Incessantly blocking access to potentially malicious website

[jginsburg]

Hello--and thank you for being there. Literally every few seconds, a MAMB tooltip balloon pops up telling me MAMB has successfully blocked a potential malicious website: 111.111.111.111. The frequency of the popups has increased noticeably. Of course, that may be due to the fact that I so rarely turn my machine off....

 

I suppose I could turn off the balloon itself, but I'd feel more comfortable addressing the underlying problem. That said, I'm no techie, so I'd need to be walked carefully through anything I do, unaccompanied by any assumptions that I understand what I'm doing! I'm running Windows XP SP3, with Chrome, and using MAMB Pro. 

 

I know there have been numerous exchanges with you guys on this subject, but would it be possible to walk me through the fix, assuming there is one, again? Many thanks.

[daledoc1]

Hello and welcome, jginsburg:

 

Take a look here, as this might describe what you're seeing: http://forums.malwarebytes.org/index.php?showtopic=107952

 

In any event, IP blocks can indicate a number of things:

• They could indicate that MBAM is doing its job of blocking bad content on websites.

• They can also occur when running Skype and certain P2P programs, such as torrents. For example, please see this help desk topic about Skype and this one about P2P.

• In some cases the blocks are a false positive.

• However, they can also be a sign of infection, especially if the blocks are outgoing and they occur when no browsers are open.

--> There is more information about the IP blocking module in the in the Help Desk topics HERE and HERE and HERE, and in the FAQ - Section G.
They also contain instructions on how to determine what process might be trying to make the connections.
You may also research the IP in question at www.ip-lookup.net or a similar site.

On the other hand, if you think the IP blocks might be a false positive, then please read this pinned topic before starting a new topic in the Website Blocking False Positives sub-forum.

Alternatively, if you think you might be infected, based on the IP blocks and/or other suspicious computer behavior, then please read the following for the available options to have a malware expert assist you with the cleaning process Available Assistance For Possibly Infected Computers.

Thanks,

daledoc1