Jump to content

New Moldovan malware using svchost.exe?


Recommended Posts

MBAM has been giving me notifications steadily all night that it was blocking an outgoing connection by svchost.exe to 89.28.97.15:54512. I decided to look it up and found that it was an ISP in Moldova, so now my spidey sense is tingling. I've not been able to isolate the svchost instance yet but I'd be curious to know if I'm the only one getting blocks on this particular address/port. Thx.

Link to post
Share on other sites

Hello and Welcome to Malwarebytes

Being that you are probably infected or if you want to make sure your not infected, feel free to follow the instructions below to receive free, one-on-one expert assistance in checking your system and clearing out any infections and correcting any damage done by the malware.

Please see the following pinned topic which has information on how to get help with this: Available Assistance for Possibly Infected Computers

Thank you

Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.