Malwarebytes Anti-Malware "successfully blocked access to a potentially malicious Website"

[VTCMP]

I have not been able to remove a popup warning that continuously pops up intermittently every few minutes or so, and sometime more frequently, as a Malwarebytes Anti-Malware blocked access to a outgoing connection to the website < 217.23.3200 > attempt notification on the taskbar that only gives me the ability to quickly hover over view and/or close the notice which references svchost.exe as the process attempting to access an external website . . 217.23.3.200. So far every blocked attempt is made via a different seemingly random outgoing port in the 50000 to 53999 range. the actual Notice text is provided here below

 

! Malwarebytes Anti-Malware

"Successfully blocked access to a potentially malicious"
Website: 217.23.3200"

 

Type: Outgoing

"Port 50258 Process: svchost.exe"

 

I have Malwarebytes Anti-Malware Pro and MS Security Essentials installed on my Desktop computer which is running

Windows 7 Home Premium and my browser is Chrome  I saw a similar post were your support team requested the DDS and Attach text files. So they are included and attached herewith.

 

Your help in tackling this problem is requested and would be very much appreciated!

 

Dave @ VTCMP

8/10/2014 01:05 AM

attach.txt

dds.txt

[TwinHeadedEagle]

Hello,
    
 
They call me TwinHeadedEagle around here, and I'll be working with you.
 
    
 
    
Before we start please read and note the following:
    
 Limit your internet access to posting here, some infections just wait to steal typed-in passwords.
 Please be patient. I know it is frustrating when your PC isn't working properly, but malware removal takes time.
 Don't run any scripts or tools on your own, unsupervised usage may cause more harm than good.
 Do not paste the logs in your posts, attachments make my work easier. There is a Attach Files option below which you can use to attach your reports. Always attach reports from all tools.
 Stay with me to the end, the absence of symptoms doesn't mean that your machine is fully operational.
 Note that we may live in totally different time zones, what may cause some delays between answers.
 Do not ask for help for your business PC. Companies are making revenue via computers, so it is good thing to pay someone to repair it.
 If I don't hear from you within 3 days from this initial or any subsequent post, then this thread will be closed.
    
 I can't foresee everything, so if anything unexpected happens, please stop and inform me!
 There are no silly questions. Never be afraid to ask if in doubt!
 
 
 
 
P2P/Piracy Warning:

• If you're using Peer 2 Peer software such as uTorrent, BitTorrent or similar you must either fully uninstall them or completely disable them from running while being assisted here.
• Failure to remove or disable such software will result in your topic being closed and no further assistance being provided.
• If you have illegal/cracked software, cracks, keygens, etc. on the system, please remove or uninstall them now and read the policy on Piracy.

 

 

 

Please download Farbar Recovery Scan Tool and save it to your desktop.

 
Note: You need to run the version compatibale with your system. If you are not sure which version applies to your system download both of them and try to run them.
Only one of them will run on your system, that will be the right version.

• Double-click to run it. When the tool opens click Yes to disclaimer.
• Press Scan button.
• It will make a log (FRST.txt) in the same directory the tool is run. Please attach it to your reply.
• The first time the tool is run, it makes also another log (Addition.txt). Please attach it to your reply.

[VTCMP]

THEagle,

 

Thanx for the timely response. I believe I'm in compliance with the help terms you outlined, but if I am not please tell me what I need to do to fix the issue. I have teenaged grand kids who also use this computer so i don't know everything that happens on it.

 

I ran a whois on the "blocked" reference website < 217.23.3.200 > which is identified as
"The RIPE Database Query Service". I don't know anything about the service or if I have it installed on this computer. 

 

Per your request I download the Farbar Recovery Scan Tool. I ran (FRST64) the download and the FRST and Addition text files are included and attached herewith.

 

Your help in tackling this problem is greatly appreciated!

 

Dave @ VTCMP

8/11/2014 07:03 PM

 

 

Addition.txt

FRST.txt

[TwinHeadedEagle]

First, go and remove Java 7 Update 6.
 
Fresh version here --> https://www.java.com/en/
 
 
Why did you run ComboFix, and who told you? There are million of warnings this tools shouldn't be run without supervision. Try to find report located in C:\Qoobox or only in C:\
 
 
 
Fix with Farbar Recovery Scan Tool
 

This fix was created for this user for use on that particular machine.
Running it on another one may cause damage and render the system unstable.

 
Download attached fixlist.txt file and save it to the Desktop:
 
Both files, FRST and fixlist.txt have to be in the same location or the fix will not work!

• Right-click on icon and select Run as Administrator to start the tool.
  (XP users click run after receipt of Windows Security Warning - Open File).
• Press the Fix button just once and wait.
• If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.
• When finished FRST will generate a log on the Desktop, called Fixlog.txt.

Please attach it to your reply.
 
 
 
 

Fix with AdwCleaner
 
Please download AdwCleaner by Xplode and save the file to your desktop.

• Right-click on icon and select Run as Administrator to start the tool.
• Follow the prompts and click Scan.
• When finished, please click Clean.
• Upon completion, click Report. A log (AdwCleaner[s*].txt) will open.

Please include the contents of that file in your reply.

fixlist.txt

[VTCMP]

The log text & reports you requested are included herewith.

 

 Your help in tackling this problem is greatly appreciated!

 

Dave @ VTCMP

8/12/2014 01:49 AM

Add-Remove Programs.txt

ComboFix-quarantined-files.txt

Fixlog.txt

Add-Remove Programs.txt

ComboFix-quarantined-files.txt

Fixlog.txt

AdwCleanerS0.txt

[TwinHeadedEagle]

Very good. How is your PC now?

[VTCMP]

Popup warning still pops up intermittently every few minutes.

[TwinHeadedEagle]

Is this happening when visiting some website or all the time?

[TwinHeadedEagle]

You still with me?

[AdvancedSetup]

Due to the lack of feedback this topic is closed to prevent others from posting here. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.

Other members who need assistance please start your own topic in a new thread. Thanks!