208.73.210.29

[hrbor11]

Hi All. Every five minutes Malware pops up the balloon announcing it has stopped my PC from trying to connect to 208.73.210.29. I'm happy it's preventing connection, but would like to stomp this issue from even starting...any ideas? Thanks in advance.

[Kevin Hauschulz]

My computer is doing the same thing. I have run countless scans with different anti-malware software and am coming up with nothing. I would appreciate if you would pass along any info you might get as well!

Thanks,

Kevin

[TeMerc]

The IP alert indicates that an malicious IP was prevented from loading onto your system. No action is required unless you're also experiencing malware symptoms. An open browser is not required to be open, just an active Net connection with processes running, such as IM cleints, SKYPE or P2P software. Windows Vista and Windows 7 will show the process, but neither Windows 2000 nor Windows XP have the structure in place for this to be displayed by our software

Please see the link below which contains our FAQ's(including reporting false\positives and adding IPs to ignore) on this feature for more information:

http://www.malwarebytes.org/forums/index.p...t=0#entry107310

If the system is infected you'll need to start a new thread in the HijackThis forums

[AdvancedSetup]

Hello , and welcome to Malwarebytes.org

If you're concerned that you may be infected please follow the directions below.

Please print out, read and follow the directions here, skipping any steps you are unable to complete. Then post a NEW topic here.

One of the expert helpers there will give you one-on-one assistance when one becomes available.

After posting your new post make sure under options that you select Track this topic and choose one of the Email options so that you're alerted when someon has replied to your post.

Alternatively, as a paying customer, you can contact the help desk at support@malwarebytes.org

[hrbor11]

Solved it; AVG free anti-virus has a "root kit" analysis feature...ran it and it found the problem, and I manually deleted it.

[Firefox]

Glad to hear you solved your problem.....

should you have other comments or questions don't hesitate to ask....

[Facts]

Glad to hear you solved your problem.....

should you have other comments or questions don't hesitate to ask....

I think that Malwarebytes has responded to this at too simplistic a level. I, too, began suddenly to have this problem (and frankly it really is annoying!). After several attempts to restore back one, two, and even three weeks, suddenly none of my virus/firewall software was working. So, this a.m., I restored my whole computer back to out-of-the-box status. One by one, I deleted the unwanted junk and reinstalled my usual software. Within minutes of reinstalling Anti-Malware, once again those little balloons are popping up. These balloons now tell me that it is an outgoing attempt to link to the 208.73.210.29 domain and that the program making the attempt is one of the several versions of svchost.exe that are currently working. I then read the post suggesting that AVG's anti-virus software would find the problem and fix it. So, I downloaded AVG, ran it, and was just thinking all was well until I logged into this site, when "Pop" up came the nasty little balloon. If the earlier poster did, actually, fix the problem, it would be very nice if he or she would pass the information on to the rest of us -- otherwise, I'm wondering if he or she is just a shill for AVG!

[Firefox]

@ Facts

Hi, and Welcome to Malwarebytes!

If you are having suspicious blocks, let the experts take a look at your logs and they can get to the bottom of it....

Please read the following so that you can begin the cleaning process:

As we don't deal with malware removal in the General Malwarebytes' Anti-Malware Forum, you need to start a topic in the Malware Removal forum so a qualified helper can help you fix any malware related problems/infections you may have.

• Please read and follow the directions here, skipping any steps you are unable to complete. Then post a NEW topic here.
  
• After posting your new post, make sure under options, you select Track this topic and choose Immediate Email Notification, so that you're alerted when someone has replied to your post.
  
• One of the expert helpers there will give you one-on-one assistance when one becomes available.
  
• Please refrain from making any further changes to your computer (Install/Uninstall programs, use special fix tools, delete files, edit the registry, etc...) unless advised by a malware removal helper. Doing so can result in system changes which may hinder the attempts by a helper to clean your machine.
  

NOTE: Please DO NOT post back to (bump) your topic within the first 48 hours.

Replying to your own posts changes the post count and helpers are looking for topics with zero replies. If you reply to your own post helpers may think that you're already being helped and thus overlook your post.

• • If there is no reply from any experts after 48 hours, you can reply to the topic, asking for help again.
    Or
    
  • You may send a Private Message to a Moderator asking for assistance.
    

Alternatively, as a paying customer, you can contact the help desk at support@malwarebytes.org or here.

Please be patient, someone will assist you as soon as it is possible.

PS: Please use the "ADDREPLY" button instead of other ones when you start replying.