Just a General Question

[jbjewitt]

I've used Malwarebytes Free in the past to detect and remove Malware. Recently I was having some issues with "Install FlashPlayer" or "Install Lightspark" from IE and Chrome. Installed Malwarebytes Premium which stopped the popups.

Now when I turn on the computer in the morning, I get the below :"Malicious Websites Blocked" from Malwarebytes, all coming in from ips in Netherlands on posrts 3389 and 5900 which I use for RDP and Tight VNC so I can connect o home computers and vice versa. 

 

Is this anything to worry about or just sites sniffing for open ports? 

 

Jeff

 

Malwarebytes Anti-Malware

www.malwarebytes.org

 

 

Update, 6/27/2014 12:02:31 AM, SYSTEM, JEFFWORK, Scheduler, Malware Database, 2014.6.26.11, 2014.6.27.1, 

Protection, 6/27/2014 12:02:53 AM, SYSTEM, JEFFWORK, Protection, Refresh, Starting, 

Protection, 6/27/2014 12:02:53 AM, SYSTEM, JEFFWORK, Protection, Malicious Website Protection, Stopping, 

Protection, 6/27/2014 12:02:53 AM, SYSTEM, JEFFWORK, Protection, Malicious Website Protection, Stopped, 

Protection, 6/27/2014 12:03:06 AM, SYSTEM, JEFFWORK, Protection, Refresh, Success, 

Protection, 6/27/2014 12:03:06 AM, SYSTEM, JEFFWORK, Protection, Malicious Website Protection, Starting, 

Protection, 6/27/2014 12:03:07 AM, SYSTEM, JEFFWORK, Protection, Malicious Website Protection, Started, 

Detection, 6/27/2014 12:11:57 AM, SYSTEM, JEFFWORK, Protection, Malicious Website Protection, IP, 80.82.78.170, 5900, Inbound, C:\Program Files\TightVNC\tvnserver.exe, 

Detection, 6/27/2014 12:11:57 AM, SYSTEM, JEFFWORK, Protection, Malicious Website Protection, IP, 80.82.78.170, 5900, Inbound, C:\Program Files\TightVNC\tvnserver.exe, 

Detection, 6/27/2014 12:12:00 AM, SYSTEM, JEFFWORK, Protection, Malicious Website Protection, IP, 80.82.78.170, 5900, Inbound, C:\Program Files\TightVNC\tvnserver.exe, 

Update, 6/27/2014 12:50:06 AM, SYSTEM, JEFFWORK, Scheduler, Malware Database, 2014.6.27.1, 2014.6.27.2, 

Protection, 6/27/2014 12:50:07 AM, SYSTEM, JEFFWORK, Protection, Refresh, Starting, 

Protection, 6/27/2014 12:50:07 AM, SYSTEM, JEFFWORK, Protection, Malicious Website Protection, Stopping, 

Protection, 6/27/2014 12:50:07 AM, SYSTEM, JEFFWORK, Protection, Malicious Website Protection, Stopped, 

Protection, 6/27/2014 12:50:16 AM, SYSTEM, JEFFWORK, Protection, Refresh, Success, 

Protection, 6/27/2014 12:50:16 AM, SYSTEM, JEFFWORK, Protection, Malicious Website Protection, Starting, 

Protection, 6/27/2014 12:50:16 AM, SYSTEM, JEFFWORK, Protection, Malicious Website Protection, Started, 

Detection, 6/27/2014 1:35:36 AM, SYSTEM, JEFFWORK, Protection, Malicious Website Protection, IP, 80.82.78.170, 5900, Inbound, C:\Program Files\TightVNC\tvnserver.exe, 

Detection, 6/27/2014 1:35:36 AM, SYSTEM, JEFFWORK, Protection, Malicious Website Protection, IP, 80.82.78.170, 5900, Inbound, C:\Program Files\TightVNC\tvnserver.exe, 

Detection, 6/27/2014 1:35:39 AM, SYSTEM, JEFFWORK, Protection, Malicious Website Protection, IP, 80.82.78.170, 5900, Inbound, C:\Program Files\TightVNC\tvnserver.exe, 

Detection, 6/27/2014 2:48:01 AM, SYSTEM, JEFFWORK, Protection, Malicious Website Protection, IP, 93.174.93.164, 5900, Inbound, C:\Program Files\TightVNC\tvnserver.exe, 

Detection, 6/27/2014 2:48:01 AM, SYSTEM, JEFFWORK, Protection, Malicious Website Protection, IP, 93.174.93.164, 5900, Inbound, C:\Program Files\TightVNC\tvnserver.exe, 

Detection, 6/27/2014 2:58:42 AM, SYSTEM, JEFFWORK, Protection, Malicious Website Protection, IP, 80.82.78.170, 5900, Inbound, C:\Program Files\TightVNC\tvnserver.exe, 

Detection, 6/27/2014 2:58:45 AM, SYSTEM, JEFFWORK, Protection, Malicious Website Protection, IP, 80.82.78.170, 5900, Inbound, C:\Program Files\TightVNC\tvnserver.exe, 

Detection, 6/27/2014 3:07:46 AM, SYSTEM, JEFFWORK, Protection, Malicious Website Protection, IP, 94.102.49.168, 49152, Inbound, C:\Windows\System32\wininit.exe, 

Detection, 6/27/2014 3:07:46 AM, SYSTEM, JEFFWORK, Protection, Malicious Website Protection, IP, 94.102.49.168, 49152, Inbound, C:\Windows\System32\wininit.exe, 

Detection, 6/27/2014 3:17:50 AM, SYSTEM, JEFFWORK, Protection, Malicious Website Protection, IP, 80.82.64.140, 3389, Inbound, 

Detection, 6/27/2014 3:17:50 AM, SYSTEM, JEFFWORK, Protection, Malicious Website Protection, IP, 80.82.64.140, 3389, Inbound, 

Detection, 6/27/2014 3:17:53 AM, SYSTEM, JEFFWORK, Protection, Malicious Website Protection, IP, 80.82.64.140, 3389, Inbound, 

Detection, 6/27/2014 3:17:59 AM, SYSTEM, JEFFWORK, Protection, Malicious Website Protection, IP, 80.82.64.140, 3389, Inbound, 

Detection, 6/27/2014 4:20:42 AM, SYSTEM, JEFFWORK, Protection, Malicious Website Protection, IP, 80.82.78.170, 5900, Inbound, C:\Program Files\TightVNC\tvnserver.exe, 

Detection, 6/27/2014 4:20:45 AM, SYSTEM, JEFFWORK, Protection, Malicious Website Protection, IP, 80.82.78.170, 5900, Inbound, C:\Program Files\TightVNC\tvnserver.exe, 

Detection, 6/27/2014 5:43:41 AM, SYSTEM, JEFFWORK, Protection, Malicious Website Protection, IP, 80.82.78.170, 5900, Inbound, C:\Program Files\TightVNC\tvnserver.exe, 

Detection, 6/27/2014 5:43:44 AM, SYSTEM, JEFFWORK, Protection, Malicious Website Protection, IP, 80.82.78.170, 5900, Inbound, C:\Program Files\TightVNC\tvnserver.exe, 

Detection, 6/27/2014 7:06:00 AM, SYSTEM, JEFFWORK, Protection, Malicious Website Protection, IP, 80.82.78.170, 5900, Inbound, C:\Program Files\TightVNC\tvnserver.exe, 

Detection, 6/27/2014 7:06:03 AM, SYSTEM, JEFFWORK, Protection, Malicious Website Protection, IP, 80.82.78.170, 5900, Inbound, C:\Program Files\TightVNC\tvnserver.exe, 

Detection, 6/27/2014 7:42:15 AM, SYSTEM, JEFFWORK, Protection, Malicious Website Protection, IP, 93.174.95.55, 49152, Inbound, C:\Windows\System32\wininit.exe, 

Detection, 6/27/2014 7:42:15 AM, SYSTEM, JEFFWORK, Protection, Malicious Website Protection, IP, 93.174.95.55, 49152, Inbound, C:\Windows\System32\wininit.exe, 

Detection, 6/27/2014 7:42:19 AM, SYSTEM, JEFFWORK, Protection, Malicious Website Protection, IP, 93.174.95.55, 49152, Inbound, C:\Windows\System32\wininit.exe, 

Detection, 6/27/2014 7:42:23 AM, SYSTEM, JEFFWORK, Protection, Malicious Website Protection, IP, 93.174.95.55, 49152, Inbound, C:\Windows\System32\wininit.exe, 

Detection, 6/27/2014 7:42:28 AM, SYSTEM, JEFFWORK, Protection, Malicious Website Protection, IP, 93.174.95.55, 49152, Inbound, C:\Windows\System32\wininit.exe, 

Detection, 6/27/2014 8:28:16 AM, SYSTEM, JEFFWORK, Protection, Malicious Website Protection, IP, 80.82.78.170, 5900, Inbound, C:\Program Files\TightVNC\tvnserver.exe, 

Detection, 6/27/2014 8:28:19 AM, SYSTEM, JEFFWORK, Protection, Malicious Website Protection, IP, 80.82.78.170, 5900, Inbound, C:\Program Files\TightVNC\tvnserver.exe, 

Update, 6/27/2014 9:09:20 AM, SYSTEM, JEFFWORK, Scheduler, Malware Database, 2014.6.27.2, 2014.6.27.5, 

Protection, 6/27/2014 9:09:29 AM, SYSTEM, JEFFWORK, Protection, Refresh, Starting, 

Protection, 6/27/2014 9:09:29 AM, SYSTEM, JEFFWORK, Protection, Malicious Website Protection, Stopping, 

Protection, 6/27/2014 9:09:29 AM, SYSTEM, JEFFWORK, Protection, Malicious Website Protection, Stopped, 

Protection, 6/27/2014 9:09:32 AM, SYSTEM, JEFFWORK, Protection, Refresh, Success, 

Protection, 6/27/2014 9:09:32 AM, SYSTEM, JEFFWORK, Protection, Malicious Website Protection, Starting, 

Protection, 6/27/2014 9:09:32 AM, SYSTEM, JEFFWORK, Protection, Malicious Website Protection, Started, 

 

(end)

[1PW]

Hello jbjewitt and

Malwarebytes Anti-Malware Premium is doing its job well by blocking this intrusion attempt by a suspected malicious IP address and thereby protecting your computer.

These attempts will probably stop, in time, and may be loosely compared to incoming spam in ones email.

Additionally you would do well to terminate TightVNC when it is not immediately required for the legitimate and remote control of your computer by others.

HTH

[jbjewitt]

Thank you!!!! Great product. 

[1PW]

You are very welcome.

 

Please let us know if we can help further.

[AdvancedSetup]

You may also want to try doing a Factory reset on your router and see if that helps to get rid of the incoming blocks.