Robert0117 Posted November 14, 2017 ID:1182505 Share Posted November 14, 2017 Never used suddenlink, but now getting the same constant blocking action. It also suddenly started blocking dropbox.exe, but was able to add that to exempt list. Following that in the last few hours MBAM has begun blocking 255.255.255.255 constantly: Domain: IP Address: 255.255.255.255 Port: [68] Type: Outbound File: C:\Windows\System32\svchost.exe Link to post Share on other sites More sharing options...
Staff Dashke Posted November 14, 2017 Staff ID:1182560 Share Posted November 14, 2017 Please try to update your database and let us know if that helps. If not, please attach the protection log. Link to post Share on other sites More sharing options...
marshallg Posted November 20, 2017 ID:1184719 Share Posted November 20, 2017 This started happening with me today as well. Here is log malware warning.txt Link to post Share on other sites More sharing options...
DevilinPixy Posted November 20, 2017 ID:1184738 Share Posted November 20, 2017 Same here, popup showing over and over again all of a sudden. Never had this issue and have had Dropbox for a long time. Can only be stopped by adding a web exclusion to allow this port. Adding exclusion for dropbox.exe does not prevent it from showing possible malicious activity. Malwarebytes log.txt Link to post Share on other sites More sharing options...
acwr Posted November 20, 2017 ID:1184743 Share Posted November 20, 2017 Also starting getting this today. The notification is popping up every few seconds. Malwarebytes www.malwarebytes.com -Log Details- Protection Event Date: 11/20/17 Protection Event Time: 7:40 PM Log File: acfdd37c-ce2a-11e7-ac2e-94de80784121.json Administrator: Yes -Software Information- Version: 3.3.1.2183 Components Version: 1.0.236 Update Package Version: 1.0.3304 License: Premium -System Information- OS: Windows 10 (Build 15063.726) CPU: x64 File System: NTFS User: System -Blocked Website Details- Malicious Website: 1 , , Blocked, [-1], [-1],0.0.0 -Website Data- Domain: IP Address: 255.255.255.255 Port: [17500] Type: Outbound File: C:\Program Files (x86)\Dropbox\Client\Dropbox.exe (end) Link to post Share on other sites More sharing options...
hpdelaney Posted November 20, 2017 ID:1184744 Share Posted November 20, 2017 Hello, I believe that mine may be related to this topic as well. Refer to image. Link to post Share on other sites More sharing options...
Tomasml Posted November 20, 2017 ID:1184745 Share Posted November 20, 2017 Same here Link to post Share on other sites More sharing options...
pittydus Posted November 20, 2017 ID:1184747 Share Posted November 20, 2017 Hi to all, same here, for Dropbox, Virtualbox and svchost. i.e. Malwarebytes www.malwarebytes.com -Protokolldetails- Datum des Schutzereignisses: 20.11.17 Uhrzeit des Schutzereignisses: 20:47 Protokolldatei: 9ddd3508-ce2b-11e7-a338-c85b76020109.json Administrator: Ja -Softwaredaten- Version: 3.2.2.2029 Komponentenversion: 1.0.212 Version des Aktualisierungspakets: 1.0.3304 Lizenz: Premium -Systemdaten- Betriebssystem: Windows 7 Service Pack 1 CPU: x64 Dateisystem: NTFS Benutzer: System -Einzelheiten zu blockierten Websites- Bösartige Website: 1 , , Blockiert, [-1], [-1],0.0.0 -Website-Daten- Domäne: IP-Adresse: 255.255.255.255 Port: [17500] Typ: Ausgehend Datei: C:\Program Files (x86)\Dropbox\Client\Dropbox.exe (end) OR Malwarebytes www.malwarebytes.com -Protokolldetails- Datum des Schutzereignisses: 20.11.17 Uhrzeit des Schutzereignisses: 20:45 Protokolldatei: 662ec068-ce2b-11e7-827e-c85b76020109.json Administrator: Ja -Softwaredaten- Version: 3.2.2.2029 Komponentenversion: 1.0.212 Version des Aktualisierungspakets: 1.0.3304 Lizenz: Premium -Systemdaten- Betriebssystem: Windows 7 Service Pack 1 CPU: x64 Dateisystem: NTFS Benutzer: System -Einzelheiten zu blockierten Websites- Bösartige Website: 1 , , Blockiert, [-1], [-1],0.0.0 -Website-Daten- Domäne: IP-Adresse: 255.255.255.255 Port: [68] Typ: Ausgehend Datei: C:\Windows\System32\svchost.exe (end) Best regards, Peter Link to post Share on other sites More sharing options...
ravells Posted November 20, 2017 ID:1184748 Share Posted November 20, 2017 (edited) It's happening to me too and refers to dropbox. Edited November 20, 2017 by ravells Link to post Share on other sites More sharing options...
jam7729 Posted November 20, 2017 ID:1184751 Share Posted November 20, 2017 (edited) Also getting the same spamming of svchost.exe and Dropbox blocking. Started today as well. IP address blocked is: 255.255.255.255 each time Edited November 20, 2017 by jam7729 Link to post Share on other sites More sharing options...
spacemanspiffgbr Posted November 20, 2017 ID:1184755 Share Posted November 20, 2017 Same here. Started about 20mins ago. Dropbox and svchost. Link to post Share on other sites More sharing options...
kikr Posted November 20, 2017 ID:1184760 Share Posted November 20, 2017 Same here - just 'updated' Malwarebytes and quit then went back in: The pop-up now suggests I exclude the URL by using Exclusions - how about Malwarebytes just FIX it! Link to post Share on other sites More sharing options...
cef1000 Posted November 20, 2017 ID:1184761 Share Posted November 20, 2017 This just started happening to me in the last hour as well: *********************************************************************** Web site Blocked IP Address: 255.255.255.255 Port: 17500 Type: Outbound Path: c:\Program Files (x86)\Dropbox/client\Dropbox.exe ********************************************************************* Definitions showing as current - nothing to update. - CEF1000 Link to post Share on other sites More sharing options...
ravells Posted November 20, 2017 ID:1184764 Share Posted November 20, 2017 I've excluded dropbox.exe in Malwarebytes and it's stopped now. Link to post Share on other sites More sharing options...
mmspooner Posted November 20, 2017 ID:1184765 Share Posted November 20, 2017 Same here Link to post Share on other sites More sharing options...
jdgregson Posted November 20, 2017 ID:1184766 Share Posted November 20, 2017 Happening here too, for dropbox.exe and svchost.exe. I have excluded 255.255.255.255 on two computers, but it would be cool if Malwarebytes could fix this ASAP. Link to post Share on other sites More sharing options...
lwbell Posted November 20, 2017 ID:1184767 Share Posted November 20, 2017 And to me with MWB 3.1.1.2183. Link to post Share on other sites More sharing options...
montauk1989 Posted November 20, 2017 ID:1184768 Share Posted November 20, 2017 Same problem for me too. I updated malwarebytes earlier this afternoon and have been getting the same warning every 30 seconds or so. Link to post Share on other sites More sharing options...
StephenB Posted November 20, 2017 ID:1184771 Share Posted November 20, 2017 Same here with svchost.exe which was preceded by the Symantec problem a few days ago, which was fixed by an update. Perhaps time for another MBAM update. Link to post Share on other sites More sharing options...
CraigInAus Posted November 20, 2017 ID:1184772 Share Posted November 20, 2017 Same here. Started occurring on my PC this morning. Software and databases up-to-date. Link to post Share on other sites More sharing options...
AbuAdam Posted November 20, 2017 ID:1184774 Share Posted November 20, 2017 Same here - dropbox.exe being continuously blocked on both my PCs Link to post Share on other sites More sharing options...
Vdentist Posted November 20, 2017 ID:1184777 Share Posted November 20, 2017 Should we exclude dropbox, or what? Link to post Share on other sites More sharing options...
MitchHellman Posted November 20, 2017 ID:1184778 Share Posted November 20, 2017 I am having the same problem with dropbox.exe. Based on the logs shown above as well as my own, it looks like the problem is with x64 users. Link to post Share on other sites More sharing options...
marke Posted November 20, 2017 ID:1184784 Share Posted November 20, 2017 Count me among the Me Too group. It is non-stop. Malwarebytes www.malwarebytes.com -Log Details- Protection Event Date: 11/20/17 Protection Event Time: 12:50 PM Log File: 0b87724e-ce2c-11e7-8460-9cb6d0d63846.json Administrator: Yes -Software Information- Version: 3.3.1.2183 Components Version: 1.0.236 Update Package Version: 1.0.3304 License: Premium -System Information- OS: Windows 10 (Build 16299.64) CPU: x64 File System: NTFS User: System -Blocked Website Details- Malicious Website: 1 , , Blocked, [-1], [-1],0.0.0 -Website Data- Domain: IP Address: 255.255.255.255 Port: [17500] Type: Outbound File: C:\Program Files (x86)\Dropbox\Client\Dropbox.exe (end) Link to post Share on other sites More sharing options...
tropic00 Posted November 20, 2017 ID:1184786 Share Posted November 20, 2017 No dropbox here but outgoing svchost blocked at IP 255.255.255.255 Link to post Share on other sites More sharing options...
Recommended Posts