Jump to content

Message Keeps Coming Up: "Successfully blocked access to a potentially malicious website 74.120.16.85"


Recommended Posts

Hello,

 

Sorry for the duplicate post. First time on the Malwarebytes board so I messed up where to address this issue. I hope you can help.

 

Anyway, this message keeps popping up on the lower right part of my laptop screen everytime for one week now:

 

 

Successfully blocked access to a potentially malicious website 74.120.16.85

 

Type: outgoing

Port: 63434, Process: sndappv2.exe

 

 

I'm not sure if it's a malware problem. So far my computer is running normally, but for about one week now this message keeps popping up. Your help would be greatly appreciated.

 

Thank you for your time.

Link to post
Share on other sites

Hello and :welcome:

IP blocks can indicate a number of things:

  • They could indicate that MBAM is doing its job of blocking bad content on websites.
  • In some cases the blocks are a false positive.
  • However, they can also be a sign of infection, especially if the blocks are outgoing and they occur when no browsers are open.
--> There is more information about the IP blocking module in the in the Help Desk topics HERE and HERE and HERE, and in the FAQ - Section G.

They also contain instructions on how to determine what process might be trying to make the connections.

You may also research the IP in question at www.ip-lookup.net or a similar site.

On the other hand, if you think the IP blocks might be a false positive, then please read this pinned topic before starting a new topic in the Website False Positives sub-forum.

Alternatively, if you think you might be infected, based on the IP blocks and/or other suspicious computer behavior, then please read the following for the available options to have a malware expert assist you with the cleaning process Available Assistance For Possibly Infected Computers.

Thanks!

Link to post
Share on other sites

Hi: :)

 

Just to add to Firefox's expert advice...

 

Blocks of these particular IPs have been reported by several other users recently:

https://forums.malwarebytes.org/index.php?showtopic=136108

https://forums.malwarebytes.org/index.php?showtopic=136048

https://forums.malwarebytes.org/index.php?showtopic=135984#entry751983

 

According to our IP block expert, MysteryFCM, they are NOT a false positive: https://forums.malwarebytes.org/index.php?showtopic=136048#entry750140

 

So, the safest course of action, if you are getting many of these blocks, is to follow Firefox's advice (and that of our forum Admin, AdvancedSetup, to another user seeing the same blocks) to have a malware expert assist you with looking into this, as outlined in his earlier reply.

 

UPDATE: I didn't notice your duplicate post in the FP section, where MysteryFCM likewise advised getting help from one of the malware experts.

 

HTH,

 

daledoc1

 

 

Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
 Share

  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.