Jump to content

IP blocked with winword.exe

Recommended Posts



I'm getting an IP Blocked when I start Microsoft Word 2007 ( sometimes with Excel also). The log shows various ports being used when this happens. Here is a partial log of the events:


2013/12/06 10:57:16 -0800 AWSERVER **************** IP-BLOCK (Type: outgoing, Port: 51922, Process: winword.exe)
2013/12/06 12:58:30 -0800 AWSERVER **************** IP-BLOCK (Type: outgoing, Port: 52547, Process: winword.exe)
2013/12/06 13:01:02 -0800 AWSERVER **************** IP-BLOCK (Type: outgoing, Port: 52616, Process: winword.exe)
2013/12/06 13:12:39 -0800 AWSERVER **************** IP-BLOCK (Type: outgoing, Port: 52726, Process: winword.exe)
2013/12/06 13:58:07 -0800 AWSERVER **************** IP-BLOCK (Type: outgoing, Port: 52984, Process: winword.exe)
I checked that IP address; it's for W3i Holdings, LLC, an information technology company in Minnesota.
I also checked the location of Winword.exe on the computer, it's in the correct location and the MD5 hash matches that of the same application on another computer.
Anyone know what might be going on?
Link to post
Share on other sites

Hi and :welcome: , cammac725:
If you think the IP blocks might be a False Positive, it might be a good idea to check this pinned topic and then to report the finding here: Website Blocking
If you think you might be infected, based on the IP blocks or other computer behavior, then I would suggest that you please follow the recommendations in this pinned topic: Available Assistance For Possibly Infected Computers.
A malware analyst will guide you through the scanning & cleanup process.



Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.