ram1009 Posted September 13, 2011 ID:475533 Share Posted September 13, 2011 A few days ago I began getting a tray bubble alert on 109.235.49.40. It displayed as an "outgoing" alert. I'm not 100% sure what the "outgoing" part of the alert means. Intuitively it means (to me anyway) that my computer was prevented from contacting that IP address as opposed to visa versa. This alert repeatedly appeared every few minutes no matter what I was doing. I finally reported this to support and was directed to this forum and after following some suggestions discovered that the IP address is for the "msn.com" home page. Something is definitely wrong here as I was still able to go to the msn.com homepage without being blocked. If that page really were malicious wouldn't half the world be reporting this? I have put the address on the ignore list but I'm not sure that's what I should have done. Any suggestions? Link to post Share on other sites More sharing options...
MysteryFCM Posted September 13, 2011 ID:475535 Share Posted September 13, 2011 That IP does not belong to MSN, nor anything MSN loads, and is not an F/P. Link to post Share on other sites More sharing options...
ram1009 Posted September 13, 2011 Author ID:475688 Share Posted September 13, 2011 That IP does not belong to MSN, nor anything MSN loads, and is not an F/P.Well, when I type the IP address into my URL window my browser takes me to "msn.com". If that's not the procedure for determining what site the IP address is for then what is? As I said, I have added this IP address to my ignore list for now but if it is a malicious website I need to remove it from the list. If I do that it will no doubt resume the previous behavior. Am I expected to just ignore the repeated warnings? Link to post Share on other sites More sharing options...
MysteryFCM Posted September 13, 2011 ID:475838 Share Posted September 13, 2011 If typing the IP directs you to MSN, I'd recommend getting your machine checked;http://forums.malwarebytes.org/index.php?showtopic=9573 Link to post Share on other sites More sharing options...
ram1009 Posted September 13, 2011 Author ID:475862 Share Posted September 13, 2011 If typing the IP directs you to MSN, I'd recommend getting your machine checked;http://forums.malwarebytes.org/index.php?showtopic=9573Checked by whom and for what? I'm the OEM. Link to post Share on other sites More sharing options...
ram1009 Posted September 14, 2011 Author ID:475919 Share Posted September 14, 2011 Turns out I was mistaken about the home page. Here's what happened. I happened to be at the msn.com home page when I entered the IP address in question. All that happened is a refresh of the page. The same thing happens on any page. The bottom line is I am unable to determine what the site is. What concerns me the most is that the balloon that appears says the blockage is "outgoing". Doesn't that mean there's a piece of malwear in my system trying to contact the site? If so why doesn't the program find it when it scans every night? Link to post Share on other sites More sharing options...
MysteryFCM Posted September 14, 2011 ID:475921 Share Posted September 14, 2011 It could be the specific infection isn't detected yet, there's millions of them out there, and new ones created every day. Please follow the instructions in the thread I referenced, and someone will assist you in identifying the offending process. Link to post Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now