Jump to content

Malwarebytes blocked inbound connection


Recommended Posts

I have installed the Malwarebytes premium trial on Nov 26th and saw 10 website blocked events in the Malwarebytes report up to today. 8 out of 10 are from 119.1.109.85 port 1900 and the 2 are from 146.185.234.84 port 3389. Attached the screenshot of the Malwarebytes Report, FRS, Addition, Malwarebytes scan report and the website blocked report.

Malwarebytes Reports Screenshot.png

FRST.txt

Addition.txt

Malwarebytes Scan Report 12052017.txt

Malwarebytes Website Blocked.txt

Link to post
Share on other sites

Is this something I should worry about or am I just being paranoid?

This is my friend's computer and she said her paypal and Amazon account was hacked and unauthorized purchase were made last week. I helped her to use Rkill, Malwarebytes, Adwcleaner to scan and removed all detected objects.

She has another laptop which I have also cleaned with the above tools and the laptop also got the same inbound connection blocked from the same ip 119.1.109.85 today.

 

 

Link to post
Share on other sites

  • Root Admin

Hello @Shumbing and :welcome:

Let's try the following first.

 

Please visit each of the following sites and let's reset all of your browsers back to defaults to prevent unexpected issues.
If you are not using one of the browsers but it is installed then you may want to consider uninstalling it as older versions of some software can pose an increase in the potential for an infection to get in.

Internet Explorer
How to reset Internet Explorer settings

Microsoft Edge
How to Reset Microsoft Edge in Windows 10

Firefox
Click on Help / Troubleshooting Information then click on the Refresh Firefox button.

Chrome
Reset Chrome back to defaults to completely clear out issues with Chrome.

  • First, go to >> Google Sync << and sign into your account. Make sure you know your password as this will clear it from the browser.
  • Scroll down until you see the  reset_chrome_sync.png "reset sync" button to clear your data from the server and remove your passphrase.
  • Now, close all Chrome windows. Chrome cannot be running for the next step. If needed, print this information or use another browser to read the information.
  • Press the Windows key + R at the same time, to bring up the run dialog box.
    • run_command.png
  • Type in (or copy/paste) the following and press Enter:     %localappdata%\Google\Chrome\User Data\Default\
  1. Press Ctrl + A to select all the files and folders.
  2. Hold down Ctrl + A and click once on the files "Bookmarks" and "Bookmarks.bak". This will unselect them.
  3. With all the files selected (except for your Bookmarks), press the Delete key and click Yes to delete the files and folders.
  4. Example of all files and folders selected, except Bookmarks

chrome_files_folders.png

 

Restart your computer now and make sure there are no longer any redirects or other browser issues. 

 

Link to post
Share on other sites

  • Root Admin

Glad we could help.

If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this topic with your request.

This applies only to the originator of this thread.Other members who need assistance please start your own topic in a new thread.

Thanks

 

Link to post
Share on other sites

Guest
This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.