Website blocked popup repeatedly for outbound 52.208.215.247

[cchiacchi]

The Malwarebytes Website blocked message pops up every 5 seconds.

Quote

 

Domain: mc-realtime-prod.eu-west-1.elasticbeanstalk.com

IP Address: 52.208.215.247

Port: 51749

Type: Outbound

File: c:\Program Files....Application\chrome.exe

 

I ran malwarebytes scan and adwcleaner. Adwcleaner found 5 infections. I cleaned them and rebooted, but the popup behavior contines.

 

Please help.

[cchiacchi]

After a reboot, real time web protection will not start.

[AdvancedSetup]

Hello @cchiacchi and

Please run the following for me.

Please download Malwarebytes Anti-Rootkit from HERE
If needed there is a self help tutorial here: MBAR tutorial

• Unzip the contents to a folder in a convenient location.
• Open the folder where the contents were unzipped and run mbar.exe
• Follow the instructions in the wizard to update and allow the program to scan your computer for threats.
• Click on the Cleanup button to remove any threats and reboot if prompted to do so.
• Wait while the system shuts down and the cleanup process is performed.
• Perform another scan with Malwarebytes Anti-Rootkit to verify that no threats remain. If they do, then click Cleanup once more and repeat the process.
• When done, please post the two logs produced they will be in the MBAR folder... mbar-log.txt and system-log.txt