Author Topic: Malwarebytes Potential Malicious alert but no virus found by AIS  (Read 4634 times)

0 Members and 1 Guest are viewing this topic.

StelRV

  • Guest
Please I need help finding out if this is a virus. I've been getting alerts from Malwarebytes when online or when not online.

It usually alerts that Malwarebytes has stopped a potential malicious from going out, it gives a number (maybe an url ?) that starts with 192 and more numbers but I had no chance to read the complete number  I try to click the alert quick but then it's gone

I have scanned with Avast and nothing found

Scanned with Malwarebytes and nothing found

I try to read the logs I don't see anything in either programs logs, nor I see were to read recent alerts to find the complete info.

I have Windows 7/ 64, AIS, Malwarebytes paid version, windows defender and Microsoft malicious Tool (I don't miss with)

I'll try to scan with windows defender tonight.

my other laptop with Windows 7/32 AIS, Malwarebytes paid version also has given some kind of wear alert about some malicious or software.avast.com ( I posted this one before) now I cannot even update malwarebytes in that other computer
this might be some conflicting thin BTw AIS and MBAM but the new warnings got me worried

 I did updated to the new version today 5.1.889 and scanned again and nothing found but the alert was there again
Just hoping some help with all these alerts that have me feeling very insecure


« Last Edit: January 15, 2011, 04:36:23 AM by StelRV »

Offline mikaelrask

  • Avast Evangelist
  • Super Poster
  • ***
  • Posts: 1556
Re: Malwarebytes Potential Malicious alert but no virus found by AIS
« Reply #1 on: January 15, 2011, 08:01:05 AM »
hey. i think malwarebytes have block a bad url for you so no need to be worried there. as you menaced  192 it usually an ip address. so the site must have been hijacked or been known by malwarebytes as bad. I think you should be able to see in malwarebytes what it have blocked but i don't know how (using the free version my self so).

are you still having those pop ups from malwarebytes? or have they stopped?

a boot scan might be a good one to try if you still having those popups.

if the boot scan come out clean then a hijack this scan might be something.

http://download.cnet.com/Trend-Micro-HijackThis/3000-8022_4-10227353.html

let it scan and then post the result here.

that what i can give you as suggestion

good luck and let us know how it goes.
Windows 8.1 amd a10-5700 64 bit
12 GB ram 1 tb hard drive. Avast 18, MBAM

CharleyO

  • Guest
Re: Malwarebytes Potential Malicious alert but no virus found by AIS
« Reply #2 on: January 15, 2011, 09:32:46 AM »
***

Even with the free version of MBAM you can view the logs.

Start MBAM and the center tab on the GUI is labeled Logs. Click that tab.

You should now see the logs listed by date. Double click the log you want to view.


***

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37700
Re: Malwarebytes Potential Malicious alert but no virus found by AIS
« Reply #3 on: January 15, 2011, 10:14:48 AM »
MBAM pro have two types of log`s

mbam-log = Scan log
protection-log = log from the protection module (will show what IP adresse blocked)

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: Malwarebytes Potential Malicious alert but no virus found by AIS
« Reply #4 on: January 15, 2011, 04:28:37 PM »
192 indicates your router number

Might be worth checking your proxy settings

Go to Control Panel and select Internet Options
Select the Connections TAB
Select LAN settings button
Ensure there is no tick in the Proxy Server box
Select OK and restart Internet explorer


And for Firefox there are instructions on this page and you want the setting to be no proxy

StelRV

  • Guest
Re: Malwarebytes Potential Malicious alert but no virus found by AIS
« Reply #5 on: January 15, 2011, 07:45:12 PM »
I really appreciate all the quick reply, you guys are The Best!

I had done all the suggestion here Except the hijackthis I still need to do
checked internet options and the proxy box is not checked

I still reset it since sometimes I seen this helps some times
I've cleaning stuff manually and with CCleaner

A also reinstall the MBAM new version and at least I now can update in one PC.
even check/changed some router settings

I have not seen the popups again after all of this

Pondus: I still did no see protection/alert logs. I only see scanning logs

I still would like to find the warnings. I am glad for the alerts that block or prevent Malicious stuff if google gives me a wrong Site but I just worried when there is malicious stuff in my computer trying to access out Glad even if prevented I'd like to find it and kill it.

I will scan some more and hope it's all gone

I wanted to thank you again


Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: Malwarebytes Potential Malicious alert but no virus found by AIS
« Reply #6 on: January 15, 2011, 08:22:24 PM »
If you like I can have a quick check

Download OTL  to your Desktop
  • Double click on the icon to run it. Make sure all other windows are closed and to let it run uninterrupted.
  • Select All Users
  • Under the Custom Scan box paste this in
netsvcs
%SYSTEMDRIVE%\*.exe
/md5start
explorer.exe
winlogon.exe
Userinit.exe
svchost.exe
/md5stop
%systemroot%\*. /mp /s
c:\system volume information|_REGISTRY_MACHINE_SOFTWARE;true;true;true /FP
CREATERESTOREPOINT




  • Click the Quick Scan button. Do not change any settings unless otherwise told to do so. The scan wont take long.
    • When the scan completes, it will open two notepad windows. OTL.Txt and Extras.Txt. These are saved in the same location as OTL.
    • Attach both logs