Sign in to follow this  
Followers 0
eltopo71

New Moldovan malware using svchost.exe?

2 posts in this topic

MBAM has been giving me notifications steadily all night that it was blocking an outgoing connection by svchost.exe to 89.28.97.15:54512. I decided to look it up and found that it was an ISP in Moldova, so now my spidey sense is tingling. I've not been able to isolate the svchost instance yet but I'd be curious to know if I'm the only one getting blocks on this particular address/port. Thx.

Share this post


Link to post
Share on other sites

Hello and Welcome to Malwarebytes

Being that you are probably infected or if you want to make sure your not infected, feel free to follow the instructions below to receive free, one-on-one expert assistance in checking your system and clearing out any infections and correcting any damage done by the malware.

Please see the following pinned topic which has information on how to get help with this: Available Assistance for Possibly Infected Computers

Thank you

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!


Register a new account

Sign in

Already have an account? Sign in here.


Sign In Now
Sign in to follow this  
Followers 0

  • Recently Browsing   0 members

    No registered users viewing this page.