Alert Messages, Where to report.

[Djzx3]

I have been receiving alerts from my Malware, that it has been blocking malicous IP address's.

I have a few questions on that, if you all know whta I'm talking about?

1. Is this normal to see 3-5 alerts a day.

2. Where can I report these IP address's, I would really like to see someone go after the people trying to F888 with my stuff.

Thank you, I am new to this forum, and it seems to be a big help to people with Malware.

Djzx3

[daledoc1]

Hello and welcome, djzx3:

You're close.

This isn't quite the right spot for reporting IP blocks (and not all of them need to be reported, depending on the source/cause).

Before you do report, though, here's some info about the MBAM IP blocking module:

IP blocks can indicate a number of things:

• They could indicate that MBAM is doing its job of blocking bad content on websites.
  

• They can also occur when running certain P2P and other programs, such as Skype -- For example, please see this recent post by forum Admin AdvancedSetup about IP blocks and Skype.
  

• In some cases the blocks are a false positive.
  

• However, they can also be a sign of infection, especially if the blocks are outgoing and they occur when no browsers are open.
  

--> There is more information about the IP blocking module in the FAQ - Section G.

It includes instructions on how to set MBAM to ignore a particular IP, if you wish to do so.

It also contains instructions on how to determine what process might be trying to make the connections.

And you may also research the IP in question at www.ip-lookup.net or a similar site.

On the other hand, if you think the IP blocks might be a false positive, then please read this article before starting a new topic in the False Positives forum.

Alternatively, if you think you might be infected, based on the IP blocks and/or other suspicious computer behavior, then please read the following to begin the cleaning process.

• Please print out, read and carefully follow the instructions in the "I'm Infected - What Do I Do Now?" article.
  
• If the infection has so crippled the computer that you cannot complete some or all of the steps, then just do the best you can and start a new topic as described below.
  

• Then please start a new post in the Malware Removal forum.
  
• When starting your new post, please note the following:
  
• Please do NOT post in a topic started by someone else, even if their problem sounds similar.
  
• Please COPY/PASTE the requested logs into your post, rather than attaching them.
  
• Under options, please be sure to select "track this topic" and "immediate email notification", so you'll know when a helper responds.
  

• An authorized, trained malware expert will provide free, one-on-one assistance as soon as one becomes available.
  

• Please be patient - it may be 48 hours or more before a helper can assist you, especially when the forum is very busy.
  
• Please do NOT "bump" your topic or reply back to it for at least 48 hours.
  
• Doing so may cause your topic to be overlooked, as it will appear that you are already being helped.
  

Please be patient - someone will assist you as soon as possible.

Thanks!

daledoc1

[Djzx3]

Na I'm not going into my Run program, you guys either want the malicous IP's or not?

Runing that program is what caused my IP adress to be open to people, and it ruined my last computer. It opens a portal for them to get pass the protection.

Is their a place on microsoft, that I can just give them the IP's and be done.

[daledoc1]

Hi, djzx3:

I'm sorry, but I don't understand your reply.

I'm not sure what program you are referring to.

Please wait for assistance from one of the MBAM staff or a more expert member.

Thanks very much for your patience,

daledoc1

[Djzx3]

Sorry for confusing you, I mean this part.

http://forums.malwarebytes.org/index.php?showtopic=3228

It's asking me to go to my start menu, and open run, and type a code into it.

I'm just skepticle of opening my run program, that is how I Ruined my last laptop that was $3000 dollars.

[exile360]

Greetings

If Malwarebytes Anti-Malware is blocking the IP addresses, then we are already well aware of them and are blocking them due to malicious activities, so no additional actions need to be taken on your part unless you suspect that you may be infected, in which case you should follow the instructions above provided by daledoc1.

Thanks

[Djzx3]

So you guys are already aware of them, and that's why their blocked, if your not aware, they can infect me, but give you the IP adress, and that's that.

[exile360]

So you guys are already aware of them, and that's why their blocked, if your not aware, they can infect me, but give you the IP adress, and that's that.

If we're not aware of them, then the IP address would not have been blocked, correct.

[Djzx3]

Okay cool.