PeterDavis Posted January 20, 2021 ID:1433311 Share Posted January 20, 2021 I keep getting a 'Malware blocked this outgoing' and its a Hip2P (camera trying to send) does anyone else get this? Should I allow this through the Wall? Link to post Share on other sites More sharing options...
Porthos Posted January 20, 2021 ID:1433312 Share Posted January 20, 2021 Please export a detection log and attach it here. I asked for your post to be moved to the correct section. Link to post Share on other sites More sharing options...
PeterDavis Posted January 22, 2021 Author ID:1433861 Share Posted January 22, 2021 On 1/20/2021 at 12:25 PM, PeterDavis said: I keep getting a 'Malware blocked this outgoing' and its a Hip2P (camera trying to send) does anyone else get this? Should I allow this through the Wall? Sorry I have tried to capture the comment that comes up at least three times a day but it won't allow me to copy to paste here Link to post Share on other sites More sharing options...
exile360 Posted January 24, 2021 ID:1434218 Share Posted January 24, 2021 The information at the bottom of this support article should prove helpful; it indicates how to export or copy to clipboard detection reports from Malwarebytes, which includes web blocks like this from the Web Protection module. If the forums don't allow attaching the report as a text file, try zipping it instead by right-clicking the exported text file and hovering your mouse over Send to and selecting Compressed (zipped) folder, then attach the resulting ZIP file here for analysis. Link to post Share on other sites More sharing options...
PeterDavis Posted January 24, 2021 Author ID:1434240 Share Posted January 24, 2021 Malwarebytes www.malwarebytes.com -Log Details- Scan Date: 13/01/2021 Scan Time: 16:30 Log File: d14130f7-55ab-11eb-935b-bc5ff463ed3d.json -Software Information- Version: 4.3.0.98 Components Version: 1.0.1130 Update Package Version: 1.0.35683 Licence: Premium -System Information- OS: Windows 10 (Build 19041.685) CPU: x64 File System: NTFS User: System -Scan Summary- Scan Type: Threat Scan Scan Initiated By: Scheduler Result: Completed Objects Scanned: 276016 Threats Detected: 4 Threats Quarantined: 0 Time Elapsed: 13 min, 44 sec -Scan Options- Memory: Enabled Startup: Enabled Filesystem: Enabled Archives: Enabled Rootkits: Disabled Heuristics: Enabled PUP: Detect PUM: Detect -Scan Details- Process: 0 (No malicious items detected) Module: 0 (No malicious items detected) Registry Key: 0 (No malicious items detected) Registry Value: 0 (No malicious items detected) Registry Data: 0 (No malicious items detected) Data Stream: 0 (No malicious items detected) Folder: 0 (No malicious items detected) File: 4 MachineLearning/Anomalous.97%, D:\DOWNLOADS\QPLUS15-ENG (1).EXE, No Action By User, 0, 392687, 1.0.35683, , shuriken, , 0C18BBBFC5BB4FC57B2D19C722AC903B, A0D033F7BEAD9C2E76293878CB67F825D9DE09D1404075B43402C5B715857A86 MachineLearning/Anomalous.97%, D:\DOWNLOADS\QPLUS15-ENG (2).EXE, No Action By User, 0, 392687, 1.0.35683, , shuriken, , 0C18BBBFC5BB4FC57B2D19C722AC903B, A0D033F7BEAD9C2E76293878CB67F825D9DE09D1404075B43402C5B715857A86 MachineLearning/Anomalous.97%, D:\DOWNLOADS\QPLUS15-ENG (3).EXE, No Action By User, 0, 392687, 1.0.35683, , shuriken, , 0C18BBBFC5BB4FC57B2D19C722AC903B, A0D033F7BEAD9C2E76293878CB67F825D9DE09D1404075B43402C5B715857A86 MachineLearning/Anomalous.97%, D:\DOWNLOADS\QPLUS15-ENG.EXE, No Action By User, 0, 392687, 1.0.35683, , shuriken, , 0C18BBBFC5BB4FC57B2D19C722AC903B, A0D033F7BEAD9C2E76293878CB67F825D9DE09D1404075B43402C5B715857A86 Physical Sector: 0 (No malicious items detected) WMI: 0 (No malicious items detected) (end) Link to post Share on other sites More sharing options...
PeterDavis Posted January 24, 2021 Author ID:1434241 Share Posted January 24, 2021 Malwarebytes www.malwarebytes.com -Log Details- Protection Event Date: 22/01/2021 Protection Event Time: 16:22 Log File: 50bbd54e-5cbd-11eb-b798-bc5ff463ed3d.json -Software Information- Version: 4.3.0.98 Components Version: 1.0.1130 Update Package Version: 1.0.36101 Licence: Premium -System Information- OS: Windows 10 (Build 19041.746) CPU: x64 File System: NTFS User: System -Blocked Website Details- Malicious Website: 1 , C:\Program Files (x86)\HiP2P Client\P2PClient.exe, Blocked, -1, -1, 0.0.0, , -Website Data- Category: Trojan Domain: IP Address: 27.41.208.49 Port: 49636 Type: Outbound File: C:\Program Files (x86)\HiP2P Client\P2PClient.exe (end) Link to post Share on other sites More sharing options...
PeterDavis Posted January 24, 2021 Author ID:1434242 Share Posted January 24, 2021 Hi, Eventually managed to get the HiP2P Client copied onto the page (on the second attempt) this appears about four times a day every day. The HiP2P runs my external CCTV system for security around the house. regards ....... Peter Davis Link to post Share on other sites More sharing options...
Staff JPopovic Posted January 24, 2021 Staff ID:1434250 Share Posted January 24, 2021 Hello, The block from this IP address (27.41.208.49) will be removed. Thank you and let us know if you need any additional help! Link to post Share on other sites More sharing options...
Recommended Posts