Malwarebytes Blocking IP address

The rootkit was found by Malwarebytes, but it was strange indeed. This root kit was attempting to reach a malicious site, which Malwarebytes Pro was blocking every 15 minutes, which I could see from the Mbam log. After not finding the rootkit for several hours, it suddenly, after another 15 minute, found the rootkit, which it removed. Since that time the IP block has not occurred.
I opened a case on Mbam, and they did a very thorough job of helping, including scanning logs of my system, and suggesting various pieces of software to monitor my system, and helping me to use Combofix.
I can only say the buying Mbam Pro was really worth it.
The help at Mbam also suggested amending the host file. Take a look at: http://www.funkytoad.com/content/view/13/31/

Thanks for posting back with that info!

I find it interesting they suggest using the HOST file for additional protection with the Pro version.
I wondered about that...if it's worth it to use MBAM Pro Website blocking AND HOST file "exclusions".
I wasn't sure if it's overkill and unnecessary redundant protection (paranoia).

If they suggest using it...well, they know better than me!
I agree, MBAM Pro is a a great value and well worth the cost.

Great to hear you are cleaned up and the problem is solved.

What's interesting is that there now exist black lists and white lists! I used to use Comodo Firewall, but they were set up so that you couldn't change the white lists. As of this moment I'm using Windows 7 Firewall Control. It's the free version, but allows you to control outbound and inbound traffic. I suspect that if Mbam hadn't blocked that malicious site then the firewall would have popped up asking for permission.

I just use the built in Windows firewall, and a router firewall.

If you haven't heard of it, another Product I use and like is WinPatrol 2013

I use the free version, and it works well for me - no issues here...

All three of my grown sons say "Dad, get yourself an Apple".