Interpretation of blocked web sites? What is going on?

[tomcon]

Since installing and running Malwarebytes anti-malware, i have been getting frequent popups from my system tray, about a blocked web site.  Usually occurring several times an hour.  It gives an IP address, always the same one, says Type:outgoing, and process is chrome.exe.

 

Although i'm glad the site is being blocked, this makes me feel uneasy.  Does the fact that this keeps happening mean that some maleware is still left on my computer, that is able to initiate an attempt to connect to this IP address, and that even malware bytes has not detected and removed it?

 

If there is anything else i should do (besides worry) please let me know. Can i stop this attempt from being made, rather this simply just blocking it after the attempt to connect is made?

 

Or, at least if you can give me an overview explanation of what is likely going on, i'd be happy to hear it, just to satisfy my intellectual curiosity and to understand more for the future.

 

Thanks!

Tom

 

[AdvancedSetup]

Hello Tom and

The Web blocker is designed to prevent bad sites from interacting with your computer. So best to check out why the block rather than try to quell or ignore it.

Please run the following scans and post back the logs and we'll see if we can tell what's going on. Also please go to the Logs tab of the program and find the most recent Protection log and post that back as well.

Please create an mbam-check log:

• Download mbam-check.exe from here and save it to your desktop
• Double-click on mbam-check.exe to run it, it should then open a log file
• Please do not copy and paste the entire contents of the log into your next post, instead please attach the log CheckResults.txt file which should now be located on your desktop to your next post

Next, Please run the following scanner and send back the logs.

Download DDS from one of the locations below and save to your Desktop

dds.scr

dds.com

Temporarily disable any script blocker if your Anti-Virus/Anti-Malware has it.

How To Temporarily Disable Your Anti-virus, Firewall And Anti-malware Programs

Once downloaded you can disconnect from the Internet and disable your Ant-Virus temporarily if needed.

Then double click dds.scr or dds.com to run the tool.

Click the Run button if prompted with an Open File - Security Warning dialog box.

A black DOS console should open and run for a moment.

• When done, DDS will open two (2) logs:
  • DDS.txt
  • Attach.txt

• Save both reports to your desktop
• Please include the following logs in your next reply as an attachment: DDS.txt and Attach.txt

  You can ignore the note about zipping the Attach.txt file

Thanks

[tomcon]

Thank you for the reply.  I am attaching the log files that were produced.

 

Please let me know if this helps develop a theory as to what is going on, or any additional steps you advise that i take to remove this attempt to contact this IP address.

 

Thanks!

Tom

 

attach.txt

dds.txt

CheckResults.txt

[Firefox]

Hello and Welcome to Malwarebytes

There quite of bit of problems going on with this system that was probably caused by an infection, previous infection or some software/hardware conflict. It would be best to have one of our experts take a deeper look and help you resolve this issues. Lets start by ruling our an infection....

Being that you are probably infected, feel free to follow the instructions below to receive free, one-on-one expert assistance in checking your system and clearing out any infections and correcting any damage done by the malware.

Please see the following pinned topic which has information on how to get help with this: Available Assistance for Possibly Infected Computers

Thank you