Contiuously blocking IP address after updating McAfee

[ClemIsMe]

The IP address is always the same, but I just updated McAffee, restarted my machine and that is when it started. The IP address is 195.88.209.15. Any advice?

[noknojon]

Location of the IP address - 195.88.209.15: - Moscow in Russian Federation.

Not sure why you are being accessed by this central Moscow IP -(and I mean center of Moscow)

Do you have any P2P , Torrent , uTorrent , or similar programs running ??

This is a quick (first step) check if your router has been hijacked -

Click on this link and let me know what it says. It should be just a 4-digit number in the upper-left corner.

Thank You -

[ClemIsMe]

Not sure why you are being accessed by this centeral Moscow IP -(and I mean center of Moscow)

Do you have any P2P , Torrent , uTorrent , or similar programs running ??

Not that I know of. I just restarted my machine again, and it came up once as the programs loaded, but hasn't for about 5 minutes. My son just installed WOW on the machine, but that has been a week now and I haven't had this happen. As I said it happened just after I updated my McAfee. I noticed the Moscow source when I googled the IPAaddy, but I am an idiot and don't know if that means anything.

[noknojon]

Hi -

Did you click on that link I left near the bottom ??

I assume you mean World Of Warcraft (or whatever it is ) - Usually harmless as some forum users play it -

[ClemIsMe]

Hi -

Did you click on that link I left near the bottom ??

I assume you mean World Of Warcraft (or whatever it is ) - Usually harmless as some forum users play it -

Sorry yes; 4654.

[noknojon]

It is not a modem hjjack (a problem that has been very prevelent lately) -

I will try to find more about that IP - In the mean time do not use the computer for banking or other cash transfers for now -

This could be an infection from the download but I can't say yet -

Any notices from MacAfee yet ??

[ClemIsMe]

It is not a modem hjjack (a problem that has been very prevelent lately) -

I will try to find more about that IP - In the mean time do not use the computer for banking or other cash transfers for now -

This could be an infection from the download but I can't say yet -

Any notices from MacAfee yet ??

No, MacAfee has been quiet, and I have to say that since restarting my computer I only got the message once, just after start up. I have been very paranoid since my comp went down about 9 months ago. This may just be a glitch of the update, but I hate to leave much to chance. I need to get back to my homework (43 year old freshman - what a good idea!) but I will keep checking back and let my family know about the banking etc. Your help and attention is very much apreciated. Thanks!

[noknojon]

In the mean while , try to post in the malware forum when you get time - It is a Very bad IP -

I can only leave you with this as we do not diagnose logs in this area - Good luck with the studies-

As we do not work on Malware removal or diagnostics in the general forums please follow these directions -

Please print out, read and follow What do I do now? , skipping any steps you are unable to complete.

The next step is post a New Topic Here.

One of the expert helpers there will give you one-on-one assistance when one becomes available.

After posting your new post make sure under options that you select Track this topic and choose one of the Email options so that

you're alerted when someone has replied to your post - Please allow at least 48 hours for a reply as the experts can get busy at times -

Also add a brief note to the experts as to your problems -

Alternatively, as a paying customer, you can contact the help desk at support@malwarebytes.org or via This Link

Always use the ADD REPLY Tab at the bottom of the page when you reply -

Thank You -

[daledoc1]

Hi, ClemIsMe:

For added protection while the experts research it, you might want to add that IP to the list of "banned" IPs in McAfee.

I no longer run McAfee on my computers &I don't know what version you have, so I can't reproduce the exact steps for you, but there is a way to open the main GUI, then the FW settings, & select "banned IPs" and add it to the list.

I used to do this whenever MBAM would block an IP, after I verified here at the MBAM "False Positives" board that it was a "real" bad IP.

And I would seriously consider Noknojon's advice about checking your machine for nasties, just to be sure.

Regards,

daledoc1