Same incoming IP address keeps getting blocked by Malwarebytes- trying to connect to svchost.exe

[TomDuffus]

60.191.186.52 That's the IP that keeps trying to connect to svchost.exe.

I did a look up and its somewhere in China- is there any way I can block this IP address for good, so that Malwarebytes doesn't keep reporting its malicious attempts to connect? I'm sure whatever is on the other end of that line doesn't have good things in store for my PC. Thankfully Malwarebytes is keeping it at bay every time it tries to get in, but I'd really like it out for good. Does this also mean that my svchost is infected? I have run multiple full scans on Malwarebytes and Avast! and they have shown not a single infection, all updated and everything. I did get attacked by a virus a few days ago, but everything seems to be cleared out now, and no antivirus software scan has returned any positives.

Any help would be great! Thanks in advance,

Tom

[Quikfix]

I'm not too sure on how to block an IP. What I can do is give you a link to Hitman Pro. It's an on-demand scanner that scans with the latest top 4-6 anti-viruses. Like it scans with DrWeb, Bitdefender, etc..all in one anti-virus. It has lightning fast FULL scans at like 2 mins and the quick scan to be even less. Here is the official website, you can read it's history and stuff on this page as well: http://www.surfright.nl/en (btw, this is the official site, the company "SurfRight" bought Hitman Pro so that's why it's on their site. The best part is that it is free (for 30 days). When you run it, it automatically scans, if you find any viruses/malware just then click the 30 day license so that Hitman will get rid of them. Otherwise, just keep it till you do find any, then click the 30 day free license. I've been running it for years with no problems. Hope this satisfies your mind cuz you'll be getting opinions from 4-6 different anti-virus vendors at once. Just click download under "Hitman Pro 3.6 NEW!"

[Nisei]

Does this happen all the time or only when you're running certain applications?

I was having the same thing but that was during a download through uTorrent. First Anti-Malware was warning me it repeatedly blocked the IP from uTorrent but then it started blocking that same IP in reference to svchost.exe

I thought that svchost.exe was infected but as soon as I killed uTorrent it stopped and a full scan came up with nothing. I'm not sure how it could get to svchost.exe when it was blocked by Anti-Malware in the first place...

[Firefox]

Hello and welcome to Malwarebytes

It could just be that Malwarebytes is doing its job. That being said, you also mentioned that you caught an infection a few days ago. There may still be something running in the background that should not be running especially since its with svchost.exe. I would have the experts take a look and help you get cleaned up.

If you think you are infected, here are the steps needed to get your computer cleaned....

Please read the following so that you can begin the cleaning process:

IMPORTANT: Don't use any temporary file cleaners unless requested - this can cause data loss and make recovery difficult

You have 3 Options that you can choose from as listed below:

• Option 1 —— Free Expert advice in the Malware Removal Forum
  
• Option 2 —— Paying customer -- Contact Support via email
  
• Option 3 —— Premium, Fee-Based Support

OPTION 1

As we don't deal with malware removal in the General Malwarebytes' Anti-Malware Forum, you need to start a topic in the

Malware Removal forum so a qualified helper can help you fix any malware related problems/infections you may have.

• Please read and follow the directions >>Right HERE<<, skipping any steps you are unable to complete.
  
• After posting your new post, make sure under options, you select Track this topic and choose Immediate Email Notification,
  so that you're alerted when someone has replied to your post.

NOTE: Please do not post back to (bump) your topic within the first 48 hours.

Replying to your own posts changes the post count and helpers are looking for topics with zero replies.

If you reply to your own post helpers may think that you're already being helped and thus overlook your post.

• If there is no reply from any experts after 48 hours, you can reply to the topic, asking for help again.
  Or
  
• You may send a Private Message to a Moderator asking for assistance.
  

OPTION 2

Alternatively, as a paying customer, you can contact the help desk by filling out the form located >>Right HERE<<

OPTION 3

If you would like to use our Malwarebytes Premium Services, Comprehensive solutions to all your computer support needs—from installation and set-up to troubleshooting and tune-ups go to our Malwarebytes Premium Services support site --> >>Right HERE<<

Please be patient, someone will assist you as soon as possible.

PS: Please use the "Reply to this topic" button not the Reply button when you start replying.

[TomDuffus]

I've done that on another thread. Just wanted to update and say that another IP tried to attack svchost today, as well as the first one. I've added them both to a block rule in windows firewall, I hope that will keep them out! Need to find out if theres anything wrong with my svchost first though, so thats what my other thread is for. Hopefully no more chinese IPs attack me.