Caylin Posted October 15, 2011 ID:486060 Share Posted October 15, 2011 Hi there. A few days ago, I was infected with a rogue antivirus, and used Malwarebytes to get rid of it. Ever since then, my computer has been running fine except about every ten to fifteen minutes Malwarebytes blocks an outgoing connection from svchost.exe to several different ISPs. Reruns of the scan don't find anything new, neither does Avast with the sensitivity turned all the way up, or Spybot S&D.Thank you in advance.Example log:02:24:15 Meagan IP-BLOCK 212.36.9.52 (Type: outgoing, Port: 50437, Process: svchost.exe)02:24:15 Meagan IP-BLOCK 221.132.34.163 (Type: outgoing, Port: 50438, Process: svchost.exe)02:34:19 Meagan IP-BLOCK 195.3.145.112 (Type: outgoing, Port: 51209, Process: svchost.exe)02:44:16 Meagan IP-BLOCK 212.36.9.52 (Type: outgoing, Port: 51477, Process: svchost.exe)02:44:16 Meagan IP-BLOCK 221.132.34.163 (Type: outgoing, Port: 51478, Process: svchost.exe)02:54:12 Meagan IP-BLOCK 212.36.9.52 (Type: outgoing, Port: 51618, Process: svchost.exe)02:54:12 Meagan IP-BLOCK 188.95.52.162 (Type: outgoing, Port: 51619, Process: svchost.exe)03:04:17 Meagan IP-BLOCK 195.3.145.111 (Type: outgoing, Port: 51799, Process: svchost.exe)03:14:19 Meagan IP-BLOCK 212.36.9.52 (Type: outgoing, Port: 51875, Process: svchost.exe)DDS.txtAttach.txt Link to post Share on other sites More sharing options...
Staff screen317 Posted October 18, 2011 Staff ID:486866 Share Posted October 18, 2011 Hi and welcome to Malwarebytes. In the future, please post all logs directly into your reply instead of attaching them unless otherwise indicated. With that said, please update MBAM, run a Quick Scan, and post its log. Next, run DDS again and post DDS.txt directly in your reply. Link to post Share on other sites More sharing options...
Staff screen317 Posted October 31, 2011 Staff ID:490577 Share Posted October 31, 2011 Are you still with us? This topic will be closed in a few days if we do not hear back from you. Link to post Share on other sites More sharing options...
Staff screen317 Posted November 5, 2011 Staff ID:492077 Share Posted November 5, 2011 Due to the lack of feedback this topic is closed to prevent others from posting here. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread. Other members who need assistance please start your own topic in a new thread. Thanks! Link to post Share on other sites More sharing options...
Recommended Posts