Malwarebytes log entries

[97zero96]

Hello all.

Here are a few log entries from earlier this evening:

18:13:57 (null) IP-BLOCK 221.192.199.35

18:14:53 (null) IP-BLOCK 222.216.28.219

18:41:22 (null) IP-BLOCK 218.8.245.123

All these blocks occurred while away from the computer and with no browswer open.

Other times I'll see my username in the log, as opposed to "null". And I'll only see my username in the log when Malwarebytes blocks an ip while I'm browsing.

So, are the above log entries incoming attacks?

I've run scans with Malwarebytes, Hitman, Combofix, Dr Web, Panda, TDsS Killer, Security Essentials, GMER......

They all tell me I'm clean.

[Wide_Glide]

Hello and

What does this notification mean?

This notification means quite simply, that an IP address has been blocked. It does NOT necessarily mean you are infected, it simply means a program on your computer (e.g. your browser, IM program, P2P program etc), tried accessing a malicious IP address. If this notice was presented when you were not actually doing anything on the machine, then I suggest having your computer looked at.

I got an alert and I wasn't even surfing, how's does that happen?

There are many applications on your system which have access to the Net and any of these can trigger an IP alert with no browser open. Most common offenders are P2P applications and IM clients, usually an ad will trigger an alert. An advanced or premium firewall will be able to give you a list of programs which can access the Net.

For more about the IP Blocker read HERE

If you have any more questions feel free to ask and someone will assist you

Thanks

[97zero96]

Why do some logged block entries contain "null" while others contain my user name. All blocks, whether or not I was at the machine, occurred while I, the administrator was logged on to the machine.

[Wide_Glide]

Hello again 97zero96

Since you did state

All these blocks occurred while away from the computer and with no browswer open.

And because of the suggestion in the IP protection Fac

If this notice was presented when you were not actually doing anything on the machine, then I suggest having your computer looked at.

And because "Null" is not the norm

I suggest letting one of the Experts have a look at it to start the cleaning process. It is a FREE service

As we don't work on Malware removal in the General Malwarebytes' Anti-Malware Forum as it is for issues with the program itself,

only in the Malware Removal - HijackThis Logs section

Please print out, read and follow the Directions Here, skipping any steps you are unable to complete. Then post a NEW Topic Here

One of the Expert helpers there will give you one-on-one assistance when one becomes available.

Please note that it may take 48 hours or more for you to receive a response in the malware removal forum, as it is often busy at times. Please do not reply to your own post asking for help unless its been more than 48 hours since you originally posted, as this can make it appear as though you are being helped and take longer for you to get help. If no one has replied within 48 hours then please go ahead and either reply to your post or send a private message to a Moderator and let them know that you're still needing assistance.

Logs to reply with:(If possible)

MBAM

DDS/GMER

If you are unable to do all or any of the steps in the link to the directions above, just post your problem into the forum I gave you a link to anyway and someone will be able to assist you.

After posting your new post make sure under options that you select Track this topic and choose one of the Email options(Immediate Email Notification) so that you're alerted when someone has replied to your post.

Email Notification of new messages

Also, when replying, please use the ADDREPLY button located at the bottom of the page, as this makes the forum easier to read.

Alternatively, as a paying customer, you can contact the help desk at support@malwarebytes.org or HERE

Thanks

[97zero96]

I've reviewed all the logs and found nothing.

This is a single computer (XP PRO SP3) in my office which is part of an executive suite environment. I guess the executive suites receive their bandwidth from Comcast and feed it out over their router. Anyhow, I put a Linksys router with a firewall in between my computer and the executive suites router and voila.... no more blocked IPs showing up in my logs.

Hmmmm.. anyone care to comment on what kind of bugs might be crawling around this executive suite network?

[noknojon]

Hi -

As we have no idea of the type of Antivirus and Antimalware programs (if any) installed it is hard to answer this -

The problems may actually come from the people they deal through (again unknown) and do they deal overseas ??

These answers would all help solve or isolate some of your questions -

Since you are now isolated from the others and do not have a problem , I see no problem remaining -

Thank You -

[Haider]

Linksys is in the list of models that have been comprised recently!