hey i have malwarebytes pro and i keep getting a popup that malwarebtyes blocked a potentially malicious IP
IP: 77.78.237.69
Port: 62075
Process: svchost.exe
outgoing and incoming connections
and the thing is svchost is not running in taskmanager
is this a hack attempt?
avast, malwarebytes scan logs came back clean
IP 77.78.237.69 is listed at Spamhaus http://whatismyipaddress.com/blacklist-check
something you know ? http://whatismyipaddress.com/ip/77.78.237.69
if you suspect infection, then follow essexboys sticky guide at top in this forum section
Are you getting associated alerts by avast ?
As this svchost.exe making connections shows an underlying infection.
This needs further analysis by a malware removal specialist:
Go to this topic http://forum.avast.com/index.php?topic=53253.0 for information on Logs to assist in cleaning malware. Use the information about getting and using the tools and attach the logs here, not in the LOGS topic.
Agree a qualified removal expert should have a look.
On that particular IP:
This is what is going on on that AS: http://www.google.com/safebrowsing/diagnostic?site=AS:42560
Only two blacklisted urls there from Sarajewo: http://sitevet.com/db/asn/AS42560
Also see: http://www.urlvoid.com/ip/77.78.237.69 (cable address)
and http://urlquery.net/queued.php?id=21235530
polonus
no other popup when i unplugged my router
all scan came back clean
though rogue killer found 2 stuff by they were false positives