Malwarebytes

View previous topic View next topic Go down

Malwarebytes

Post by Nazzgull on Sun Mar 28, 2010 3:58 pm

Since I have installed the full version, began to appear a small pop-up windows with blocked IP addresses. I'm interested in how to discover which software from my computer tries to access that address. It is impossible that i access bad IP while surfing this forum, anyway I get a message that has blocked the xxx.xxx.xxx.xxx IP. This is my log file.

00:01:09 (null) MESSAGE Protection started successfully
00:01:38 Computer MESSAGE IP Protection started successfully
00:01:56 Computer IP-BLOCK 89.28.47.12
00:01:59 Computer IP-BLOCK 89.28.47.12
00:02:03 Computer IP-BLOCK 89.28.47.12
00:25:39 Computer IP-BLOCK 89.28.47.12
00:25:41 Computer IP-BLOCK 89.28.47.12
00:25:45 Computer IP-BLOCK 89.28.47.12
00:01:13 (null) MESSAGE Protection started successfully
00:02:00 Computer MESSAGE IP Protection started successfully
00:15:19 Computer IP-BLOCK 89.28.47.12
00:15:21 Computer IP-BLOCK 89.28.47.12
00:15:25 Computer IP-BLOCK 89.28.47.12
02:05:13 Computer IP-BLOCK 89.28.47.12
02:05:15 Computer IP-BLOCK 89.28.47.12
02:05:19 Computer IP-BLOCK 89.28.47.12
13:04:33 (null) MESSAGE Protection started successfully
13:05:17 Computer MESSAGE IP Protection started successfully
16:51:34 Computer IP-BLOCK 79.135.152.5
16:51:37 Computer IP-BLOCK 79.135.152.5
16:51:45 Computer MESSAGE Added 79.135.152.5 to ignore list
16:51:46 Computer MESSAGE IP Protection stopped
16:51:54 Computer MESSAGE IP Protection started successfully
19:27:59 Computer IP-BLOCK 85.159.233.230
19:28:02 Computer IP-BLOCK 85.159.233.230
19:28:08 Computer IP-BLOCK 85.159.233.230
19:28:17 Computer MESSAGE Added 85.159.233.230 to ignore list
19:28:17 Computer MESSAGE IP Protection stopped
19:28:30 Computer MESSAGE IP Protection started successfully
19:44:39 Computer MESSAGE IP Protection stopped

And log from yesterday :
10:56:13 Computer MESSAGE Protection started successfully
10:56:30 Computer MESSAGE IP Protection started successfully
11:22:52 Computer IP-BLOCK 80.233.222.237
11:22:54 Computer IP-BLOCK 80.233.222.237
11:22:58 Computer IP-BLOCK 80.233.222.237
11:45:41 Computer IP-BLOCK 200.63.44.100
11:45:43 Computer IP-BLOCK 200.63.44.100
11:45:47 Computer IP-BLOCK 200.63.44.100
11:46:31 Computer IP-BLOCK 200.63.44.100
11:46:33 Computer IP-BLOCK 200.63.44.100
11:46:37 Computer IP-BLOCK 200.63.44.100
11:46:41 Computer MESSAGE IP Protection stopped
11:46:47 Computer MESSAGE IP Protection started successfully
11:47:10 Computer IP-BLOCK 200.63.44.100
11:47:12 Computer IP-BLOCK 200.63.44.100
11:47:32 Computer IP-BLOCK 200.63.44.100
11:47:34 Computer IP-BLOCK 200.63.44.100
11:47:38 Computer IP-BLOCK 200.63.44.100
11:57:58 Computer IP-BLOCK 200.63.44.100
11:58:00 Computer IP-BLOCK 200.63.44.100
11:58:04 Computer IP-BLOCK 200.63.44.100
11:59:55 Computer IP-BLOCK 200.63.44.100
11:59:57 Computer IP-BLOCK 200.63.44.100
12:00:01 Computer IP-BLOCK 200.63.44.100
12:00:39 Computer MESSAGE Added 200.63.44.100 to ignore list
12:00:40 Computer MESSAGE IP Protection stopped
12:00:44 Computer MESSAGE IP Protection started successfully
12:08:43 Computer MESSAGE IP Protection stopped
12:10:15 Computer MESSAGE Database updated successfully
12:10:20 Computer MESSAGE IP Protection started successfully
14:59:44 Computer IP-BLOCK 89.28.47.12
14:59:46 Computer IP-BLOCK 89.28.47.12
14:59:50 Computer IP-BLOCK 89.28.47.12




Nazzgull
Top Dog
Top Dog

Posts Posts : 2343
Joined Joined : 2008-08-03
Gender Gender : Male
OS OS : Windows 7 Professional
Points Points : 40445
# Likes # Likes : 1

View user profile

Back to top Go down

Re: Malwarebytes

Post by Belahzur on Sun Mar 28, 2010 4:45 pm

Hi Nazz.

So far I can count 43 malicious sites at 200.63.44.100:
http://hosts-file.net/?s=200.63.44.&view=matches

The other IP's don't show anything on hphosts. Ads could possibly be setting them off, but you can add the IP's to the ignore list, or switch of the IPBL.


@RealBelahzur - [Prework] - Please PM me if I fail to respond within 24hrs.


Belahzur
Administrator
Administrator

Posts Posts : 34916
Joined Joined : 2008-08-03
Gender Gender : Male
OS OS : XP SP3 Media Centre
Points Points : 245059
# Likes # Likes : 1

View user profile

Back to top Go down

Re: Malwarebytes

Post by Nazzgull on Sun Mar 28, 2010 5:01 pm

Hi,
I did, i add to Ignore IP list, but i don't get it why pop-up came when i enter Geek Police Sad tearing Also with Facebook. 85.159.233.230 pop-up when i login into Facebook. Strange, i scan computer about 10 times with MBAM, HijackThis, DDS, it's clear, i check all processes and services also and i don't have anything which contain malware.



Nazzgull
Top Dog
Top Dog

Posts Posts : 2343
Joined Joined : 2008-08-03
Gender Gender : Male
OS OS : Windows 7 Professional
Points Points : 40445
# Likes # Likes : 1

View user profile

Back to top Go down

Re: Malwarebytes

Post by Belahzur on Sun Mar 28, 2010 5:09 pm

It's not your machine that's infected, it's websites that are hosting exploits that get blocked, ads usually set the filter off.


@RealBelahzur - [Prework] - Please PM me if I fail to respond within 24hrs.


Belahzur
Administrator
Administrator

Posts Posts : 34916
Joined Joined : 2008-08-03
Gender Gender : Male
OS OS : XP SP3 Media Centre
Points Points : 245059
# Likes # Likes : 1

View user profile

Back to top Go down

Re: Malwarebytes

Post by Nazzgull on Sun Mar 28, 2010 6:41 pm

Yeah, i know that. So it's probably some thing on FB or some ad. Thanks.



Nazzgull
Top Dog
Top Dog

Posts Posts : 2343
Joined Joined : 2008-08-03
Gender Gender : Male
OS OS : Windows 7 Professional
Points Points : 40445
# Likes # Likes : 1

View user profile

Back to top Go down

View previous topic View next topic Back to top

- Similar topics

 
Permissions in this forum:
You cannot reply to topics in this forum