Search the Community
Showing results for tags 'Netherlands'.
Hi, Today I noticed an inbound connection that was blocked by malwarebytes. C:\Windows\System32\svchost.exe Port 123 I checked yesterdays protection log and noticed the same block, however from different IP address. I checked logs from rest of the week, and found no sings from it. The detection from today seems to come from Netherlands, and the yesterdays one from Lithuania. Since these were inbound instead of outbound that means that Malwarebytes is doing its job right? But I don't think that its normal to be "under attack" like this. And i'm kinda paranoid when it comes to pc viruses so better to be safe than sorry. I did a clean install for Windows 10 about 2 weeks ago, formatted my drives. I moved some files over, from my old PC, such as pictures, text documents, music and skype chat history. Among the first things I installed on this PC were Avira antivirus (free) and Malwarebytes premium. I have avira and malwarebytes set for daily scans. I have attached the protection logs from today and yesterday and a full scan report of malwayrebytes which came up with nothing. Are these random attacks? Should I be worried? Am I under attack? Am I infected? Am I just paranoid? Thank you very much for your help in advance. Really appreciate what you are doing here. Full disclosure: I had p2p software "Deluge" installed, but I uninstalled it since the rules say so. I added skype.exe to process exclusions. Protectionlog 30.1.2016.txt Protectionlog 31.1.2016.txt scanlog 31.1.2016.txt
I discovered about 2-4 IP addresses in Web Exclusions on each of my two desktops and laptop. I think they had been there for a long time because honestly I did not check this settings earlier. IP addresses were from Nigeria, India, Moldova, Netherlands. I removed them immediately. I contacted support who said they are there by user action on purpose or by accident. I have looked at forum and surfed.Others have had this problem. My impression is that nobody know for sure how this happens. One poster suggest it might be an inadvertent response clicking on the Malwarebytes popups notifying a block. I saw also Escatel mentioned by others which came up with me. There is no signs that my systems have been taken over or passwords changed. I check Web Exclusions now several times a day over last week and no new IP addresses have appeared. My virus software (Norton on my main desktop) and Malwarebytes is not picking up anything. I am not an expert and am a bit worried. It would be nice to know how this could have happened, because certainly I did not add these IP addresses myself deliberately ! My main concern though is whether the websites of the IP addresses in question could have been accessing my computers and spying or adding code. Am I correct that Malwarebytes itself would have picked up any malicious code from these sites when a threat scan is carried out. Also would the appearance of an IP address in my Web Exclusions allow it to bypass firewalls or evade detection by my other virus software. I would be grateful for any feedback. Thanks. OwenS
Hi, Before I start, let me apolagize in advance for my horrible English. I've intalled Malwarebyes and I'm still usign the Pro-Version Trial. I was searching the net for cmd commands, and I went to this site:http://www.techrepublic.com/blog/window-on-windows/make-the-choice-command-work-for-you-even-in-windows-7/5234 A little Windows came saying that Malwarebyes blocked a Ip. Later when I tried to go there again, it bloced a diferente Ip adress. This has happened in other websites too. What is the reason for this? Am I getting hacked, or is it something else? This is a brand new computer, with no illegal stuff downloaded( Music, Movies,etc) Can someone help me? Sorry if this topic is not in the correct place.