Possibly Infected

[RobbyV]

Yeah, so I'm not entirely sure if I'm infected. Based on other posts I've seen over the past few days on here, I'm thinking I may be.

What's going on is on random sites (even the Facebook login page before I even type anything in), I will get a blocked outgoing IP address warning from Malwarebytes. The thing is, it doesn't happen every time. Sometimes I'll go several days without one of those warnings. I have done full and quick scans on both the normal Windows mode and in Safe Mode as well. Neither scan picks up anything no matter if it's in Normal or Safe Mode. I have also ran Spybot and Microsoft Security Essentials (I keep those two programs and MwB updated regularly).

One more thing is that I have noticed NOTHING abnormal other than the yellow balloon warning popping up. My laptop isn't randomly running, it never does it on the desktop. It hasn't changed my desktop or anything on my Internet browser. My computer is also not running slower either. The ONLY thing out of the ordinary is the pop-up warnings.

Is it possible that I'm not actually infected and the issue is just that one of my games or other programs is just trying to get out to the internet (like normal) and MwB is just being extra careful? It seems like everyone else who comes in here with an issue of the same kind, has something else wrong going on to their computer as well.

[daledoc1]

Hello, RobbyV:

IP blocking can occur as a result of certain legitimate programs such as Sype, and it can happen when MBAM is doing its job by preventing bad content from websites from infecting your computer.

But it can also be the result of infection on your system, especially if the IP blocks are "outgoing" and they occur when no browsers are open.

Please have a look at the FAQ - Section G for information about the IP blocking module.

After doing so, if you think these IP blocks are false positives, then please start a new thread here.

To have Malwarebytes' Anti-Malware ignore an individual IP address, visit the website in question to incur a block. When you see the tray notification that Malwarebytes' Anti-Malware has blocked the address, right-click on the red M tray icon and use the Add to Ignore List menu to have the IP ignored. You should then be able to refresh your web browser and visit the page. If not, then you may need to close and then open your browser and try again or clear your browser's cache to be able to see the page.

If at any time you decide to remove the selected IP from the Ignore List, you can do so by opening Malwarebytes' Anti-Malware and clicking on the Ignore List tab.

If a program you use is being detected as a threat by the protection module, you can use the Add button on the Ignore List tab to have Malwarebytes' Anti-Malware ignore that application.

------------------------------------

OTOH, if you think your system might be infected -- based on the IP blocks or other suspicious computer behavior -- then please do the following, as we do not work on malware removal in this part of the forum.

1. First, please go to THIS PAGE, print out, read and follow as many instructions as you can, skipping any you are unable to complete.

2. Then, please describe your computer's symptoms as best you can and post the requested MBAM and DDS logs by starting a new thread at the Malware Removal-HJT forum . Please post the results of the requested scans directly into your post, using copy/paste, rather than attaching them.

One of the authorized, trained experts will then assist you as soon as possible for free, one-on-one malware detection and removal.

When you post, please be sure to select Track This Topic & choose one of the email options, so that you will be notified when someone responds.

Important: Please be patient and allow at least 48 hours before bumping your thread -- otherwise it may appear to the experts that you are already being helped

(The "0" reply count is the easiest way for the experts to spot your thread as still needing help.)

Other Support Options:

--- Alternatively, if you are a paying customer using MBAM PRO, you may wish instead to start a free support ticket by contacting support at: support@malwarebytes.org; or

--- Premium, fee-based support options are available here.

Thanks,

daledoc1

PS: Please use the button instead of other ones when you reply here and at the other forums, so that it will be easier to read.