A ton of outgoing ip's being blocked.

[clayton128]

I keep getting ip ... was blocked, the ip as well as the port differs daily. It doesn't say a process in the logs btw.

Today.

2012/08/24 16:30:31 -0700 REDDITMACHINE Clayton IP-BLOCK 60.190.222.187 (Type: outgoing, Port: 55475, Process: chrome.exe)

2012/08/24 16:36:34 -0700 REDDITMACHINE Clayton IP-BLOCK 60.190.222.187 (Type: outgoing, Port: 8)

2012/08/24 16:36:34 -0700 REDDITMACHINE Clayton IP-BLOCK 60.190.222.187 (Type: outgoing, Port: 8)

2012/08/24 16:36:34 -0700 REDDITMACHINE Clayton IP-BLOCK 60.190.222.187 (Type: outgoing, Port: 8)

2012/08/24 16:36:34 -0700 REDDITMACHINE Clayton IP-BLOCK 60.190.222.187 (Type: outgoing, Port: 8)

2012/08/24 16:49:44 -0700 REDDITMACHINE Clayton IP-BLOCK 199.21.148.89 (Type: outgoing, Port: 56172, Process: chrome.exe)

2012/08/24 16:49:44 -0700 REDDITMACHINE Clayton IP-BLOCK 199.21.148.89 (Type: outgoing, Port: 56173, Process: chrome.exe)

2012/08/24 16:49:44 -0700 REDDITMACHINE Clayton IP-BLOCK 199.21.148.89 (Type: outgoing, Port: 56174, Process: chrome.exe)

yesterday

2012/08/22 22:05:56 -0700 REDDITMACHINE Clayton IP-BLOCK 199.21.148.89 (Type: outgoing, Port: 56059, Process: chrome.exe)

2012/08/22 22:05:56 -0700 REDDITMACHINE Clayton IP-BLOCK 199.21.148.98 (Type: outgoing, Port: 56060, Process: chrome.exe)

2012/08/22 22:05:56 -0700 REDDITMACHINE Clayton IP-BLOCK 199.21.148.88 (Type: outgoing, Port: 56061, Process: chrome.exe)

2012/08/22 22:54:37 -0700 REDDITMACHINE Clayton IP-BLOCK 199.21.148.89 (Type: outgoing, Port: 57001, Process: chrome.exe)

2012/08/22 22:54:37 -0700 REDDITMACHINE Clayton IP-BLOCK 199.21.148.89 (Type: outgoing, Port: 57002, Process: chrome.exe)

2012/08/22 22:54:37 -0700 REDDITMACHINE Clayton IP-BLOCK 199.21.148.89 (Type: outgoing, Port: 57003, Process: chrome.exe)

2012/08/22 23:58:20 -0700 REDDITMACHINE Clayton IP-BLOCK 199.21.148.89 (Type: outgoing, Port: 58307, Process: chrome.exe)

a few days ago.

2012/08/19 00:46:08 -0700 REDDITMACHINE Clayton IP-BLOCK 98.142.249.216 (Type: outgoing, Port: 39926, Process: utorrent.exe)

2012/08/19 01:44:21 -0700 REDDITMACHINE Clayton IP-BLOCK 146.185.18.98 (Type: incoming, Port: 39926, Process: utorrent.exe)

2012/08/19 02:15:09 -0700 REDDITMACHINE Clayton IP-BLOCK 89.28.47.163 (Type: outgoing, Port: 39926, Process: utorrent.exe)

2012/08/19 02:32:05 -0700 REDDITMACHINE Clayton IP-BLOCK 222.65.215.90 (Type: outgoing, Port: 39926, Process: utorrent.exe)

2012/08/19 02:32:46 -0700 REDDITMACHINE Clayton IP-BLOCK 212.117.183.19 (Type: outgoing, Port: 39926, Process: utorrent.exe)

I didn't know what it mean't by the script thing, but it seems like it worked.

DDS.txt

Attach.txt

Edited August 28, 2012 by Maurice Naggar
emphasis added

[Maurice Naggar]

Hello Clayton128,

Daledoc1 gave you some excellent references on IP block feature of MBAM.

You must uninstall µTorrent and any other peer-to-peer app before we proceed further, and confirm having done so.

Filesharing/downloading from unknown sources is one of the leading causes of transmission of malware.

Risks of File-Sharing Technology.

P2P file sharing: Know the risks

In addition, close any & all instant messenger apps.

Going forward, do NOT attach logs. Always Copy & paste the contents inside the main-body of reply box.

I need a new run of DDS and paste the new logs in your next reply.

[Maurice Naggar]

Due to the lack of feedback this topic is closed to prevent others from posting here. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.

Other members who need assistance please start your own topic in a new thread. Thanks!