PM, SYSTEM, DYLAN-PC, Protection, Malicious Website Protection, Stopped, Protection, 6/30/2015 7:27 PM, SYSTEM, DYLAN-PC, Protection, Refresh, Success, Protection, 6/30/2015 7:27 PM, SYSTEM, DYLAN-PC, Protection, Malicious Website Protection, Starting, Protection, 6/30/2015 7:27 PM, SYSTEM, DYLAN-PC, Protection, Malicious Website Protection, Started, Update, 6/30/2015 7:35 PM, SYSTEM, DYLAN-PC, Scheduler, Failed, Unable to access update server, Detection, 6/30/2015 8:53 PM, SYSTEM, DYLAN-PC, Protection, Malicious Website Protection, IP, 91.188.39.17, 49186, Outbound, C:\Users\Dylaan\AppData\Local\Popcorn Time\node-webkit\Popcorn Time.exe, Detection, 6/30/2015 8:53 PM, SYSTEM, DYLAN-PC, Protection, Malicious Website Protection, IP, 91.188.39.17, 49186, Outbound, C:\Users\Dylaan\AppData\Local\Popcorn Time\node-webkit\Popcorn Time.exe, Detection, 6/30/2015 8:53 PM, SYSTEM, DYLAN-PC, Protection, Malicious Website Protection, IP, 80.82.70.163, 49198, Outbound, C:\Users\Dylaan\AppData\Local\Popcorn Time\node-webkit\Popcorn Time.exe, Detection, 6/30/2015 8:53 PM, SYSTEM, DYLAN-PC, Protection, Malicious Website Protection, IP, 80.82.70.163, 49198, Outbound, C:\Users\Dylaan\AppData\Local\Popcorn Time\node-webkit\Popcorn Time.exe, Update, 6/30/2015 10:33 PM, SYSTEM, DYLAN-PC, Scheduler, Failed, Unable to access update server, Update, 6/30/2015 11:00 PM, SYSTEM, DYLAN-PC, Manual, Malware Database, 2015.6.30.6, 2015.6.30.8, Protection, 6/30/2015 11:00 PM, SYSTEM, DYLAN-PC, Protection, Refresh, Starting, Protection, 6/30/2015 11:00 PM, SYSTEM, DYLAN-PC, Protection, Malicious Website Protection, Stopping, Protection, 6/30/2015 11:00 PM, SYSTEM, DYLAN-PC, Protection, Malicious Website Protection, Stopped, Protection, 6/30/2015 11:02 PM, SYSTEM, DYLAN-PC, Protection, Refresh, Success, Protection, 6/30/2015 11:02 PM, SYSTEM, DYLAN-PC, Protection, Malicious Website Protection, Starting, Protection, 6/30/2015 11:02 PM, SYSTEM, DYLAN-PC, Protection, Malicious Website Protection, Started, Detection, 6/30/2015 11:06 PM, SYSTEM, DYLAN-PC, Protection, Malicious Website Protection, IP, 80.82.70.163, 49848, Outbound, C:\Program Files (x86)\Google\Chrome\Application\chrome.exe, Detection, 6/30/2015 11:06 PM, SYSTEM, DYLAN-PC, Protection, Malicious Website Protection, IP, 80.82.70.163, 49848, Outbound, C:\Program Files (x86)\Google\Chrome\Application\chrome.exe, Detection, 6/30/2015 11:06 PM, SYSTEM, DYLAN-PC, Protection, Malicious Website Protection, IP, 80.82.70.163, 49849, Outbound, C:\Program Files (x86)\Google\Chrome\Application\chrome.exe, Detection, 6/30/2015 11:06 PM, SYSTEM, DYLAN-PC, Protection, Malicious Website Protection, IP, 80.82.70.163, 49850, Outbound, C:\Program Files (x86)\Google\Chrome\Application\chrome.exe, Update, 6/30/2015 11:37 PM, SYSTEM, DYLAN-PC, Scheduler, Failed, Unable to access update server, Detection, 6/30/2015 11:40 PM, SYSTEM, DYLAN-PC, Protection, Malicious Website Protection, IP, 80.82.70.163, 50301, Outbound, C:\Program Files (x86)\Google\Chrome\Application\chrome.exe, Detection, 6/30/2015 11:40 PM, SYSTEM, DYLAN-PC, Protection, Malicious Website Protection, IP, 80.82.70.163, 50302, Outbound, C:\Program Files (x86)\Google\Chrome\Application\chrome.exe, Scan, 6/30/2015 11:42 PM, SYSTEM, DYLAN-PC, Manual, Start:6/30/2015 11:41 PM, Duration:0 min 43 sec, Threat Scan, Cancelled, 0 Malware Detections, 0 Non-Malware Detections,
  24. I understand there were some issues with Godaddy wordpress hosted sites, but in several topics mods are saying that these blockades have been removed. Not for mine unfortunately, hxxp://askhistoriansDOTco and hxxp://getstakedDOTeu Please help
  25. I just received a notice that "An Exploit code has been blocked in Mozilla Firefox (and add-ons)." That's all. If Anti-Exploit can block something why isn't there more info about what exactly was blocked? Do I have an Add-on that should be removed? I have always been amazed that whether it's a notice from Windows or some 3rd party software the scarcity of information that is provided when some intervention is made. If the software knows that something is wrong it should be able to be verbose about what it is.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.