Jump to content

RDP Detection, Website got Blocket with random RS ips

Go to solution Solved by Maurice Naggar,

Recommended Posts


Ich habe mich nach 2 tagen wieder zu meiner rdp verbunden und es kam dieses problem

ich weiß nicht ob ich einen Virus habe, denn Malewarebytes findet keine Bedrohung


-Log Details-
Protection Event Date: 6/4/21
Protection Event Time: 8:28 PM
Log File: 7de92e80-c573-11eb-8905-02bb53db73d0.json

-Software Information-
Components Version: 1.0.1308
Update Package Version: 1.0.41307
License: Trial

-System Information-
OS: Windows 10 Server (Build 17763.1935)
CPU: x64
File System: NTFS
User: System

-Blocked Website Details-
Malicious Website: 1
, C:\Windows\System32\svchost.exe, Blocked, -1, -1, 0.0.0, , 

-Website Data-
Category: Compromised
IP Address: 
Port: 3389
Type: Inbound
File: C:\Windows\System32\svchost.exe


Vielen dank für die hilfe :D

lg Moritz

Link to post
Share on other sites

  • Solution

Hello   :welcome:

My name is Maurice.  I will guide & help you.


IF your OS is Windows 10 PRO or Enterprise, consider disabling the Remote Desktop option.

ALSO see the article https://support.malwarebytes.com/hc/en-us/articles/360048565893-Receiving-message-Website-blocked-due-to-compromise


Apply the tips if at all possible.


Know that the BLOCK notices do mean that Malwarebytes is keeping system safe from potential harm.


In addition, need for you to do all the first steps & reports as listed 




Always just Attach the reports from that, back here.  And same principle as we go along.

Link to post
Share on other sites

  • 2 weeks later...

Glad we could help.

If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this topic with your request.

This applies only to the originator of this thread. Other members who need assistance please start your own topic in a new thread.

Please review the following for Tips to help protect from infection

Thank you



Link to post
Share on other sites

This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.