Jump to content

MWB Successfully Blocked Access to Potentially Malicious Website?

OrsonWelles
 Share

Recommended Posts

OrsonWelles

OrsonWelles

Posted
Posted

The popup message from the system tray reads: Malwarebytes Antivirus Successfully blocked access to a poentially malicious website: 221.192.199.xx where "xx" is one of the following: (.45) or (.46) or (.48)

Type: Outgoing

Port: 137

I receive this message every couple of minutes while browsing and the IP is always the same. I did a Whois on this IP and found that it is in Hebei, China. (Chinacom.com)

I am not a techie so I would like to understand what this message means and if I should take some action.

Does this mean that my machine or malware on it is trying to connect to this IP?

Why would my machine be attempting to connect to this IP?

Is there anything I can do to stop this behavior in the first place?

Is there a way to detect what program or process is trying to initiate this connection?

Could future versions of MalwareBytes be designed to provide a Process Identification (PID)and/or path and name of originating application?

I always keep my AV software update and have them run automatically every night.

I recently purchased MalwareBytes and that is when I noticed this problem. McAfee, MS Defender, and MalwareBytes report a clean machine.

Running Windows 7 x 64

IE 9

Mcafee Security AV

MS Defender

Malwarebytes 1.5

I am wondering if it's worthwhile to have a computer if I must spend so much time and money on security and maintenance.

Thank You,

Dennis

Link to post
Share on other sites
Mainard

Mainard

Posted
Posted

Hello OrsonWelles,

MBAM's IP protection is not an Antivirus. The balloon you are experiencing is something along like: post-60618-0-63338500-1304632880.png ?

  • Does this mean that my machine or malware on it is trying to connect to this IP?
  • Why would my machine be attempting to connect to this IP?
  • Is there anything I can do to stop this behavior in the first place?
  • Is there a way to detect what program or process is trying to initiate this connection?

  • You could have malware, but you did say scans came up empty.
  • Your machine is attempting to access an item that is hosted on the IP address that is considered malicious. Thus MBAM is blocking it. I would have to see the protection log to view which process is blocking the connection.
  • If you wish to disable IP blocking (not recommending) you can do so through the system tray icon.
  • The program/process is displayed within the balloon notification as well as logged within your protection log.

  • I receive this message every couple of minutes while browsing and the IP is always the same. I did a Whois on this IP and found that it is in Hebei, China. (Chinacom.com)

  • You are probably attempting to load/browse items that are hosted on an IP that is considered malicious, hence MBAM blocks it.

If you have any questions please do not hesitate to ask :)

Thank you very much!!!

Link to post
Share on other sites
OrsonWelles

OrsonWelles

Posted
  • Author
Posted

Thank you for your reply, Da' Samurai

The pop up example you show is of the type I get except it does not idenify the process. I wish it did then I might be able to tie down just what's causing this. I might also add that I am using McAfee's Site Advisor when browsing which doesn't give any warning. I am also attaching the most recent MBAMB log FYI. It shows the IP mentioned above plus a second IP (58.218.199.250) which seems to be recurring more frequently lately. These are all occuring on port 137 exclusively.

Hello OrsonWelles,

MBAM's IP protection is not an Antivirus. The balloon you are experiencing is something along like: post-60618-0-63338500-1304632880.png ?

  • You could have malware, but you did say scans came up empty.
  • Your machine is attempting to access an item that is hosted on the IP address that is considered malicious. Thus MBAM is blocking it. I would have to see the protection log to view which process is blocking the connection.
  • If you wish to disable IP blocking (not recommending) you can do so through the system tray icon.
  • The program/process is displayed within the balloon notification as well as logged within your protection log.

  • You are probably attempting to load/browse items that are hosted on an IP that is considered malicious, hence MBAM blocks it.

If you have any questions please do not hesitate to ask :)

Thank you very much!!!

protection-log-2011-05-06.txt

Link to post
Share on other sites
Mainard

Mainard

Posted
Posted

Hello OrsonWelles,

  • Please download TCPView by Microsoft Sysinternals from here and save it to your desktop
  • Double-click on TCPView.exe to run it
  • Click on Options at the top and uncheck Resolve Addresses
  • Look in the Remote Address column for the IP address that Malwarebytes' Anti-Malware has been blocking and see what process is listed next to it under the Process column on the left

Then Please report which process it is that is being blocked.

Thank you very much

Link to post
Share on other sites
RUSTYDOG

RUSTYDOG

Posted
Posted

Greetings Group. Newbie here. I am hoping someone can help me please.

Using MWB and I get the indicator "blocking access to potentially website; outgoing" no mention of a application.

The warnings are frequent. Every few minutes.

I run MWB scans and nothing is found.

IPs:

83.133.119.176

194.247.183.80

208.73.210.29

67.29.139.153

95.143.193.138 (most popular lately)

195.28.10.47

67.29.139.153

212.117.177.13

93.114.40.221 (new one that occurred just while typing this post)

Some of these may not be coming up lately and some are new today. But this is a list of the ones for the last week.

When I Google these IP's they are usually associated with malicious references.

I ran the TCPView and I see many occurrences of svchost.exe, is this normal? I did catch one occurrence of svchost.exe that had one of the above IPs. The activity happens pretty fast and there are burst of extra activity every now and then that makes it hard to follow.

What's my next move? Are there some reports I can post here for help?

This is driving me crazy and I am tempted to get another computer if mine is hopelessly infected.

Thank you very much in advance for your help.

Link to post
Share on other sites
Firefox

Firefox

Posted
Posted

Sorry Mainard, I did not notice you were replying to Rustydog....

RUSTYDOG, please supply Mainard the logs he is looking for, if he deams it necessary for you to follow my instructions for being infected, they are below....

Hello RUSTYDOG, and Welcome to Malwarebytes

It would have been better for you to start your own topic, as your issue is different than the original topic perhaps and admin can move your topic out, that being said...

It could be something strange with that svchost.exe file. There are a lot of things that run under that name, as well as malware that likes to disguise itself under that name as well.

If you think you are infected, here are the steps needed to get your computer cleaned....

Please read the following so that you can begin the cleaning process:

You have 3 Options that you can choose from as listed below:

[*]Option 1

Link to post
Share on other sites
OrsonWelles

OrsonWelles

Posted
  • Author
Posted

I have run TCPview.exe but it does not identify the Remote Address of the suspicious IP's but simply displays an "*' in the Remote Address column. From my research I think that no process and remote address is listed because Port 137 is a UDP protocol port. Having said that, I have repeatedly observed that the most recent process listed when the popup appears is svchost.exe. Why svchost.exe should be trying to make connections to something in Hebei, China worries me.

Thank You,

Dennis

Thank you for your reply, Da' Samurai

The pop up example you show is of the type I get except it does not idenify the process. I wish it did then I might be able to tie down just what's causing this. I might also add that I am using McAfee's Site Advisor when browsing which doesn't give any warning. I am also attaching the most recent MBAMB log FYI. It shows the IP mentioned above plus a second IP (58.218.199.250) which seems to be recurring more frequently lately. These are all occuring on port 137 exclusively.

Link to post
Share on other sites
Firefox

Firefox

Posted
Posted

Hello OrsonWelles, and Welcome to Malwarebytes

If you think you are infected, here are the steps needed to get your computer cleaned....

Please read the following so that you can begin the cleaning process:

You have 3 Options that you can choose from as listed below:

[*]Option 1

Link to post
Share on other sites
Mainard

Mainard

Posted
Posted

Hello Rusty,

The protection log should be a .txt file. If you open notepad then click file->open and locate the protection log for that day. Is there still output that you are unable to view the content?

Please attach the file nonetheless. :)

Thank you!

Link to post
Share on other sites
RUSTYDOG

RUSTYDOG

Posted
Posted

Got it to open by browsing direct. For some reason it doesn't open properly from within MWB.

See below: Thank you.

06:40:14 DEAN IP-BLOCK 95.143.193.138 (Type: outgoing)

06:40:17 DEAN IP-BLOCK 95.143.193.138 (Type: outgoing)

06:40:23 DEAN IP-BLOCK 95.143.193.138 (Type: outgoing)

06:41:02 DEAN IP-BLOCK 95.143.193.138 (Type: outgoing)

06:41:05 DEAN IP-BLOCK 95.143.193.138 (Type: outgoing)

06:41:11 DEAN IP-BLOCK 95.143.193.138 (Type: outgoing)

06:49:35 DEAN IP-BLOCK 89.187.53.53 (Type: outgoing)

06:49:38 DEAN IP-BLOCK 89.187.53.53 (Type: outgoing)

06:49:44 DEAN IP-BLOCK 89.187.53.53 (Type: outgoing)

06:50:07 DEAN IP-BLOCK 83.133.119.176 (Type: outgoing)

06:50:10 DEAN IP-BLOCK 83.133.119.176 (Type: outgoing)

06:50:16 DEAN IP-BLOCK 83.133.119.176 (Type: outgoing)

06:50:24 DEAN IP-BLOCK 83.133.119.176 (Type: outgoing)

06:50:27 DEAN IP-BLOCK 83.133.119.176 (Type: outgoing)

06:50:31 DEAN IP-BLOCK 80.87.199.15 (Type: outgoing)

06:50:33 DEAN IP-BLOCK 83.133.119.176 (Type: outgoing)

06:50:34 DEAN IP-BLOCK 80.87.199.15 (Type: outgoing)

06:50:40 DEAN IP-BLOCK 80.87.199.15 (Type: outgoing)

06:51:02 DEAN IP-BLOCK 95.143.193.138 (Type: outgoing)

06:51:05 DEAN IP-BLOCK 95.143.193.138 (Type: outgoing)

06:51:11 DEAN IP-BLOCK 95.143.193.138 (Type: outgoing)

06:51:32 DEAN IP-BLOCK 208.73.210.29 (Type: outgoing)

06:51:35 DEAN IP-BLOCK 208.73.210.29 (Type: outgoing)

06:51:41 DEAN IP-BLOCK 208.73.210.29 (Type: outgoing)

06:51:55 DEAN IP-BLOCK 67.29.139.153 (Type: outgoing)

06:51:58 DEAN IP-BLOCK 67.29.139.153 (Type: outgoing)

06:52:02 DEAN IP-BLOCK 208.73.210.29 (Type: outgoing)

06:52:03 DEAN IP-BLOCK 67.29.139.153 (Type: outgoing)

06:52:04 DEAN IP-BLOCK 208.73.210.29 (Type: outgoing)

06:52:11 DEAN IP-BLOCK 208.73.210.29 (Type: outgoing)

07:04:02 DEAN IP-BLOCK 95.143.193.138 (Type: outgoing)

07:04:05 DEAN IP-BLOCK 95.143.193.138 (Type: outgoing)

07:04:11 DEAN IP-BLOCK 95.143.193.138 (Type: outgoing)

07:14:02 DEAN IP-BLOCK 95.143.193.138 (Type: outgoing)

07:14:05 DEAN IP-BLOCK 95.143.193.138 (Type: outgoing)

07:14:11 DEAN IP-BLOCK 95.143.193.138 (Type: outgoing)

07:19:15 DEAN IP-BLOCK 83.133.119.176 (Type: outgoing)

07:19:16 DEAN IP-BLOCK 83.133.119.176 (Type: outgoing)

07:19:18 DEAN IP-BLOCK 83.133.119.176 (Type: outgoing)

07:19:19 DEAN IP-BLOCK 83.133.119.176 (Type: outgoing)

07:19:24 DEAN IP-BLOCK 83.133.119.176 (Type: outgoing)

07:19:25 DEAN IP-BLOCK 83.133.119.176 (Type: outgoing)

07:19:36 DEAN IP-BLOCK 208.73.210.29 (Type: outgoing)

07:19:39 DEAN IP-BLOCK 208.91.207.91 (Type: outgoing)

07:19:39 DEAN IP-BLOCK 208.73.210.29 (Type: outgoing)

07:19:42 DEAN IP-BLOCK 208.91.207.91 (Type: outgoing)

07:19:45 DEAN IP-BLOCK 208.73.210.29 (Type: outgoing)

07:19:48 DEAN IP-BLOCK 208.91.207.91 (Type: outgoing)

07:20:05 DEAN IP-BLOCK 208.73.210.29 (Type: outgoing)

07:20:08 DEAN IP-BLOCK 208.73.210.29 (Type: outgoing)

07:20:14 DEAN IP-BLOCK 208.73.210.29 (Type: outgoing)

07:20:42 DEAN IP-BLOCK 208.87.32.68 (Type: outgoing)

07:20:45 DEAN IP-BLOCK 208.87.32.68 (Type: outgoing)

07:20:51 DEAN IP-BLOCK 208.87.32.68 (Type: outgoing)

07:20:52 DEAN IP-BLOCK 208.73.210.29 (Type: outgoing)

07:20:55 DEAN IP-BLOCK 208.73.210.29 (Type: outgoing)

07:21:01 DEAN IP-BLOCK 208.73.210.29 (Type: outgoing)

07:21:13 DEAN IP-BLOCK 208.87.32.68 (Type: outgoing)

07:21:16 DEAN IP-BLOCK 208.87.32.68 (Type: outgoing)

07:21:22 DEAN IP-BLOCK 208.87.32.68 (Type: outgoing)

07:21:28 DEAN IP-BLOCK 208.73.210.29 (Type: outgoing)

07:21:31 DEAN IP-BLOCK 208.73.210.29 (Type: outgoing)

07:21:37 DEAN IP-BLOCK 208.73.210.29 (Type: outgoing)

07:27:02 DEAN IP-BLOCK 95.143.193.138 (Type: outgoing)

07:27:05 DEAN IP-BLOCK 95.143.193.138 (Type: outgoing)

07:27:11 DEAN IP-BLOCK 95.143.193.138 (Type: outgoing)

07:36:37 DEAN IP-BLOCK 89.187.53.53 (Type: outgoing)

07:36:40 DEAN IP-BLOCK 89.187.53.53 (Type: outgoing)

07:36:46 DEAN IP-BLOCK 89.187.53.53 (Type: outgoing)

07:37:02 DEAN IP-BLOCK 95.143.193.138 (Type: outgoing)

07:37:05 DEAN IP-BLOCK 95.143.193.138 (Type: outgoing)

07:37:11 DEAN IP-BLOCK 83.133.119.176 (Type: outgoing)

07:37:11 DEAN IP-BLOCK 95.143.193.138 (Type: outgoing)

07:37:14 DEAN IP-BLOCK 83.133.119.176 (Type: outgoing)

07:37:15 DEAN IP-BLOCK 83.133.119.176 (Type: outgoing)

07:37:18 DEAN IP-BLOCK 83.133.119.176 (Type: outgoing)

07:37:20 DEAN IP-BLOCK 83.133.119.176 (Type: outgoing)

07:37:23 DEAN IP-BLOCK 83.133.119.176 (Type: outgoing)

07:37:32 DEAN IP-BLOCK 208.73.210.29 (Type: outgoing)

07:37:35 DEAN IP-BLOCK 208.73.210.29 (Type: outgoing)

07:37:41 DEAN IP-BLOCK 208.73.210.29 (Type: outgoing)

07:37:51 DEAN IP-BLOCK 208.73.210.29 (Type: outgoing)

07:37:54 DEAN IP-BLOCK 208.73.210.29 (Type: outgoing)

07:37:55 DEAN IP-BLOCK 208.73.210.29 (Type: outgoing)

07:37:58 DEAN IP-BLOCK 208.73.210.29 (Type: outgoing)

07:38:00 DEAN IP-BLOCK 208.73.210.29 (Type: outgoing)

07:38:04 DEAN IP-BLOCK 208.73.210.29 (Type: outgoing)

07:38:41 DEAN IP-BLOCK 208.73.210.29 (Type: outgoing)

07:38:44 DEAN IP-BLOCK 208.73.210.29 (Type: outgoing)

07:38:50 DEAN IP-BLOCK 208.73.210.29 (Type: outgoing)

07:39:03 DEAN IP-BLOCK 67.29.139.153 (Type: outgoing)

07:39:05 DEAN IP-BLOCK 208.73.210.29 (Type: outgoing)

07:39:12 DEAN IP-BLOCK 208.73.210.29 (Type: outgoing)

07:50:02 DEAN IP-BLOCK 95.143.193.138 (Type: outgoing)

07:50:05 DEAN IP-BLOCK 95.143.193.138 (Type: outgoing)

07:50:11 DEAN IP-BLOCK 95.143.193.138 (Type: outgoing)

07:50:11 DEAN IP-BLOCK 95.143.193.138 (Type: outgoing)

08:00:02 DEAN IP-BLOCK 95.143.193.138 (Type: outgoing)

08:00:06 DEAN IP-BLOCK 95.143.193.138 (Type: outgoing)

08:00:12 DEAN IP-BLOCK 95.143.193.138 (Type: outgoing)

08:02:38 DEAN IP-BLOCK 89.187.53.53 (Type: outgoing)

08:02:41 DEAN IP-BLOCK 89.187.53.53 (Type: outgoing)

08:02:46 DEAN IP-BLOCK 89.187.53.53 (Type: outgoing)

08:03:13 DEAN IP-BLOCK 83.133.119.176 (Type: outgoing)

08:03:16 DEAN IP-BLOCK 83.133.119.176 (Type: outgoing)

08:03:22 DEAN IP-BLOCK 83.133.119.176 (Type: outgoing)

08:03:23 DEAN IP-BLOCK 83.133.119.176 (Type: outgoing)

08:03:26 DEAN IP-BLOCK 83.133.119.176 (Type: outgoing)

08:03:32 DEAN IP-BLOCK 83.133.119.176 (Type: outgoing)

08:03:43 DEAN IP-BLOCK 67.29.139.153 (Type: outgoing)

08:03:46 DEAN IP-BLOCK 67.29.139.153 (Type: outgoing)

08:04:53 DEAN IP-BLOCK 208.73.210.29 (Type: outgoing)

08:04:56 DEAN IP-BLOCK 208.73.210.29 (Type: outgoing)

08:05:02 DEAN IP-BLOCK 208.73.210.29 (Type: outgoing)

08:05:03 DEAN IP-BLOCK 85.92.154.197 (Type: outgoing)

08:05:06 DEAN IP-BLOCK 85.92.154.197 (Type: outgoing)

08:05:11 DEAN IP-BLOCK 85.92.154.197 (Type: outgoing)

08:05:19 DEAN IP-BLOCK 208.73.210.29 (Type: outgoing)

08:05:22 DEAN IP-BLOCK 208.73.210.29 (Type: outgoing)

08:05:28 DEAN IP-BLOCK 208.73.210.29 (Type: outgoing)

08:13:03 DEAN IP-BLOCK 95.143.193.138 (Type: outgoing)

08:13:06 DEAN IP-BLOCK 95.143.193.138 (Type: outgoing)

08:13:12 DEAN IP-BLOCK 95.143.193.138 (Type: outgoing)

08:23:03 DEAN IP-BLOCK 95.143.193.138 (Type: outgoing)

08:23:06 DEAN IP-BLOCK 95.143.193.138 (Type: outgoing)

08:23:12 DEAN IP-BLOCK 95.143.193.138 (Type: outgoing)

08:31:34 DEAN IP-BLOCK 89.187.53.53 (Type: outgoing)

08:31:37 DEAN IP-BLOCK 89.187.53.53 (Type: outgoing)

08:31:43 DEAN IP-BLOCK 89.187.53.53 (Type: outgoing)

08:33:41 DEAN IP-BLOCK 208.73.210.29 (Type: outgoing)

08:33:44 DEAN IP-BLOCK 208.73.210.29 (Type: outgoing)

08:33:46 DEAN IP-BLOCK 67.29.139.153 (Type: outgoing)

08:33:49 DEAN IP-BLOCK 67.29.139.153 (Type: outgoing)

08:33:50 DEAN IP-BLOCK 208.73.210.29 (Type: outgoing)

08:33:55 DEAN IP-BLOCK 67.29.139.153 (Type: outgoing)

08:34:05 DEAN IP-BLOCK 208.73.210.29 (Type: outgoing)

08:34:08 DEAN IP-BLOCK 208.73.210.29 (Type: outgoing)

08:34:14 DEAN IP-BLOCK 208.73.210.29 (Type: outgoing)

08:35:18 DEAN IP-BLOCK 80.87.199.15 (Type: outgoing)

08:35:21 DEAN IP-BLOCK 80.87.199.15 (Type: outgoing)

08:35:27 DEAN IP-BLOCK 80.87.199.15 (Type: outgoing)

08:36:03 DEAN IP-BLOCK 95.143.193.138 (Type: outgoing)

08:36:06 DEAN IP-BLOCK 95.143.193.138 (Type: outgoing)

08:36:12 DEAN IP-BLOCK 95.143.193.138 (Type: outgoing)

08:41:27 DEAN IP-BLOCK 95.143.193.138 (Type: outgoing)

08:41:30 DEAN IP-BLOCK 95.143.193.138 (Type: outgoing)

08:41:36 DEAN IP-BLOCK 95.143.193.138 (Type: outgoing)

08:46:03 DEAN IP-BLOCK 95.143.193.138 (Type: outgoing)

08:46:06 DEAN IP-BLOCK 95.143.193.138 (Type: outgoing)

08:46:11 DEAN IP-BLOCK 95.143.193.138 (Type: outgoing)

08:59:03 DEAN IP-BLOCK 95.143.193.138 (Type: outgoing)

08:59:06 DEAN IP-BLOCK 95.143.193.138 (Type: outgoing)

08:59:12 DEAN IP-BLOCK 95.143.193.138 (Type: outgoing)

09:04:08 DEAN IP-BLOCK 64.111.196.118 (Type: outgoing)

09:04:11 DEAN IP-BLOCK 64.111.196.118 (Type: outgoing)

09:04:17 DEAN IP-BLOCK 64.111.196.118 (Type: outgoing)

09:04:28 DEAN IP-BLOCK 67.29.139.153 (Type: outgoing)

09:04:31 DEAN IP-BLOCK 67.29.139.153 (Type: outgoing)

09:04:37 DEAN IP-BLOCK 67.29.139.153 (Type: outgoing)

09:05:11 DEAN IP-BLOCK 208.73.210.29 (Type: outgoing)

09:05:12 DEAN IP-BLOCK 67.29.139.153 (Type: outgoing)

09:05:14 DEAN IP-BLOCK 208.73.210.29 (Type: outgoing)

09:05:15 DEAN IP-BLOCK 67.29.139.153 (Type: outgoing)

09:05:20 DEAN IP-BLOCK 208.73.210.29 (Type: outgoing)

09:05:21 DEAN IP-BLOCK 67.29.139.153 (Type: outgoing)

09:05:33 DEAN IP-BLOCK 208.73.210.29 (Type: outgoing)

09:05:35 DEAN IP-BLOCK 67.29.139.153 (Type: outgoing)

09:05:36 DEAN IP-BLOCK 208.73.210.29 (Type: outgoing)

09:05:38 DEAN IP-BLOCK 67.29.139.153 (Type: outgoing)

09:05:40 DEAN IP-BLOCK 208.73.210.125 (Type: outgoing)

09:05:42 DEAN IP-BLOCK 208.73.210.29 (Type: outgoing)

09:05:43 DEAN IP-BLOCK 208.73.210.125 (Type: outgoing)

09:05:44 DEAN IP-BLOCK 67.29.139.153 (Type: outgoing)

09:05:49 DEAN IP-BLOCK 208.73.210.125 (Type: outgoing)

09:06:03 DEAN IP-BLOCK 208.73.210.125 (Type: outgoing)

09:06:06 DEAN IP-BLOCK 208.73.210.125 (Type: outgoing)

09:06:12 DEAN IP-BLOCK 208.73.210.125 (Type: outgoing)

09:09:03 DEAN IP-BLOCK 95.143.193.138 (Type: outgoing)

09:09:06 DEAN IP-BLOCK 95.143.193.138 (Type: outgoing)

09:09:12 DEAN IP-BLOCK 95.143.193.138 (Type: outgoing)

09:09:55 DEAN IP-BLOCK 89.187.53.53 (Type: outgoing)

09:09:58 DEAN IP-BLOCK 89.187.53.53 (Type: outgoing)

09:10:05 DEAN IP-BLOCK 89.187.53.53 (Type: outgoing)

09:10:35 DEAN IP-BLOCK 208.73.210.29 (Type: outgoing)

09:10:38 DEAN IP-BLOCK 208.73.210.29 (Type: outgoing)

09:10:44 DEAN IP-BLOCK 208.73.210.29 (Type: outgoing)

09:11:04 DEAN IP-BLOCK 208.73.210.29 (Type: outgoing)

09:11:07 DEAN IP-BLOCK 208.73.210.29 (Type: outgoing)

09:11:13 DEAN IP-BLOCK 208.73.210.29 (Type: outgoing)

09:11:25 DEAN IP-BLOCK 208.73.210.29 (Type: outgoing)

09:11:28 DEAN IP-BLOCK 208.73.210.29 (Type: outgoing)

09:11:34 DEAN IP-BLOCK 208.73.210.29 (Type: outgoing)

09:11:47 DEAN IP-BLOCK 208.73.210.29 (Type: outgoing)

09:11:50 DEAN IP-BLOCK 208.73.210.29 (Type: outgoing)

09:11:56 DEAN IP-BLOCK 208.73.210.29 (Type: outgoing)

09:54:45 (null) MESSAGE Protection started successfully

09:55:34 DEAN MESSAGE IP Protection started successfully

09:56:29 DEAN IP-BLOCK 95.143.193.138 (Type: outgoing)

09:56:32 DEAN IP-BLOCK 95.143.193.138 (Type: outgoing)

09:56:38 DEAN IP-BLOCK 95.143.193.138 (Type: outgoing)

10:16:57 DEAN IP-BLOCK 95.143.193.138 (Type: outgoing)

10:17:00 DEAN IP-BLOCK 95.143.193.138 (Type: outgoing)

10:17:06 DEAN IP-BLOCK 95.143.193.138 (Type: outgoing)

11:31:22 (null) MESSAGE Protection started successfully

11:32:03 DEAN MESSAGE IP Protection started successfully

11:33:09 DEAN IP-BLOCK 95.143.193.138 (Type: outgoing)

11:33:12 DEAN IP-BLOCK 95.143.193.138 (Type: outgoing)

11:33:18 DEAN IP-BLOCK 95.143.193.138 (Type: outgoing)

11:43:55 DEAN IP-BLOCK 95.143.193.138 (Type: outgoing)

11:43:58 DEAN IP-BLOCK 95.143.193.138 (Type: outgoing)

11:44:04 DEAN IP-BLOCK 95.143.193.138 (Type: outgoing)

11:45:44 DEAN IP-BLOCK 95.143.193.138 (Type: outgoing)

11:45:47 DEAN IP-BLOCK 95.143.193.138 (Type: outgoing)

11:45:53 DEAN IP-BLOCK 95.143.193.138 (Type: outgoing)

13:09:12 DEAN MESSAGE Scheduled update executed successfully

13:09:12 DEAN MESSAGE IP Protection stopped

13:09:23 DEAN MESSAGE Database updated successfully

13:09:27 DEAN MESSAGE IP Protection started successfully

13:52:46 DEAN IP-BLOCK 95.143.193.138 (Type: outgoing)

13:52:49 DEAN IP-BLOCK 95.143.193.138 (Type: outgoing)

13:52:55 DEAN IP-BLOCK 95.143.193.138 (Type: outgoing)

Link to post
Share on other sites
Mainard

Mainard

Posted
Posted

Hello Rusty,

As we don't deal with malware removal in the General Malwarebytes' Anti-Malware Forum, you need to start a topic in the Malware Removal forum so a qualified helper can help you fix any malware related problems/infections you may have.

You can follow the directions below and someone will assist you with running scans on your system to see if they can detect anything.

Please print out, read and follow the Directions HERE, skipping any steps you are unable to complete. Then post a NEW topic here.

One of the expert helpers there will give you one-on-one assistance when one becomes available.

After posting your new post make sure under options that you select Track this topic and choose one of the Email options so that you're alerted when someone has replied to your post.

Alternatively, as a paying customer, you can contact the help desk at support@malwarebytes.org

Thank you very much.

Link to post
Share on other sites
RUSTYDOG

RUSTYDOG

Posted
Posted

Is there a way to shut off the blocking notification so MWB just does its blocking in the background?

Hello Rusty,

As we don't deal with malware removal in the General Malwarebytes' Anti-Malware Forum, you need to start a topic in the Malware Removal forum so a qualified helper can help you fix any malware related problems/infections you may have.

You can follow the directions below and someone will assist you with running scans on your system to see if they can detect anything.

Please print out, read and follow the Directions HERE, skipping any steps you are unable to complete. Then post a NEW topic here.

One of the expert helpers there will give you one-on-one assistance when one becomes available.

After posting your new post make sure under options that you select Track this topic and choose one of the Email options so that you're alerted when someone has replied to your post.

Alternatively, as a paying customer, you can contact the help desk at support@malwarebytes.org

Thank you very much.

Link to post
Share on other sites
Mainard

Mainard

Posted
Posted

Yep, deselecting the option to show balloon notification during website blocking will not prompt you that the website has been blocked by MBAM (but the block will still occur).

post-60618-0-26804000-1305149068.png

If you have any questions please feel free to ask. :)

Thank you!

Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
 Share
Go to topic listing

  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.