Utorrent continually successfully blocking potential malicious website

[davidle]

Hi team,

 

I have posted previously and with your help successfully cleared my laptop of malware. Hoping we can do that again. 

 

I haven't downloaded anything new recently but suspect the issue may be related to a recent attempt at updating utorrent.

 

Malwarebytes Anti-Malware sits in my notification center and constantly pops up. The website it blocks changes each time, one of them is 58.241.134.146. Type: outgoing. Port: 12527 (which is always the same). Process: utorrent.exe.

 

 

 

I have follow this https://forums.malwarebytes.org/index.php?showtopic=9573 and here is dds.txt and attach.txt .

 

Hope someone will be able to help me out.

[kevinf80]

Hello and

 

P2P/Piracy Warning:

 

   

If you're using Peer 2 Peer software such as uTorrent, BitTorrent or similar you must either fully uninstall them or completely disable them from running while being assisted here.

Failure to remove or disable such software will result in your topic being closed and no further assistance being provided.

If you have illegal/cracked software, cracks, keygens etc. on the system, please remove or uninstall them now and read the policy on Piracy.

 

The best way forward is to completely UNinstall uTorrent if you want that alert to stop....

 

Next,

 

Download CKScanner from here: http://downloads.malwareremoval.com/CKScanner.exe

Important - Save it to your desktop.

Doubleclick CKScanner.exe (Right click and "Run as administrator" in Vista/Win7).

Give permission if necessary, and click Search For Files.

After a very short time, when the cursor hourglass disappears, click Save List To File.

A message box will verify the file saved. Please run the program once only.

Double-click the CKFiles.txt icon on your desktop and copy/paste the contents in your next reply.

 

Next,

 

Download OTL from any of the following links and save to your Desktop:

 

http://oldtimer.geekstogo.com/OTL.exe

http://itxassociates.com/OT-Tools/OTL.com

http://www.itxassociates.com/OT-Tools/OTL.scr

• 
     
• Double click on the icon to run it, Vista  or Windows 7 users right click and select Run as Administartor. Make sure all other windows are closed and to let it run uninterrupted.
     
• When the window appears, underneath Output at the top, make sure Standard output is selected.
     
• Select Scan all users
     
• Under the Extra Registry section, check Use SafeList
     
• In the lower right corner, checkmark "LOP Check" and checkmark "Purity Check".
     
• Under the Custom Scan box paste this in:
   

  netsvcs%systemroot%\*. /mp /s%systemroot%\*. /rp /smsconfig%SYSTEMDRIVE%\*.exe%LOCALAPPDATA%\*.exe/md5startconsrv.dllexplorer.exewinlogon.exeUserinit.exesvchost.exe/md5stopCREATERESTOREPOINT

   
     
• Click the button. Do not change any settings unless otherwise told to do so. The scan wont take long.
     
• When the scan completes, it will open two notepad windows. OTL.Txt and Extras.Txt. These are saved in the same location as OTL.
     
• Please copy (Edit->Select All, Edit->Copy) the contents of these files, one at a time, and post them in your reply
  

 

Post those logs..

[davidle]

Hi kevinf80. Thanks for helping out. Here are the logs in multiple posts as it was too much to put in to one.

 

CSFiles

CKScanner 2.4 - Additional Security Risks - These are not necessarily bad

c:\users\david laptop\downloads\movies\the godfather trilogy part 1, 2 & 3 dvdrip\tsv torrents\software\advanced systemcare pro - cracked.torrent

c:\users\david laptop\downloads\movies\the godfather trilogy part 1, 2 & 3 dvdrip\tsv torrents\software\microsoft office 2010 professional plus - cracked.torrent

c:\users\david laptop\downloads\movies\the godfather trilogy part 1, 2 & 3 dvdrip\tsv torrents\software\sony vegas movie studio hd platinum - cracked.torrent

c:\users\david laptop\downloads\movies\the godfather trilogy part 1, 2 & 3 dvdrip\tsv torrents\software\windows 7 ultimate - 32 bit (auto activation) - cracked.torrent

scanner sequence 3.CA.11.RMNAF0

 ----- EOF ----- 

[davidle]

OTL OTL.Txt and Extras Extras.Txt in files because I can't post straight after and need to leave for work.

[AdvancedSetup]

This topic will now be closed due to evidence of cracked or pirated software on this system.

Piracy Policy