IP Block.

[Wiz126]

I'm getting this error none stop. Like every 5 minutes.

04:52:02 xxxxx IP-BLOCK 208.64.121.38

What can I do to prevent this? If it's a bad program I'll happily uninstall it. If it's malware I'll be EXTREMLY happy to remove it

[Haider]

Hello Wiz126:

Sorry to know that you are having problem. Please do the following:

1. Uninstall file-sharing program if any, like P2P, Limewire, uTorrent
   
2. Update MBAM (current 4626)
   
3. Disconnect from Internet
   
4. Run a Quick Scan in Normal Mode
   
5. Copy/Paste mbam-log-yyyy-mm-dd.txt, and protection-log-yyyy-mm-dd.txt
   

Please include version of Windows, installed Security Product(s), and Firewall. Should you have any other question(s)

[Wiz126]

Scan log

Malwarebytes' Anti-Malware 1.46
www.malwarebytes.org

Database version: 4626

Windows 6.1.7600
Internet Explorer 8.0.7600.16385

9/16/2010 6:15:42 AM
mbam-log-2010-09-16 (06-15-42).txt

Scan type: Quick scan
Objects scanned: 138687
Time elapsed: 6 minute(s), 10 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)

Here is a portion of my other log. I did a quick scan right before reading this and was doing a full one I cancelled when I read this so I could get you the logs.

The previous lines are all the same for the IP Block

04:52:02	****	IP-BLOCK	208.64.121.38
05:21:57	****	IP-BLOCK	208.64.121.38
05:21:58	****	IP-BLOCK	208.64.121.38
05:22:46	****	IP-BLOCK	208.64.121.38
05:23:10	****	IP-BLOCK	208.64.121.38
05:23:18	****	IP-BLOCK	208.64.121.38
05:23:18	****	IP-BLOCK	208.64.121.38
05:24:51	****	IP-BLOCK	208.64.121.38
05:24:51	****	IP-BLOCK	208.64.121.38
05:32:30	****	IP-BLOCK	208.64.121.38
05:32:30	****	IP-BLOCK	208.64.121.38
05:33:37	****	MESSAGE	IP Protection stopped
05:33:50	****	MESSAGE	Database updated successfully
05:33:51	****	MESSAGE	IP Protection started successfully
05:44:21	****	MESSAGE	IP Protection stopped
05:44:22	****	MESSAGE	IP Protection started successfully
05:59:41	****	MESSAGE	IP Protection stopped
05:59:42	****	MESSAGE	IP Protection started successfully
06:05:39	****	MESSAGE	Protection started successfully
06:05:43	****	MESSAGE	IP Protection started successfully

Now, here are the programs I've also installed

Yahoo! Messenger

Y!Tunnel Pro

Kaspersky Internet Security

Java

Google Chrome

MalwareBytes AntiMalware.

HiJackThis

SnagIMG

 from www.bluelightdev.com[/img]
Y!Epic [code] from www.Yepic.co.uk

All of which I've downloaded off of there respected sites. I don't use any P2P clients like LimeWire and stuff.

I run Windows 7 32bit

[Wiz126]

Sorry for the bad matched code tag above. I didn't relize the typo before I posted it and I cant edit my post.

[noknojon]

blacklotus.net, is the company listed at this IP -

They do not have a very good ranking from what I can find , but it is hard for me to find their exact problem -

This program could be your problem - Y!Tunnel Pro -

Y!TunnelPro - crack ,keygen ,patch or serial .......

download Y!TunnelPro rapidshare, torrent, megaupload.

xpokey.com/full-download.../ytunnelpro-free-crack-keygen.html

Please go to Control Panel and delete the Y!Tunnel Pro program > Also any other programs from Yepic.co.uk

Reboot your computer and see if you still get the IP blocks -

www.yepic.co.uk has 6 backlinks according to Alexa. The hostname or fully qualified domain name (FQDN) www.yepic.co.uk consists of the label www within the domain name yepic.co.uk. The domain is registered under the domain suffix co.uk and is named yepic. The www.yepic.co.uk Server is powered by Apache webserver software and is located in United Kingdom. www.yepic.co.uk is not listed in the dmoz open directory project.

There is no real need to enclose your items in Code Tags - The Quote wrap I use is to show you it is a real quote -

[Wiz126]

As I said all of the above I got from the respected site. I just named the site off as I wasn't sure if anyone here would of been familiar with them.

I've been a paying Customer for Y!Tunnel Pro since 2005. I'll uninstall Y!Epic and see what happens. I wont be online for a few days, I need to study for an upcoming test on Monday. I'll sit and see what happens after I get back. Thanks for the help everyone.