Page 1 of 2 12 LastLast
Results 1 to 15 of 21
  1. #1
    2 Star Lounger
    Join Date
    Mar 2005
    Posts
    110
    Thanks
    124
    Thanked 2 Times in 2 Posts

    Malicious Website?

    I have Win 7(34) Home Prem.Edit.,and nowadays almost every day,one or more times,Malwarebytes (Pro)signals with a pop-up,that it blocked a malicious website.It shows the Port,the IP address,Inbound and by SKYPE!
    I would like to consult the technically savvy readers of these events/complaints,what if anything they think of these pop-ups.They don't seem to be bothersome,and I do not do anything about the pop-up,which disappears after a few moments,but is Skype this dangerous?Meaning if I didn't have M.bytes to clean off these,would they cause harm?
    Thank you for your attention to this!

  2. #2
    Super Moderator
    Join Date
    Aug 2012
    Location
    Durham UK
    Posts
    6,604
    Thanks
    147
    Thanked 847 Times in 809 Posts
    Run this MS Fix it to reset the Hosts file to see if that gets rid of it.

    https://support.microsoft.com/en-gb/kb/972034

    Scroll down for the Win 7 Download button.

  3. The Following User Says Thank You to Sudo15 For This Useful Post:

    macko1944 (2016-04-24)

  4. #3
    3 Star Lounger
    Join Date
    Dec 2009
    Location
    Hartford, WI, USA
    Posts
    369
    Thanks
    147
    Thanked 62 Times in 37 Posts
    Easiest solution seems to be to just completely uninstall Skype. Or?
    Eike J Heinze
    What I am about
    SE Wisconsin

  5. The Following User Says Thank You to eikelein For This Useful Post:

    macko1944 (2016-04-24)

  6. #4
    2 Star Lounger
    Join Date
    Mar 2005
    Posts
    110
    Thanks
    124
    Thanked 2 Times in 2 Posts
    Actually the Malwarebyte notice is stating that the site IS BLOCKED.I noted that the IP addresses of these senders are always DIFFERENT.
    So,it doesn't really bother me,I just asked the experts if they would know what this might be about.To delete Skype is not an option,because I am in touch with friends all over the world just about on Skype.And it is still free(!)video phone!
    But I gratefully acknowledge both of your answers!

  7. #5
    Super Moderator
    Join Date
    Aug 2012
    Location
    Durham UK
    Posts
    6,604
    Thanks
    147
    Thanked 847 Times in 809 Posts
    You could disable Skype until you want to use it - probably in the Startup menu or Services in msconfig.

    Can't check on mine now as I uninstalled it but something of it must be left as I occasionally get Windows Updates for it.

  8. The Following User Says Thank You to Sudo15 For This Useful Post:

    macko1944 (2016-04-25)

  9. #6
    Super Moderator satrow's Avatar
    Join Date
    Dec 2009
    Location
    Cardiff, UK
    Posts
    4,484
    Thanks
    283
    Thanked 572 Times in 476 Posts
    Check the site on the hpHosts database, ask on their forum or give us the site/IPs to check for you.

    hpHosts is part of Malwarebytes.org and the database is used as the basis for the MBAM blocklist.

  10. The Following User Says Thank You to satrow For This Useful Post:

    macko1944 (2016-04-25)

  11. #7
    Super Moderator Rick Corbett's Avatar
    Join Date
    Dec 2009
    Location
    South Glos., UK
    Posts
    2,137
    Thanks
    101
    Thanked 575 Times in 460 Posts
    Skype starts automatically using the registry. You can change this behaviour using MSCONFIG (or something like Nir Sofer's WhatInStartup).

    To use MSCONFIG:
    1. Click on the Start button.
    2. Type msconfig in the Search programs and files search box then press Return.
    3. Double-click on msconfig.exe when it appears in the search results.
    4. When the System Configuration dialog appears, click on the Startup tab.
    5. Remove the tick from the checkbox alongside Skype, click on the OK button then restart your PC.

    From now on you will need to start Skype manually using Skype's desktop shortcut or Start menu entry.

    Hope this helps...

  12. The Following User Says Thank You to Rick Corbett For This Useful Post:

    macko1944 (2016-04-25)

  13. #8
    WS Lounge VIP Coochin's Avatar
    Join Date
    Jun 2014
    Location
    Queensland, Australia
    Posts
    2,150
    Thanks
    31
    Thanked 302 Times in 263 Posts
    Actually there is a setting in Skype you can uncheck to stop Skype loading when when Windows starts up.

    In Skype click "Options" in the main menu. In the "General" tab uncheck the "Start Skype when Windows starts" checkbox then click "Save".

    Next time you start Windows Skype should not be active. You can still use Skype but will need to launch it manually by double-clicking on the Skype shortcut on your Desktop.
    Computer Consultant/Technician since 1998 (first PC was Atari 1040STE in 1988).
    Most common computing error is EBKAC: Error Between Keyboard And Chairback
    AMD FX8120 (8-core @ 3.1GHz) CPU, Gigabyte GA-990FXA-D3 motherboard, 8GB (2x4GB) DDR3 1866MHz RAM, ATI-AMD Radeon HD6770 PCI-E VGA, 480GB Kingston SSD, 2TB Seagate SATA3.0 HDD, ASUS DVD/RW.

  14. The Following User Says Thank You to Coochin For This Useful Post:

    macko1944 (2016-04-25)

  15. #9
    Administrator
    Join Date
    Jun 2010
    Location
    Portugal
    Posts
    12,519
    Thanks
    152
    Thanked 1,397 Times in 1,220 Posts
    I use Skype and I get some of those warnings. Personally, I don't really care about the warnings.

    I also think these warnings about URLs are not really very reliable, regardless of who builds the lists. Many times I end up turning off these website protections, which sometimes prevent you from accessing websites that are perfectly ok.
    Rui
    -------
    R4

  16. The Following User Says Thank You to ruirib For This Useful Post:

    macko1944 (2016-04-25)

  17. #10
    2 Star Lounger
    Join Date
    Mar 2005
    Posts
    110
    Thanks
    124
    Thanked 2 Times in 2 Posts
    The IP address seems to be a new one every time.So they are likely to want to avoid detection?

  18. #11
    2 Star Lounger
    Join Date
    Mar 2005
    Posts
    110
    Thanks
    124
    Thanked 2 Times in 2 Posts
    Yes,this is very true and I am aware of it.But if I did that,my contacts would not be able to call me,for it would show me either away or not online.so this would not be a practical solution.But,since as i mentioned,Mwbtes blocks it,it doesn't seem to disturb me(that I know of of course).

  19. #12
    2 Star Lounger
    Join Date
    Mar 2005
    Posts
    110
    Thanks
    124
    Thanked 2 Times in 2 Posts
    I managed to catch one of these sites' data before it disappeared:
    IP address: 121 54 58 244
    Port: 63251
    Inbound,etc.also phone,Skype,Skype exe.etc.
    I don't know if this is helpful?
    Thank you!

  20. #13
    Super Moderator
    Join Date
    Aug 2012
    Location
    Durham UK
    Posts
    6,604
    Thanks
    147
    Thanked 847 Times in 809 Posts
    Someone else has complained of this address probing http://whatismyipaddress.com/ip/121.54.58.244

    It may be worth reporting this to your ISP to blacklist it as you will see others have by clicking on the Black List button.
    Last edited by Sudo15; 2016-04-26 at 17:48.

  21. The Following User Says Thank You to Sudo15 For This Useful Post:

    macko1944 (2016-04-26)

  22. #14
    Administrator
    Join Date
    Jun 2010
    Location
    Portugal
    Posts
    12,519
    Thanks
    152
    Thanked 1,397 Times in 1,220 Posts
    It matters to know why Skype connects to many IPs. I recommend two articles:

    https://community.skype.com/t5/iOS-a...s/td-p/4112578

    https://support.skype.com/en/faq/FA1...communications

    Also, about malwarebytes blocking connections:

    https://support.malwarebytes.org/cus...ype-?b_id=6438


    As I said before, I would not worry about this behavior. Plus Malwarebytes is blocking outgoing connections, not inbound connections. It's just the way Skype works and you either accept it or dump Skype. No harm results from this Skype behavior.
    Rui
    -------
    R4

  23. The Following User Says Thank You to ruirib For This Useful Post:

    macko1944 (2016-04-26)

  24. #15
    Super Moderator satrow's Avatar
    Join Date
    Dec 2009
    Location
    Cardiff, UK
    Posts
    4,484
    Thanks
    283
    Thanked 572 Times in 476 Posts
    The problem with that particular connection (121 54 58 244: 63251 Inbound) is that the IP is also frequently being used to send spam:

    It's also listed on several other blocklists/honeypots, it might be a proxy server or an infected machine, I'd keep it blocked.

  25. The Following User Says Thank You to satrow For This Useful Post:

    macko1944 (2016-04-26)

Page 1 of 2 12 LastLast

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •