UkManiak 10 Posted December 9, 2011 I love Malwarebytes, great program. But lately, I have seen it block a malicious website that is being brought upon by an Arma2OA.exe file. The little bubble pops up and says so usually when I am backing out of the Multiplayer server menu. Does anyone have the faintest idea of why this is happening? I uninstalled the game (very upset), but I care for my computer more. I downloaded the 1.09 patch from arma2.com as well as the gcam mod for Arma2 OA. Any help would be appreciated thank you. Share this post Link to post Share on other sites
Dwarden 1125 Posted December 9, 2011 can you provide screenshot / log from MBAM about the issue ? also is it using the latest definitions ? Share this post Link to post Share on other sites
UkManiak 10 Posted December 9, 2011 This is one 08:47:22 Owner MESSAGE Protection started successfully 08:47:25 Owner MESSAGE IP Protection started successfully 19:41:30 Owner IP-BLOCK 67.214.176.98 (Type: outgoing, Port: 53561, Process: arma2oa.exe) 19:41:30 Owner IP-BLOCK 82.80.245.98 (Type: outgoing, Port: 53561, Process: arma2oa.exe) 19:42:11 Owner IP-BLOCK 82.80.245.98 (Type: outgoing, Port: 53561, Process: arma2oa.exe) 19:42:11 Owner IP-BLOCK 67.214.176.98 (Type: outgoing, Port: 53561, Process: arma2oa.exe) 21:02:09 Owner IP-BLOCK 82.80.245.98 (Type: outgoing, Port: 61934, Process: arma2oa.exe) 21:02:33 Owner IP-BLOCK 67.214.176.98 (Type: outgoing, Port: 61934, Process: arma2oa.exe) 21:09:00 Owner MESSAGE IP Protection stopped 21:09:01 Owner MESSAGE Database updated successfully 21:09:02 Owner MESSAGE IP Protection started successfully Heres two 08:02:16 Owner MESSAGE Protection started successfully 08:02:20 Owner MESSAGE IP Protection started successfully 14:03:01 Owner MESSAGE IP Protection stopped 14:03:02 Owner MESSAGE Database updated successfully 14:03:03 Owner MESSAGE IP Protection started successfully 14:58:42 Owner IP-BLOCK 82.80.245.98 (Type: outgoing, Port: 58904, Process: arma2oa.exe) 14:58:50 Owner IP-BLOCK 67.214.176.98 (Type: outgoing, Port: 58904, Process: arma2oa.exe) 14:59:38 Owner IP-BLOCK 82.80.245.98 (Type: outgoing, Port: 58904, Process: arma2oa.exe) 15:00:10 Owner IP-BLOCK 67.214.176.98 (Type: outgoing, Port: 58904, Process: arma2oa.exe) 15:26:52 Owner IP-BLOCK 82.80.245.98 (Type: outgoing, Port: 58904, Process: arma2oa.exe) 18:46:02 Owner IP-BLOCK 178.17.163.189 (Type: outgoing, Port: 59758, Process: firefox.exe) 21:21:42 Owner IP-BLOCK 178.17.163.189 (Type: outgoing, Port: 49314, Process: firefox.exe) Three Owner MESSAGE Protection started successfully 07:59:24 Owner MESSAGE IP Protection started successfully 08:37:44 Owner IP-BLOCK 84.16.224.190 (Type: outgoing, Port: 8) 08:37:44 Owner IP-BLOCK 84.16.224.190 (Type: outgoing, Port: 8) 08:37:44 Owner IP-BLOCK 84.16.224.190 (Type: outgoing, Port: 8) 08:38:16 Owner IP-BLOCK 84.16.224.190 (Type: outgoing, Port: 8) 08:38:16 Owner IP-BLOCK 84.16.224.190 (Type: outgoing, Port: 8) 08:38:16 Owner IP-BLOCK 84.16.224.190 (Type: outgoing, Port: 8) 09:11:12 Owner IP-BLOCK 84.16.224.190 (Type: outgoing, Port: 8) 09:11:12 Owner IP-BLOCK 84.16.224.190 (Type: outgoing, Port: 8) 09:11:12 Owner IP-BLOCK 84.16.224.190 (Type: outgoing, Port: 8) 14:52:02 Owner IP-BLOCK 95.168.185.28 (Type: outgoing, Port: 53319, Process: firefox.exe) 16:40:42 Owner IP-BLOCK 67.214.176.98 (Type: outgoing, Port: 59444, Process: arma2oa.exe) 16:40:50 Owner IP-BLOCK 82.80.245.98 (Type: outgoing, Port: 59444, Process: arma2oa.exe) 22:43:29 Owner IP-BLOCK 95.168.185.28 (Type: outgoing, Port: 56727, Process: firefox.exe) Four 01:20:21 Owner IP-BLOCK 67.214.176.98 (Type: outgoing, Port: 63874, Process: arma2oa.exe) 01:20:29 Owner IP-BLOCK 82.80.245.98 (Type: outgoing, Port: 63874, Process: arma2oa.exe) Five 12:49:48 Owner MESSAGE Protection started successfully 12:49:51 Owner MESSAGE IP Protection started successfully 21:59:46 Owner IP-BLOCK 82.80.245.98 (Type: outgoing, Port: 63874, Process: arma2oa.exe) 22:00:27 Owner IP-BLOCK 67.214.176.98 (Type: outgoing, Port: 63874, Process: arma2oa.exe) 22:00:35 Owner IP-BLOCK 82.80.245.98 (Type: outgoing, Port: 63874, Process: arma2oa.exe) 22:38:30 Owner IP-BLOCK 82.80.245.98 (Type: outgoing, Port: 63874, Process: arma2oa.exe) 22:39:02 Owner IP-BLOCK 67.214.176.98 (Type: outgoing, Port: 63874, Process: arma2oa.exe) 22:39:34 Owner IP-BLOCK 67.214.176.98 (Type: outgoing, Port: 63874, Process: arma2oa.exe) 22:39:42 Owner IP-BLOCK 82.80.245.98 (Type: outgoing, Port: 63874, Process: arma2oa.exe) 22:40:30 Owner IP-BLOCK 82.80.245.98 (Type: outgoing, Port: 63874, Process: arma2oa.exe) 22:40:38 Owner IP-BLOCK 67.214.176.98 (Type: outgoing, Port: 63874, Process: arma2oa.exe) 22:46:55 Owner IP-BLOCK 82.80.245.98 (Type: outgoing, Port: 63874, Process: arma2oa.exe) 22:47:27 Owner IP-BLOCK 67.214.176.98 (Type: outgoing, Port: 63874, Process: arma2oa.exe) hope this helps Share this post Link to post Share on other sites
UkManiak 10 Posted December 9, 2011 Whats the verdict fellas? What can I do to make the malware stop? Share this post Link to post Share on other sites
Dwarden 1125 Posted December 10, 2011 well that looks more like firewall blocking ... this is weird and i think it's buggy/false positive on the IP protection setting go to protection tab and disable that or if MBAM has whitelist for the IP protection only then link it to arma2oa.exe but from i read on internet (googled it) it seems this feature is quite bugged and causing lot of issues Share this post Link to post Share on other sites
UkManiak 10 Posted December 10, 2011 K thanks. I will give it a go when I get bored. Thanks again Share this post Link to post Share on other sites
bangtail 0 Posted December 11, 2011 MB is a great program but the website blocker is f**king hideous. Disable it and your problems will most likely stop. Share this post Link to post Share on other sites
