Jump to content

Virus gone, but IP blocks for something still trying to phone home?

carsafety
 Share

Recommended Posts

carsafety

carsafety

Posted
Posted

I recently had an infestation of isecurity.exe, something that Microsoft Security Essentials failed to block and failed to detect. Eset online scanner also failed to detect/remove it once I got into safe mode to keep it from locking me out of everything I tried.

I downloaded MBAM and it found and removed it. I also went back to Avira free and got rid of MSE. I did complete scans with MBAM, Avira and Windows Defender, all clear.

I'm now seeing IP blocks to 217.23.13.233, an address that doesn't come up on a forum search here, Google or any spam/malware databases. It seemed to be originating from internet explorer, after I disabled the Avira web protection. I noticed that two instances of iexplore.exe would be running in the background even if no internet explorer window was open. If I closed them with task manager, they would re-appear. I finally decided to upgrade from IE8 to IE9 but that didn't help.

So, I turned OFF IE9 and installed Chrome. Same issue. Here's a day's worth of logs. I've added a Windows firewall block for that IP address, but I'm still curious if it may be malware and what might be causing it, or maybe it's something legitimate. I had various plugins for MSIE, but haven't installed anything for Chrome, yet. Any ideas?

2012/04/07 10:02:37 -0500 SANDYBRIDGE MESSAGE Starting protection

2012/04/07 10:02:38 -0500 SANDYBRIDGE MESSAGE Protection started successfully

2012/04/07 10:02:41 -0500 SANDYBRIDGE MESSAGE Starting IP protection

2012/04/07 10:02:41 -0500 SANDYBRIDGE MESSAGE IP Protection started successfully

2012/04/07 10:02:49 -0500 SANDYBRIDGE IP-BLOCK 217.23.13.233 (Type: outgoing, Port: 49246, Process: avwebgrd.exe)

2012/04/07 10:02:49 -0500 SANDYBRIDGE IP-BLOCK 217.23.13.233 (Type: outgoing, Port: 49262, Process: avwebgrd.exe)

2012/04/07 10:03:05 -0500 SANDYBRIDGE IP-BLOCK 217.23.13.233 (Type: outgoing, Port: 49263, Process: avwebgrd.exe)

2012/04/07 10:03:13 -0500 SANDYBRIDGE IP-BLOCK 217.23.13.233 (Type: outgoing, Port: 49266, Process: avwebgrd.exe)

2012/04/07 10:03:29 -0500 SANDYBRIDGE IP-BLOCK 217.23.13.233 (Type: outgoing, Port: 49272, Process: avwebgrd.exe)

2012/04/07 10:03:54 -0500 SANDYBRIDGE IP-BLOCK 217.23.13.233 (Type: outgoing, Port: 49365, Process: avwebgrd.exe)

2012/04/07 10:04:02 -0500 SANDYBRIDGE IP-BLOCK 217.23.13.233 (Type: outgoing, Port: 49375, Process: avwebgrd.exe)

2012/04/07 10:04:10 -0500 SANDYBRIDGE IP-BLOCK 217.23.13.233 (Type: outgoing, Port: 49388, Process: avwebgrd.exe)

2012/04/07 10:04:10 -0500 SANDYBRIDGE IP-BLOCK 217.23.13.233 (Type: outgoing, Port: 49422, Process: avwebgrd.exe)

2012/04/07 10:04:26 -0500 SANDYBRIDGE IP-BLOCK 217.23.13.233 (Type: outgoing, Port: 49424, Process: avwebgrd.exe)

2012/04/07 10:04:34 -0500 SANDYBRIDGE IP-BLOCK 217.23.13.233 (Type: outgoing, Port: 49426, Process: avwebgrd.exe)

2012/04/07 10:04:34 -0500 SANDYBRIDGE IP-BLOCK 217.23.13.233 (Type: outgoing, Port: 49428, Process: avwebgrd.exe)

2012/04/07 10:04:50 -0500 SANDYBRIDGE IP-BLOCK 217.23.13.233 (Type: outgoing, Port: 49522, Process: avwebgrd.exe)

2012/04/07 10:05:14 -0500 SANDYBRIDGE IP-BLOCK 217.23.13.233 (Type: outgoing, Port: 49536, Process: avwebgrd.exe)

2012/04/07 10:05:30 -0500 SANDYBRIDGE IP-BLOCK 217.23.13.233 (Type: outgoing, Port: 49546, Process: avwebgrd.exe)

2012/04/07 10:08:03 -0500 SANDYBRIDGE IP-BLOCK 217.23.13.233 (Type: outgoing, Port: 49572, Process: avwebgrd.exe)

2012/04/07 10:08:11 -0500 SANDYBRIDGE MESSAGE Executing scheduled update: Daily

2012/04/07 10:08:18 -0500 SANDYBRIDGE MESSAGE Scheduled update executed successfully: database updated from version v2012.04.06.03 to version v2012.04.07.05

2012/04/07 10:08:18 -0500 SANDYBRIDGE MESSAGE Starting database refresh

2012/04/07 10:08:18 -0500 SANDYBRIDGE MESSAGE Stopping IP protection

2012/04/07 10:08:43 -0500 SANDYBRIDGE MESSAGE IP Protection stopped

2012/04/07 10:08:44 -0500 SANDYBRIDGE MESSAGE Database refreshed successfully

2012/04/07 10:08:44 -0500 SANDYBRIDGE MESSAGE Starting IP protection

2012/04/07 10:08:45 -0500 SANDYBRIDGE MESSAGE IP Protection started successfully

2012/04/07 10:08:52 -0500 SANDYBRIDGE IP-BLOCK 217.23.13.233 (Type: outgoing, Port: 49658, Process: avwebgrd.exe)

2012/04/07 10:08:52 -0500 SANDYBRIDGE IP-BLOCK 217.23.13.233 (Type: outgoing, Port: 49667, Process: avwebgrd.exe)

2012/04/07 10:09:08 -0500 SANDYBRIDGE IP-BLOCK 217.23.13.233 (Type: outgoing, Port: 49668, Process: avwebgrd.exe)

2012/04/07 10:09:16 -0500 SANDYBRIDGE IP-BLOCK 217.23.13.233 (Type: outgoing, Port: 49671, Process: avwebgrd.exe)

2012/04/07 10:09:32 -0500 SANDYBRIDGE IP-BLOCK 217.23.13.233 (Type: outgoing, Port: 49678, Process: avwebgrd.exe)

2012/04/07 10:09:40 -0500 SANDYBRIDGE IP-BLOCK 217.23.13.233 (Type: outgoing, Port: 49729, Process: avwebgrd.exe)

2012/04/07 10:09:48 -0500 SANDYBRIDGE IP-BLOCK 217.23.13.233 (Type: outgoing, Port: 49741, Process: avwebgrd.exe)

2012/04/07 10:09:56 -0500 SANDYBRIDGE IP-BLOCK 217.23.13.233 (Type: outgoing, Port: 49743, Process: avwebgrd.exe)

2012/04/07 10:10:12 -0500 SANDYBRIDGE IP-BLOCK 217.23.13.233 (Type: outgoing, Port: 49752, Process: avwebgrd.exe)

2012/04/07 10:10:21 -0500 SANDYBRIDGE IP-BLOCK 217.23.13.233 (Type: outgoing, Port: 49756, Process: avwebgrd.exe)

2012/04/07 10:10:29 -0500 SANDYBRIDGE IP-BLOCK 217.23.13.233 (Type: outgoing, Port: 49761, Process: avwebgrd.exe)

2012/04/07 10:10:37 -0500 SANDYBRIDGE IP-BLOCK 217.23.13.233 (Type: outgoing, Port: 49800, Process: avwebgrd.exe)

2012/04/07 10:10:53 -0500 SANDYBRIDGE IP-BLOCK 217.23.13.233 (Type: outgoing, Port: 49808, Process: avwebgrd.exe)

2012/04/07 10:11:17 -0500 SANDYBRIDGE IP-BLOCK 217.23.13.233 (Type: outgoing, Port: 49811, Process: avwebgrd.exe)

2012/04/07 10:13:26 -0500 SANDYBRIDGE IP-BLOCK 217.23.13.233 (Type: outgoing, Port: 49887, Process: avwebgrd.exe)

2012/04/07 10:13:42 -0500 SANDYBRIDGE IP-BLOCK 217.23.13.233 (Type: outgoing, Port: 49910, Process: avwebgrd.exe)

2012/04/07 10:13:42 -0500 SANDYBRIDGE IP-BLOCK 217.23.13.233 (Type: outgoing, Port: 49914, Process: avwebgrd.exe)

2012/04/07 10:14:06 -0500 SANDYBRIDGE IP-BLOCK 217.23.13.233 (Type: outgoing, Port: 49971, Process: avwebgrd.exe)

2012/04/07 10:14:30 -0500 SANDYBRIDGE IP-BLOCK 217.23.13.233 (Type: outgoing, Port: 49975, Process: avwebgrd.exe)

2012/04/07 10:14:46 -0500 SANDYBRIDGE IP-BLOCK 217.23.13.233 (Type: outgoing, Port: 49979, Process: avwebgrd.exe)

2012/04/07 10:14:46 -0500 SANDYBRIDGE IP-BLOCK 217.23.13.233 (Type: outgoing, Port: 49984, Process: avwebgrd.exe)

2012/04/07 10:15:02 -0500 SANDYBRIDGE IP-BLOCK 217.23.13.233 (Type: outgoing, Port: 49987, Process: avwebgrd.exe)

2012/04/07 10:15:10 -0500 SANDYBRIDGE IP-BLOCK 217.23.13.233 (Type: outgoing, Port: 50020, Process: avwebgrd.exe)

2012/04/07 10:15:26 -0500 SANDYBRIDGE IP-BLOCK 217.23.13.233 (Type: outgoing, Port: 50026, Process: avwebgrd.exe)

2012/04/07 10:15:50 -0500 SANDYBRIDGE IP-BLOCK 217.23.13.233 (Type: outgoing, Port: 50029, Process: avwebgrd.exe)

2012/04/07 10:16:06 -0500 SANDYBRIDGE IP-BLOCK 217.23.13.233 (Type: outgoing, Port: 50034, Process: avwebgrd.exe)

2012/04/07 10:16:30 -0500 SANDYBRIDGE IP-BLOCK 217.23.13.233 (Type: outgoing, Port: 50039, Process: avwebgrd.exe)

2012/04/07 10:16:46 -0500 SANDYBRIDGE IP-BLOCK 217.23.13.233 (Type: outgoing, Port: 50045, Process: avwebgrd.exe)

2012/04/07 10:17:11 -0500 SANDYBRIDGE IP-BLOCK 217.23.13.233 (Type: outgoing, Port: 50047, Process: avwebgrd.exe)

2012/04/07 10:17:35 -0500 SANDYBRIDGE IP-BLOCK 217.23.13.233 (Type: outgoing, Port: 50084, Process: avwebgrd.exe)

2012/04/07 10:17:44 -0500 SANDYBRIDGE IP-BLOCK 217.23.13.233 (Type: outgoing, Port: 50092, Process: avwebgrd.exe)

2012/04/07 10:20:01 -0500 SANDYBRIDGE IP-BLOCK 217.23.13.233 (Type: outgoing, Port: 50152, Process: avwebgrd.exe)

2012/04/07 10:20:17 -0500 SANDYBRIDGE IP-BLOCK 217.23.13.233 (Type: outgoing, Port: 50157, Process: avwebgrd.exe)

2012/04/07 10:23:07 -0500 SANDYBRIDGE MESSAGE Starting protection

2012/04/07 10:23:08 -0500 SANDYBRIDGE MESSAGE Protection started successfully

2012/04/07 10:23:11 -0500 SANDYBRIDGE MESSAGE Starting IP protection

2012/04/07 10:23:12 -0500 SANDYBRIDGE MESSAGE IP Protection started successfully

2012/04/07 10:23:19 -0500 SANDYBRIDGE IP-BLOCK 217.23.13.233 (Type: outgoing, Port: 49337, Process: iexplore.exe)

2012/04/07 10:23:19 -0500 SANDYBRIDGE IP-BLOCK 217.23.13.233 (Type: outgoing, Port: 49339, Process: avwebgrd.exe)

2012/04/07 10:23:27 -0500 SANDYBRIDGE IP-BLOCK 217.23.13.233 (Type: outgoing, Port: 49340, Process: avwebgrd.exe)

2012/04/07 10:23:43 -0500 SANDYBRIDGE IP-BLOCK 217.23.13.233 (Type: outgoing, Port: 49345, Process: iexplore.exe)

2012/04/07 10:24:07 -0500 SANDYBRIDGE IP-BLOCK 217.23.13.233 (Type: outgoing, Port: 49346, Process: iexplore.exe)

2012/04/07 10:24:23 -0500 SANDYBRIDGE IP-BLOCK 217.23.13.233 (Type: outgoing, Port: 49349, Process: iexplore.exe)

2012/04/07 10:24:47 -0500 SANDYBRIDGE IP-BLOCK 217.23.13.233 (Type: outgoing, Port: 49353, Process: iexplore.exe)

2012/04/07 10:28:57 -0500 SANDYBRIDGE MESSAGE Starting protection

2012/04/07 10:28:58 -0500 SANDYBRIDGE MESSAGE Protection started successfully

2012/04/07 10:29:01 -0500 SANDYBRIDGE MESSAGE Starting IP protection

2012/04/07 10:29:01 -0500 SANDYBRIDGE MESSAGE IP Protection started successfully

2012/04/07 10:29:18 -0500 SANDYBRIDGE IP-BLOCK 217.23.13.233 (Type: outgoing, Port: 49256, Process: iexplore.exe)

2012/04/07 10:30:08 -0500 SANDYBRIDGE IP-BLOCK 217.23.13.233 (Type: outgoing, Port: 49284, Process: iexplore.exe)

2012/04/07 10:30:08 -0500 SANDYBRIDGE IP-BLOCK 217.23.13.233 (Type: outgoing, Port: 49290, Process: iexplore.exe)

2012/04/07 10:30:16 -0500 SANDYBRIDGE IP-BLOCK 217.23.13.233 (Type: outgoing, Port: 49325, Process: iexplore.exe)

2012/04/07 10:30:40 -0500 SANDYBRIDGE IP-BLOCK 217.23.13.233 (Type: outgoing, Port: 49339, Process: iexplore.exe)

2012/04/07 10:30:56 -0500 SANDYBRIDGE IP-BLOCK 217.23.13.233 (Type: outgoing, Port: 49343, Process: iexplore.exe)

2012/04/07 10:31:20 -0500 SANDYBRIDGE IP-BLOCK 217.23.13.233 (Type: outgoing, Port: 49347, Process: iexplore.exe)

2012/04/07 10:31:36 -0500 SANDYBRIDGE IP-BLOCK 217.23.13.233 (Type: outgoing, Port: 49351, Process: iexplore.exe)

2012/04/07 10:32:00 -0500 SANDYBRIDGE IP-BLOCK 217.23.13.233 (Type: outgoing, Port: 49352, Process: iexplore.exe)

2012/04/07 10:32:00 -0500 SANDYBRIDGE IP-BLOCK 217.23.13.233 (Type: outgoing, Port: 49353, Process: iexplore.exe)

2012/04/07 10:32:16 -0500 SANDYBRIDGE IP-BLOCK 217.23.13.233 (Type: outgoing, Port: 49356, Process: iexplore.exe)

2012/04/07 10:32:16 -0500 SANDYBRIDGE IP-BLOCK 217.23.13.233 (Type: outgoing, Port: 49394, Process: iexplore.exe)

2012/04/07 10:32:40 -0500 SANDYBRIDGE IP-BLOCK 217.23.13.233 (Type: outgoing, Port: 49468, Process: iexplore.exe)

2012/04/07 10:32:56 -0500 SANDYBRIDGE IP-BLOCK 217.23.13.233 (Type: outgoing, Port: 49469, Process: iexplore.exe)

2012/04/07 10:33:20 -0500 SANDYBRIDGE IP-BLOCK 217.23.13.233 (Type: outgoing, Port: 49484, Process: iexplore.exe)

2012/04/07 10:36:08 -0500 SANDYBRIDGE IP-BLOCK 217.23.13.233 (Type: outgoing, Port: 49536, Process: iexplore.exe)

2012/04/07 10:36:33 -0500 SANDYBRIDGE IP-BLOCK 217.23.13.233 (Type: outgoing, Port: 49539, Process: iexplore.exe)

2012/04/07 10:36:49 -0500 SANDYBRIDGE IP-BLOCK 217.23.13.233 (Type: outgoing, Port: 49543, Process: iexplore.exe)

2012/04/07 10:37:05 -0500 SANDYBRIDGE IP-BLOCK 217.23.13.233 (Type: outgoing, Port: 49548, Process: iexplore.exe)

2012/04/07 10:37:13 -0500 SANDYBRIDGE IP-BLOCK 217.23.13.233 (Type: outgoing, Port: 49554, Process: iexplore.exe)

2012/04/07 10:37:13 -0500 SANDYBRIDGE IP-BLOCK 217.23.13.233 (Type: outgoing, Port: 49559, Process: iexplore.exe)

2012/04/07 10:37:29 -0500 SANDYBRIDGE IP-BLOCK 217.23.13.233 (Type: outgoing, Port: 49583, Process: iexplore.exe)

2012/04/07 10:37:53 -0500 SANDYBRIDGE IP-BLOCK 217.23.13.233 (Type: outgoing, Port: 49585, Process: iexplore.exe)

2012/04/07 10:38:09 -0500 SANDYBRIDGE IP-BLOCK 217.23.13.233 (Type: outgoing, Port: 49593, Process: iexplore.exe)

2012/04/07 10:38:33 -0500 SANDYBRIDGE IP-BLOCK 217.23.13.233 (Type: outgoing, Port: 49603, Process: iexplore.exe)

2012/04/07 10:38:49 -0500 SANDYBRIDGE IP-BLOCK 217.23.13.233 (Type: outgoing, Port: 49606, Process: iexplore.exe)

2012/04/07 10:39:13 -0500 SANDYBRIDGE IP-BLOCK 217.23.13.233 (Type: outgoing, Port: 49608, Process: iexplore.exe)

2012/04/07 10:39:21 -0500 SANDYBRIDGE IP-BLOCK 217.23.13.233 (Type: outgoing, Port: 49611, Process: iexplore.exe)

2012/04/07 10:39:29 -0500 SANDYBRIDGE IP-BLOCK 217.23.13.233 (Type: outgoing, Port: 49615, Process: iexplore.exe)

2012/04/07 10:39:54 -0500 SANDYBRIDGE IP-BLOCK 217.23.13.233 (Type: outgoing, Port: 49644, Process: iexplore.exe)

2012/04/07 10:40:11 -0500 SANDYBRIDGE IP-BLOCK 217.23.13.233 (Type: outgoing, Port: 49650, Process: iexplore.exe)

2012/04/07 10:40:51 -0500 SANDYBRIDGE IP-BLOCK 217.23.13.233 (Type: outgoing, Port: 49752, Process: iexplore.exe)

2012/04/07 10:44:20 -0500 SANDYBRIDGE MESSAGE Starting protection

2012/04/07 10:44:21 -0500 SANDYBRIDGE MESSAGE Protection started successfully

2012/04/07 10:44:24 -0500 SANDYBRIDGE MESSAGE Starting IP protection

2012/04/07 10:44:24 -0500 SANDYBRIDGE MESSAGE IP Protection started successfully

2012/04/07 10:44:40 -0500 SANDYBRIDGE IP-BLOCK 217.23.13.233 (Type: outgoing, Port: 49248, Process: iexplore.exe)

2012/04/07 10:48:05 -0500 SANDYBRIDGE MESSAGE Starting protection

2012/04/07 10:48:07 -0500 SANDYBRIDGE MESSAGE Protection started successfully

2012/04/07 10:48:10 -0500 SANDYBRIDGE MESSAGE Starting IP protection

2012/04/07 10:48:11 -0500 SANDYBRIDGE MESSAGE IP Protection started successfully

2012/04/07 11:10:51 -0500 SANDYBRIDGE MESSAGE Starting protection

2012/04/07 11:10:52 -0500 SANDYBRIDGE MESSAGE Protection started successfully

2012/04/07 11:10:55 -0500 SANDYBRIDGE MESSAGE Starting IP protection

2012/04/07 11:10:56 -0500 SANDYBRIDGE MESSAGE IP Protection started successfully

2012/04/07 11:11:03 -0500 SANDYBRIDGE IP-BLOCK 217.23.13.233 (Type: outgoing, Port: 49297, Process: iexplore.exe)

2012/04/07 11:11:28 -0500 SANDYBRIDGE IP-BLOCK 217.23.13.233 (Type: outgoing, Port: 49303, Process: iexplore.exe)

2012/04/07 11:11:52 -0500 SANDYBRIDGE IP-BLOCK 217.23.13.233 (Type: outgoing, Port: 49304, Process: iexplore.exe)

2012/04/07 11:12:08 -0500 SANDYBRIDGE IP-BLOCK 217.23.13.233 (Type: outgoing, Port: 49311, Process: iexplore.exe)

2012/04/07 11:12:32 -0500 SANDYBRIDGE IP-BLOCK 217.23.13.233 (Type: outgoing, Port: 49312, Process: iexplore.exe)

2012/04/07 11:12:48 -0500 SANDYBRIDGE IP-BLOCK 217.23.13.233 (Type: outgoing, Port: 49322, Process: iexplore.exe)

2012/04/07 11:13:12 -0500 SANDYBRIDGE IP-BLOCK 217.23.13.233 (Type: outgoing, Port: 49323, Process: iexplore.exe)

2012/04/07 11:16:01 -0500 SANDYBRIDGE IP-BLOCK 217.23.13.233 (Type: outgoing, Port: 49358, Process: iexplore.exe)

2012/04/07 11:19:13 -0500 SANDYBRIDGE MESSAGE Starting protection

2012/04/07 11:19:14 -0500 SANDYBRIDGE MESSAGE Protection started successfully

2012/04/07 11:19:17 -0500 SANDYBRIDGE MESSAGE Starting IP protection

2012/04/07 11:19:18 -0500 SANDYBRIDGE MESSAGE IP Protection started successfully

2012/04/07 11:19:25 -0500 SANDYBRIDGE IP-BLOCK 217.23.13.233 (Type: outgoing, Port: 49236, Process: iexplore.exe)

2012/04/07 11:22:17 -0500 SANDYBRIDGE MESSAGE Starting protection

2012/04/07 11:22:18 -0500 SANDYBRIDGE MESSAGE Protection started successfully

2012/04/07 11:22:21 -0500 SANDYBRIDGE MESSAGE Starting IP protection

2012/04/07 11:22:21 -0500 SANDYBRIDGE MESSAGE IP Protection started successfully

2012/04/07 11:54:02 -0500 SANDYBRIDGE IP-BLOCK 217.23.13.233 (Type: outgoing, Port: 49774, Process: chrome.exe)

2012/04/07 12:35:56 -0500 SANDYBRIDGE IP-BLOCK 217.23.13.233 (Type: outgoing, Port: 50429, Process: chrome.exe)

2012/04/07 12:35:56 -0500 SANDYBRIDGE IP-BLOCK 217.23.13.233 (Type: outgoing, Port: 50434, Process: chrome.exe)

2012/04/07 12:36:38 -0500 SANDYBRIDGE IP-BLOCK 217.23.13.233 (Type: outgoing, Port: 50447, Process: chrome.exe)

2012/04/07 16:26:50 -0500 SANDYBRIDGE IP-BLOCK 217.23.13.233 (Type: outgoing, Port: 51281, Process: chrome.exe)

2012/04/07 19:00:13 -0500 SANDYBRIDGE IP-BLOCK 217.23.13.233 (Type: outgoing, Port: 52042, Process: chrome.exe)

2012/04/07 19:00:38 -0500 SANDYBRIDGE IP-BLOCK 95.215.0.171 (Type: outgoing, Port: 52074, Process: chrome.exe)

Link to post
Share on other sites
daledoc1

daledoc1

Posted
Posted

Hello and welcome to MBAM, carsafety:

I understand that you were recently infected and that now, even after cleaning your system, you are still experiencing outbound IP blocks.

MBAM IP blocks could indicate any of several situations:

  • MBAM is doing its job by blocking bad content on websites;
  • You are running skype or a P2P program;
  • The blocks are a false positive: OR
  • You are still infected (especially if the blocks are outbound, and if they occur when no browsers are open).

---> There is more information about the IP blocking module in the FAQ - Section G.

It includes instructions on how to set MBAM to ignore a particular IP, if you wish to do so, as well as how to report a false positive.

It also contains instructions on how to determine what process might be trying to make the connections.

And you may also research the IP in question at www.ip-lookup.net or a similar site.

Having said all that, since you were recently infected, the safest course of action would be to have one of the malware experts take a look at your system to be sure you are completely clean.

If you would like free, expert, one-on-one help, please follow the steps below:

  • Please print out, read and carefully follow the instructions in the "I'm Infected - What Do I Do Now?" article.
  • If the infection has so crippled the computer that you cannot complete some or all of the steps, then just do the best you can and start a new topic as described below.

  • Then please start a new post in the Malware Removal Forum.
  • When starting your new post, please note the following:
  • Please do NOT post in a topic started by someone else, even if their problem sounds similar.
  • Please COPY/PASTE the requested logs into your post, rather than attaching them.
  • Under options, please be sure to select "track this topic" and "immediate email notification", so you'll know when a helper responds.

  • Please be patient - it may be 48 hours or more before a helper can assist you, especially when the forum is very busy.
  • Please do NOT "bump" your topic or reply back to it for at least 48 hours.
  • Doing so may cause your topic to be overlooked, as it will appear that you are already being helped.

Alternatively, If you are a paid user of MBAM PRO and would like support via the helpdesk, please contact them here.

Hope this helps,

daledoc1

Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
 Share
Go to topic listing

  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.