MKentL Posted February 8, 2011 ID:386093 Share Posted February 8, 2011 Here's the first log I got on February 1:Malwarebytes' Anti-Malware 1.50.1.1100www.malwarebytes.orgDatabase version: 5657Windows 6.1.7600Internet Explorer 8.0.7600.163852/1/2011 11:29:05 PMmbam-log-2011-02-01 (23-29-05).txtScan type: Flash scanObjects scanned: 106059Time elapsed: 10 second(s)Memory Processes Infected: 0Memory Modules Infected: 0Registry Keys Infected: 0Registry Values Infected: 0Registry Data Items Infected: 0Folders Infected: 0Files Infected: 0Memory Processes Infected:(No malicious items detected)Memory Modules Infected:(No malicious items detected)Registry Keys Infected:(No malicious items detected)Registry Values Infected:(No malicious items detected)Registry Data Items Infected:(No malicious items detected)Folders Infected:(No malicious items detected)Files Infected:(No malicious items detected)____________________________________________Now all I get is something like this, as of the last 7 logs:14:46:09 Michael MESSAGE Protection started successfully14:46:13 Michael MESSAGE IP Protection started successfully17:22:48 Michael MESSAGE Protection started successfully17:22:53 Michael MESSAGE IP Protection started successfully22:05:15 Michael MESSAGE Protection started successfully22:05:19 Michael MESSAGE IP Protection started successfully22:37:59 Michael MESSAGE Protection started successfully22:38:04 Michael MESSAGE IP Protection started successfully22:57:29 Michael MESSAGE Scheduled update executed successfully22:58:27 Michael MESSAGE IP Protection stopped22:58:28 Michael MESSAGE Database updated successfully22:58:30 Michael MESSAGE IP Protection started successfullyAND most recently : 12:50:02 Michael MESSAGE Protection started successfully12:50:06 Michael MESSAGE IP Protection started successfully15:41:09 Michael MESSAGE Protection started successfully15:41:14 Michael MESSAGE IP Protection started successfully18:30:46 Kent MESSAGE IP Protection stopped18:30:48 Kent MESSAGE Database updated successfully18:30:50 Kent MESSAGE IP Protection started successfully18:56:58 Kent MESSAGE Protection started successfully18:57:03 Kent MESSAGE IP Protection started successfully19:00:59 Kent MESSAGE Protection started successfully19:01:04 Kent MESSAGE IP Protection started successfully19:33:21 Kent MESSAGE Protection started successfully19:33:25 Kent MESSAGE IP Protection started successfully21:30:06 Kent MESSAGE Protection started successfully21:30:11 Kent MESSAGE IP Protection started successfully21:44:59 Michael IP-BLOCK 212.117.176.187 (Type: outgoing, Port: 49602, Process: avwebgrd.exe)21:45:07 Michael IP-BLOCK 212.117.176.187 (Type: outgoing, Port: 49608, Process: avwebgrd.exe)21:45:23 Michael IP-BLOCK 212.117.176.187 (Type: outgoing, Port: 49614, Process: avwebgrd.exe)21:45:23 Michael IP-BLOCK 212.117.176.187 (Type: outgoing, Port: 49620, Process: avwebgrd.exe)21:45:47 Michael IP-BLOCK 212.117.176.187 (Type: outgoing, Port: 49626, Process: avwebgrd.exe)21:46:27 Michael IP-BLOCK 212.117.176.187 (Type: outgoing, Port: 49632, Process: avwebgrd.exe)21:47:15 Michael IP-BLOCK 212.117.176.187 (Type: outgoing, Port: 49652, Process: avwebgrd.exe)21:47:15 Michael IP-BLOCK 212.117.176.187 (Type: outgoing, Port: 49658, Process: avwebgrd.exe)21:47:39 Michael IP-BLOCK 212.117.176.187 (Type: outgoing, Port: 49661, Process: iexplore.exe)21:47:39 Michael IP-BLOCK 212.117.176.187 (Type: outgoing, Port: 49662, Process: iexplore.exe)22:57:33 Michael MESSAGE Scheduled update executed successfully22:58:34 Michael MESSAGE IP Protection stopped22:58:36 Michael MESSAGE Database updated successfully22:58:38 Michael MESSAGE IP Protection started successfully_______________________________________It wasn't blocking antivir webgrd. initially, and was reporting on all other kinds of information. Now it doesn't say anything except IP blocking and updates. I haven't changed any settings in either program. Further, as a quirky aside, it fails to name the Michael account properly. That isn't the name of the account. It's Mikey.?? But mainy I'd like to know if the program is doing what it is supposed to be doing, given the most recent logs v. the initial log. Was the initial log even reporting what looks like a proper log?thanks mucho for any assistance,Mikey Link to post Share on other sites More sharing options...
MKentL Posted February 8, 2011 Author ID:386108 Share Posted February 8, 2011 I forgot to add: I'm running it on full scan, it is set to open log file immediately after saving (it does not, the program closes), all scanner settings are chosen, the ignore list is empty, and I'm running Windows 7 64 bit.thanks Link to post Share on other sites More sharing options...
ThreeGuser Posted February 8, 2011 ID:386138 Share Posted February 8, 2011 Hi Mikey!As far as I can see from your log MBAM does not block Avira's AntiVir web guard but the IP 212.117.176.187 , which belongs to some Luxenburn server.I guess something wanted to connect to that address , the Web guard first interfered , then IE but MBAM has this IP in its blacklist.I'd recommend you follow these procedures as outlined below:@ Uninstall Malwarebytes' Anti-Malware using Add/Remove programs in the control panel.@ Restart your computer (very important).@ Download and run this utility:http://www.malwarebytes.org/mbam-clean.exe@ It will ask to restart your computer (please allow it to).@ After the computer restarts, Temporarily disable your Anti-Virus and install the latest version of Malwarebytes' Anti-Malware from:http://download.cnet.com/Malwarebytes-Anti...4-10804572.html@ Note: You will need to reactivate the program using the license you have initially been sent@ Launch the program and set the Protection and Registration. Then go to the UPDATE tab if not done during installation and check for updates.@ Restart the computer again and verify that MBAM is in the task tray. Now setup any file exclusions as may be required in your Anti-Virus/Internet-Security/Firewall applications and restart your Anti-Virus/Internet-Security applications.Perform Quick scan with MBAM and with your Antivirus program (AntiVir) . If you still face the problem(s) you mention above , post in the malware removal section http://forums.malwarebytes.org/index.php?showforum=7following their advice : http://forums.malwarebytes.org/index.php?showtopic=9573 Link to post Share on other sites More sharing options...
MKentL Posted February 8, 2011 Author ID:386423 Share Posted February 8, 2011 thanks ThreeGuser,It is no longer reporting any outbound attempts to connect with any IP address. And it is generating 2 logs for each scan, instead of just the one. I appreciate your detailed help!Mikey Link to post Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now