Jump to content

Malwarebytes anti-malware successfully blocked access to a potentially malicious website: 95.211.192.195


Recommended Posts

Hi, constantly i am having this report that ( " Malwarebytes anti-Malware successfully blocked access to a potentially malicious website: 95.211.192.195" type outgoing, port:different range Process: chrome.exe),

if i close chrome and use IE, then pop up is going to be same message and about this IP address but Process instead of chrome.exe, will show iexplore.exe, I have disabled extensions (add-on) on both chrome and IE but this is happening every couple of minutes, please advice.  

Link to post
Share on other sites

Hi, matbps:
 
Are you running the consumer version of MBAM PRO on a home computer?
The reason for asking is that this is the forum section reserved for the MBAM Business product.

(The mod team may move your post >>here<<. ;) )
 
Having said that, the IP you mention is located in the Netherlands.
 
IP blocks can indicate a number of things:

  • They could indicate that MBAM is doing its job of blocking bad content on websites.
  • In some cases the blocks are a false positive.
  • However, they can also be a sign of infection, especially if the blocks are outgoing and they occur when no browsers are open.

--> There is more information about the IP blocking module in the in the Help Desk topics HERE and HERE and HERE, and in the FAQ - Section G.
They also contain instructions on how to determine what process might be trying to make the connections.
You may also research the IP in question at www.ip-lookup.net or a similar site.

On the other hand, if you think the IP blocks might be a false positive, then please read this pinned topic before starting a new topic in the Website Blocking False Positives sub-forum.

Alternatively, if you think you might be infected, based on the IP blocks and/or other suspicious computer behavior, then please read the following for the available options to have a malware expert assist you with the cleaning process Available Assistance For Possibly Infected Computers.

Under the circumstances, with such frequent blocks, this would probably be the safest way to proceed.

Thanks,

daledoc1

post-29793-0-16006800-1394029636_thumb.p

Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.