Windows 7: Malwarebytes Blocking IP address

The rootkit was found by Malwarebytes, but it was strange indeed. This root kit was attempting to reach a malicious site, which Malwarebytes Pro was blocking every 15 minutes, which I could see from the Mbam log. After not finding the rootkit for several hours, it suddenly, after another 15 minute, found the rootkit, which it removed. Since that time the IP block has not occurred.
I opened a case on Mbam, and they did a very thorough job of helping, including scanning logs of my system, and suggesting various pieces of software to monitor my system, and helping me to use Combofix.
I can only say the buying Mbam Pro was really worth it.
The help at Mbam also suggested amending the host file. Take a look at: http://www.funkytoad.com/content/view/13/31/

Thanks for posting back with that info!

I find it interesting they suggest using the HOST file for additional protection with the Pro version.
I wondered about that...if it's worth it to use MBAM Pro Website blocking AND HOST file "exclusions".
I wasn't sure if it's overkill and unnecessary redundant protection (paranoia).

If they suggest using it...well, they know better than me!
I agree, MBAM Pro is a a great value and well worth the cost.

Great to hear you are cleaned up and the problem is solved.

What's interesting is that there now exist black lists and white lists! I used to use Comodo Firewall, but they were set up so that you couldn't change the white lists. As of this moment I'm using Windows 7 Firewall Control. It's the free version, but allows you to control outbound and inbound traffic. I suspect that if Mbam hadn't blocked that malicious site then the firewall would have popped up asking for permission.

I just use the built in Windows firewall, and a router firewall.

If you haven't heard of it, another Product I use and like is WinPatrol 2013

I use the free version, and it works well for me - no issues here...

This might be of some interest.

All three of my grown sons say "Dad, get yourself an Apple".

Why pay that kind of money just for more problems. Apple systems have problems just like Windows. In your case it wasn't Windows but a infection that got in. That happens to all operating system.

Tell them it would make a good Christmas or Birthday gift from them and that will shut them up.

Jim

Your Hosts File is very important to use, as it has abilities to block malicious programs!
See the explanation here: The Hosts File and what it can do for you

Thank you Jacee for the information on Host File. Very informative.