Jump to content

Search the Community

Showing results for tags 'Incoming'.

  • Search By Tags

    Type tags separated by commas.
  • Search By Author

Content Type


Forums

  • Announcements
    • Malwarebytes News
    • Beta Testing Program
  • Malware Removal Help
    • Windows Malware Removal Help & Support
    • Mac Malware Removal Help & Support
    • Mobile Malware Removal Help & Support
    • Malware Removal Self-Help Guides
  • Malwarebytes for Home Support
    • Malwarebytes for Windows Support Forum
    • Malwarebytes for Mac Support Forum
    • Malwarebytes for Android Support Forum
    • Malwarebytes for iOS Support
    • Malwarebytes Privacy
    • Malwarebytes Browser Guard
    • False Positives
    • Comments and Suggestions
  • Malwarebytes for Business Support
    • Malwarebytes Endpoint Protection
    • Malwarebytes Incident Response (includes Breach Remediation)
    • Malwarebytes Endpoint Security
    • Malwarebytes Business Products Comments and Suggestions
  • Malwarebytes Tools and Other Products
    • Malwarebytes AdwCleaner
    • Malwarebytes Junkware Removal Tool Support
    • Malwarebytes Anti-Rootkit BETA Support
    • Malwarebytes Techbench USB (Legacy)
    • Malwarebytes Secure Backup discontinued
    • Other Tools
    • Malwarebytes Tools Comments and Suggestions
  • General Computer Help and Security Updates
    • BSOD, Crashes, Kernel Debugging
    • General Windows PC Help
  • Research Center
    • Newest Rogue-Ransomware Threats
    • Newest Malware Threats
    • Newest Mobile Threats
    • Newest IP or URL Threats
    • Newest Mac Threats
    • Report Scam Phone Numbers
  • General
    • General Chat
    • Forums Announcements & Feedback

Find results in...

Find results that contain...


Date Created

  • Start

    End


Last Updated

  • Start

    End


Filter by number of...

Joined

  • Start

    End


Group


AIM


MSN


Website URL


ICQ


Yahoo


Jabber


Location


Interests

Found 2 results

  1. I was plagued with multiple incoming IP block messages. After reading some of the suggested solutions, which included downloading software packages, I decided upon a different approach. (I am using Symantec End Point as an antivirus unmanaged.) I went to the Malware protection log and did an IP trace of the IP addresses…there were multiple entries for the same IPs. I then did a Whois for the area (Russia, Ukrane, Netherlands and Spain) and got the IP block associated with the IPs and the slash. Since I do not do business with any of these countries, I went into my edn Point firewall and blocked the IP blocks. The problem persisted even after blocking the IPs in the firewall…it appears that Malwarebytes was intercepting the intrusion before the IP got to the firewall. I then uninstalled Malwarebytes and restarted my computer. After restart, I ran a full scan with endpoint…no problems were found. I then re-installed Malwarebytes and restarted my machine again. After restart, I ran a full scan with Malwarebytes…no problems detected. After do this, the persistent incoming IP blocked occurrences stopped. I repeated the process for all of my servers and work stations. From time to time I do get a message of an IP blockage but such attempted intrusions are now manageable. I check the protection log each day and do a firewall block for that IP block and it now appears that the IPs are getting blocked before Malwarebytes can detect recurring intrusions from the newly added firewall IP blockages. I have absolutely no rational as to why this worked, I only know that it worked for me and I did not have to download any additional software. Smiles
  2. Hey guys, I use Raptr, a common program to track and log your gaming hours and achievements, and is used as a cross-Instant Messanger for XBoXLive, PSN, Yahoo, MSN and a few others. Just yesterday I bought the Pro service, and noticed that the progam frequently calls out. To me, this makes sense because I think every 3-5 minutes it synchronizes with the computer in order to track my hours on a PC game, and synchronizes with me and the website in case I'm playing a game on a different platform, so I can accurately check any recent hours or achievements. As a side note, I know Raptr to be a reputable company, based in either Canada or North America, and the program itself does not display any ads. But when I was Google searching some of these IPs, I noticed that some were coming from China. Specifically the 200.0.0.0+ IP addresses, and one (222.68.183.118) was said to come from "Jiangsu Sumeida International Freight Substitute Co. Ltd Shanghai Office". Then I found some from a country named Moldova. In comparison, I have a few IPS from the 70/80.0.0.0+, and then the rest are 200.0.0.0+. Anyways, I was originally going to ask if there was a way to add the actual program raptr.exe to the exceptions to get these notifications to cease, since I'd want the normal traffic to flow, but when I saw the Chinese IPs, I can't help but be suspicious. So far all of my blocked traffic notifications have come from the program (raptr.exe), in the port 6881 with the varying incoming traffic on mixed IPs. Is there an explanation or solution? this is a new machine, and has not been compromised (yet), and I'd like to keep it that way. I think shutting down Raptr is the best idea at the moment -.-;
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.