93.114.43.244 Blocked - Possible Malware

[Archy9]

The i.p. number 93.114.43.244 (Romania) is continuously trying to go outbound.  The file is located in /AppData/Local/Temp/ocrF70B.tmp/bin/ruby.exe. Yesterday the same file was trying to contact another server in Poland. Is this malware? I am almost certain it's from downloading a game extension from a shoddy site; that's when the errors started. I've tried running multiple anti-virus software to get rid of it which did nothing and tried removing the folder manually but there's a message saying that it's in use.  

[daledoc1]

Hello and :

 

It might be a good idea to have the system checked for malware.

We can't work on malware diagnostics and removal in this sub-section of the forum.

So, for expert assistance, I suggest that you please follow the advice in this pinned topic: Available Assistance For Possibly Infected Computers.
It explains the options for free, expert help >>AND<< the preliminary steps to expedite the process.
A malware analyst will assist you with looking into your issue.

>>Until then, I suggest NOT self-medicating -- running powerful anti-malware tools without expert help can make recovery difficult and can seriously damage the system.

Thanks,

[Archy9]

I posted in there thanks.

[daledoc1]

Yes, it looks as if you already have a helper and he awaits your reply: https://forums.malwarebytes.org/index.php?/topic/162803-ocrf70btmp-romania/?findpost=923477

 

Please stay with Kevin until he gives you the "all clear".

 

Take care,