The My Opera forums have been replaced with forums.opera.com. Please head over there to discuss Opera's products and features

See the new Forums

Malwarebytes blocking an ip address from opera

Forums » Opera for Windows/Mac/Linux » Opera for Windows

You need to be logged in to post in the forums. If you do not have an account, please sign up first.

Go to last post

30. September 2011, 14:35:34

jaredwdoss

Posts: 5

Malwarebytes blocking an ip address from opera

I would say that I don't have any virus or malware, but when I close out all my tabs, or go back to the speed dial page, malwarebytes seems to report that it is blocking "IP-BLOCK 95.64.61.147 (Type: outgoing, Port: 50146, Process: opera.exe)" I have searched on the net for where this ip leads, and it never goes anywhere. Is this something opera is doing on purpose, or does it seem that I've been hijacked. My updated Malwarebytes doesn't pick up anything, and neither does Emsisoft, and those two programs are as tough as nails. Does anyone have any relevant help?

Thanks in advance!

Jared

1. October 2011, 05:57:03

Moderator

sgunhouse

Volunteer

Posts: 66788

Do you have any speed dial extensions installed?

1. October 2011, 06:07:14

Krake

Posts: 3136

Originally posted by jaredwdoss:

I have searched on the net for where this ip leads, and it never goes anywhere.


IP range: 95.64.0.0 - 95.64.127.255
NETSERV NOC
SC Netserv Consult SRL
138 Ferdinand Blvd.
Bucharest, RO
Abuse e-mail: abuse@netserv.ro
Support e-mail: support@netserv.ro
Support phone: +4-0745888222
Marius IORDAN
138 Ferdinand Blvd.
Bucharest - 2nd District
+40749180649
Every morning in Africa, a gazelle wakes up. It knows it must run faster than the fastest lion or it will be killed.
Every morning a lion wakes up. It knows it must outrun the slowest gazelle or it will starve to death.
It doesn't matter whether you are a lion or a gazelle: when the sun comes up, you'd better be running.

1. October 2011, 21:31:06

jaredwdoss

Posts: 5

I have only 2 extensions installed, but I was noticing this before I installed any extensions (Ghostery and Y!Mail AdsFree).
From what Krake showed, I'm thinking I might having a bug or something, I don't know of anything that should be pointing me to RO. I guess it's time to look for a better antimalware, or start running the hijackthis type of programs. What's y'alls opinion?

2. October 2011, 07:46:31

Krake

Posts: 3136

I don't think it is a bug, you rather caught something nasty.
Every morning in Africa, a gazelle wakes up. It knows it must run faster than the fastest lion or it will be killed.
Every morning a lion wakes up. It knows it must outrun the slowest gazelle or it will starve to death.
It doesn't matter whether you are a lion or a gazelle: when the sun comes up, you'd better be running.

5. October 2011, 06:56:11

Slamdex

Banned user

Originally posted by jaredwdoss:

I would say that I don't have any virus or malware, but when I close out all my tabs, or go back to the speed dial page, malwarebytes seems to report that it is blocking "IP-BLOCK 95.64.61.147 (Type: outgoing, Port: 50146, Process: opera.exe)" I have searched on the net for where this ip leads, and it never goes anywhere. Is this something opera is doing on purpose, or does it seem that I've been hijacked. My updated Malwarebytes doesn't pick up anything, and neither does Emsisoft, and those two programs are as tough as nails. Does anyone have any relevant help?


Did you try to open that IP address in a browser? It shows the Google search page.

5. October 2011, 15:16:59

jaredwdoss

Posts: 5

Slamdex, I did that from opera, and it doesn't go anywhere for me...
However, I did check my java version, and I was one update behind. I updated it and restarted the computer and it is gone.
Whowouldathunkit? I thought it updated itself when it needed to be updated, but apparently not. Take my frustration as an
example of things to do...

Thanks for the help here, I appreciate being able to bounce ideas off of people, it helps get things done.

- jared

5. October 2011, 18:51:22

jaredwdoss

Posts: 5

Well, hell, I am getting those notices from Malwarebytes again... So to clarify, I don't believe it's a bug, like Opera is not working right, I believe it's some kind of virus/trojan/worm... I don't have a browser hijack, but the notification only seems to pop-up when I'm going to my speed dial. I still only have the 2 extensions on and installed. I think I may have to head over to emsisoft and get their help to start digging around my system. I thought I got it myself, but oh well.

--- And slamdex, I see, the reason I am getting nothing when I put in the ip address in my address bar is because malwarebytes blocks it automatically, I don't see anything besides the Opera default, "Connection closed by remote server"

9. October 2011, 17:23:30

jaredwdoss

Posts: 5

Okay, well I figured out my problem. Of course it was something put on by some malware, and I happened to use OTL.exe, which is an awesome windows snooping program that finds all the hidden things going on in the background. In my HOST file, I see that google and bing were both being directed to the ip addresses that were the problem. I think this thing is now solved. I can log into google for my gmail, and I can go to google.com and bing.com without being blocked... Hopefully that'll solve the issue, and help someone else if they have the same problem.

Forums » Opera for Windows/Mac/Linux » Opera for Windows