Jump to content

IP Address Blocking on 208.73.210.125


Recommended Posts

I would be grateful if you could please provide some assistance.

I have been having repeated pop-up alerts from MWB regarding a malicious IP address – I have searched through all of the various messages and threads on this forum, and have carried out all of the suggestions and recommendations that have been made – however, none of these have resolved the problem.

MalwareBytes pop up appears from system tray on a round a 5-minute basis – this happens either when I am simply surfing the net, or even if the machine is not being used for anything.

The following message is shown

“Malwarebytes Successfully blocked access to a potentially malicious website

208.73.210.125

Type Outgoing”

I have checked out the IP address that is shown, and it seems to be the home for some fairly nasty stuff, so really don’t want my machine to keep connecting to this site.

The details are as follows:

I am running Windows XP, Windows Firewall. All security updates up to date.

I am not running Skype or any other P2P applications.

I have AVG free installed. I have run a full scan using AVG, and no issues were found.

I am using MWB Free, fully updated. I have run a full scan, and nothing found. I have done full reboots and re-run.

I have also downloaded a copy of SuperAntiSpyware, ran a full scan, and nothing found.

The following MWB log files are created (there are lots of these)

2012/03/19 21:41:56 GMT (my ID) Administrator IP-BLOCK 208.73.210.125 (Type: outgoing)

2012/03/19 21:42:09 GMT (my ID) Administrator IP-BLOCK 208.73.210.125 (Type: outgoing)

2012/03/19 21:42:12 GMT (my ID) Administrator IP-BLOCK 208.73.210.125 (Type: outgoing)

2012/03/19 21:42:18 GMT (my ID) Administrator IP-BLOCK 208.73.210.125 (Type: outgoing)

This issue has cropped up for the last week. No significant event happened that should have caused it to happen.

I downloaded the utility TCPView and ran it on my machine. When an incident occurred, and I checked that log file, the following entry was shown

avgnsx.exe 3224 TCP (my IP) 4781 208.73.210.125 80 SYN_SENT

This should cover most of the info that has been requested for similar logs. I don’t know whether to just ignore this message, or what it could be on my machine that could be causing this.

Any help, much appreciated.

Link to post
Share on other sites

Hello and welcome to the Malwarebytes support forum. Thank you for choosing Malwarebytes' Anti-Malware as your malware security solution, my name is Oscar Rubio and I'll be assisting you today.

Please click on the link below for more information on our IP Protection Module.

http://forums.malwar...00

If you believe your system may be infected, you have the following options.

Sorry to hear you are infected.

We cannot work on malware removal in this section of the forums, so please read below for assistance with cleaning your system.

IMPORTANT: Please do NOT use any temporary file cleaners unless instructed to do so - they can cause data loss, making it hard to recover your system.

PLEASE CHOOSE ONE OF THE FOLLOWING 3 OPTIONS:

OPTION 1: Free, one-on-one, expert assistance in the Malware Removal Forum.

OPTION 2: For paid users of MBAM PRO, free, one-on-one, expert assistance from MBAM support.

OPTION 3: Fee-based, one-on-one, expert assistance from Premium Support.

OPTION 1:

Please print out, read and carefully follow the instructions in the "I'm Infected - What Do I Do Now?" article.

If the infection has so crippled the computer that you cannot complete some or all of the steps, then just do the best you can, as described below.

--->It looks as if you already have a duplicate topic created in the Malware Removal Forum.

--->Please stay with THAT topic for further assistance -- here is the link to your other topic.

Please COPY/PASTE the requested logs into your post, rather than attaching them.

Under options, please be sure to select "track this topic" and "immediate email notification", so you'll know when a helper responds.

An authorized, trained malware expert will provide free, one-on-one assistance as soon as one becomes available.

Please be patient - it may be 48 hours or more before a helper can assist you, especially when the forum is very busy.

Please do NOT "bump" your topic or reply back to it for at least 48 hours.

Doing so may cause your topic to be overlooked, as it will appear that you are already being helped.

OPTION 2:

If you are a paid user of MBAM PRO and prefer expert assistance via email, please send an email to support@malwarebytes.org, or contact the help desk here.

OPTION 3:

If you would like to use the Malwarebytes Premium Services (comprehensive solutions to all your computer support needs – from installation and set-up to troubleshooting and tune-ups), please go to our Premium Support site here.

Please be patient – someone will assist you as soon as possible.

Thank you very much

Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.