(This is just one tiny example of the huge issues ahead of all of us as the number of internet-connected devices, all containing software that do things that haven't really been disclosed to us, come back to bite. Before submitting your reply, be sure to enable "Notify me of replies" like so:Ĭlick "Reveal Hidden Contents" below for details on how to attach a file:
Please attach the file in your next reply. Upon completion, click a file named mbst-grab-results.zip will be saved to your Desktop. You will be presented with a page stating, " Get Started!"Ĭlick the Advanced tab on the left columnĪ progress bar will appear and the program will proceed with getting logs from your computer Place a checkmark next to Accept License Agreement and click Next You may be prompted by User Account Control (UAC) to allow changes to be made to your computer. Once the file is downloaded, open your Downloads folder/location of the downloaded fileĭouble-click mb-support-X.X.X.XXXX.exe to run the program NOTE: The tools and the information obtained is safe and not harmful to your privacy or your computer, please allow the programs to run if blocked by your system. If you haven’t already done so, please run the Malwarebytes Support Tool and then attach the logs in your next reply: My suggestion is to either stop using it, or re-define to something you have control over (i.e., one of your own servers, or a loopback/non-existent ip address.) If anyone is using Windows 10 Firewall Control by Sphinx-software, which does enhance the ability to control what things have access to internet/local net, apparently the software itself has a 'phone-home' portion, and home is no longer what it was.
Then, even later, starts coming up with a different IP on every inquiry - such as 52.219.32.114, which appears to be Amazon/AWS in Singapore and there's a website up that mentions Vietnam, but nothing about Sphinx-software products. So, maybe this is a real hack/takeover or something I'm thinking. When I got around to asking nslookup about, I got back a 127.0.x.x address (= LAN no internet server) MBAM reporting trojan IP address 198.38.82.127 (shared hosting/Mocha hdq CA/USA) Starting sometime >24hrs ago, Malwarebytes popping up blocking connections being made by software I've used for some years - Windows 10 Firewall Control - attempting to contact the developer's website.
0 kommentar(er)
