Broadband Tech → Security → Security > WEBROOT LOG- NEED help, Not sure where to post

WEBROOT LOG- NEED help, Not sure where to post

weblogjune1.log 747,454 bytes WEBROOT June 1 report

ipconfig.all.txt 5,788 bytes IPconfig

wbmalware.log 9,842 bytes Webroot log- scan report

It's because you visited a bad website and closes the connection that is normal for WSA if you look closely the time of the first Sat 2013-06-01 16:23:58.0863 Closed network connection:[0200A8C0.59076 - A1FA8E44.20480] all the same time stamp and the second time Sat 2013-06-01 20:49:04.0090 Closed network connection: [0200A8C0.31694 - 4D74064A.20480] and the third time Sat 2013-06-01 20:49:52.0726 Closed network connection: [0200A8C0.1487 - 4D74064A.20480] all the same time stamps! So you visited 3 bad websites and they were Blocked 3 different times. So June 1st was a busy day for you and your log looks clean but his one was a False Postive Sat 2013-06-01 23:24:21.0517 Infection detected: c:\program files (x86)\internet explorer\iexplore.exe [MD5: AAD90795E84E710543C6C7C2F7048E30] [17/10401040] [(null)].

But if you have other concerns please contact Webroot support: »www.webrootanywhere.com/servicetalk.asp?

HTH,

TH
--
Triple Helix - Microsoft® MVP Consumer Security 2012/14
VIP Member Of ASAP - (Alliance of Security Analysis Professionals™)
Official Webroot SecureAnywhere (Prevx) Support Forum Helper.
(H59 Clan)

Thanks for responding-

I was setting webroot up to scan files, when I noticed over 100 network connections open.

The settings in webroot were set to allow these connections when I set webroot to MONITOR them- (three settings, allow, monitor and block)
WEBROOT reported sights were unsafe and asked me to block them-after I blocked them when my pc shut down.

I found this log when I got back on in safe mode.

I appreciate that you took the time to read!!! it means a great deal. - -thanks,
BR

When you go to a bad web site and you click block it should send you back to your home page if you feel it's not working correctly please contact the support inbox.

Thanks,

TH

From the first Blocked Website this is normal in the scan log:

Sat 2013-06-01 16:23:58.0863 Closed network connection: [0200A8C0.59076 - A1FA8E44.20480]
Sat 2013-06-01 16:23:58.0863 Closed network connection: [0200A8C0.59332 - A1FA8E44.20480]
Sat 2013-06-01 16:23:58.0863 Closed network connection: [0200A8C0.59588 - 8DFA8E44.20480]
Sat 2013-06-01 16:23:58.0863 Closed network connection: [0200A8C0.59844 - 8DFA8E44.20480]
Sat 2013-06-01 16:23:58.0863 Closed network connection: [0200A8C0.60100 - 8FD58E44.20480]
Sat 2013-06-01 16:23:58.0863 Closed network connection: [0200A8C0.60356 - 8FD58E44.20480]
Sat 2013-06-01 16:23:58.0863 Closed network connection: [0200A8C0.60612 - 8FD58E44.20480]
Sat 2013-06-01 16:23:58.0863 Closed network connection: [0200A8C0.60868 - CAE78B62.20480]
Sat 2013-06-01 16:23:58.0863 Closed network connection: [0200A8C0.61124 - 8FD58E44.20480]
Sat 2013-06-01 16:23:58.0863 Closed network connection: [0200A8C0.61380 - 8FD58E44.20480]
Sat 2013-06-01 16:23:58.0863 Closed network connection: [0200A8C0.63428 - 31240E6B.20480]
Sat 2013-06-01 16:23:58.0863 Closed network connection: [0200A8C0.63940 - 6BA04017.20480]
Sat 2013-06-01 16:23:58.0863 Closed network connection: [0200A8C0.64708 - E0A14017.20480]
Sat 2013-06-01 16:23:58.0863 Closed network connection: [0200A8C0.65220 - E0A14017.20480]
Sat 2013-06-01 16:23:58.0863 Closed network connection: [0200A8C0.65476 - E0A14017.20480]
Sat 2013-06-01 16:23:58.0863 Closed network connection: [0200A8C0.453 - 1C25C2AD.20480]
Sat 2013-06-01 16:23:58.0863 Closed network connection: [0200A8C0.709 - E0A14017.20480]
Sat 2013-06-01 16:23:58.0863 Closed network connection: [0200A8C0.965 - 56943BC7.47873]
Sat 2013-06-01 16:23:58.0863 Closed network connection: [0200A8C0.1221 - A1FA8E44.20480]
Sat 2013-06-01 16:23:58.0863 Closed network connection: [0200A8C0.1477 - FCE57D4A.20480]
Sat 2013-06-01 16:23:58.0863 Closed network connection: [0200A8C0.1733 - 639D1717.20480]
Sat 2013-06-01 16:23:58.0863 Closed network connection: [0200A8C0.1989 - 59A28862.20480]
Sat 2013-06-01 16:23:58.0863 Closed network connection: [0200A8C0.2245 - 59A28862.20480]
Sat 2013-06-01 16:23:58.0863 Closed network connection: [0200A8C0.2501 - 59A28862.20480]
Sat 2013-06-01 16:23:58.0863 Closed network connection: [0200A8C0.2757 - F27E6DD8.20480]
Sat 2013-06-01 16:23:58.0863 Closed network connection: [0200A8C0.3781 - 4D74064A.20480]
Sat 2013-06-01 16:23:58.0863 Closed network connection: [0200A8C0.4037 - 8EFA8E44.20480]
Sat 2013-06-01 16:23:58.0863 Closed network connection: [0200A8C0.4293 - 8EFA8E44.20480]
Sat 2013-06-01 16:23:58.0863 Closed network connection: [0200A8C0.4805 - 2B588962.20480]
Sat 2013-06-01 16:23:58.0863 Closed network connection: [0200A8C0.5061 - 7B222041.20480]
Sat 2013-06-01 16:23:58.0863 Closed network connection: [0200A8C0.5317 - 7B222041.20480]
Sat 2013-06-01 16:23:58.0863 Closed network connection: [0200A8C0.5573 - 7B222041.20480]
Sat 2013-06-01 16:23:58.0863 Closed network connection: [0200A8C0.5829 - 80222041.20480]
Sat 2013-06-01 16:23:58.0863 Closed network connection: [0200A8C0.6085 - 80222041.20480]
Sat 2013-06-01 16:23:58.0863 Closed network connection: [0200A8C0.6341 - 80222041.20480]
Sat 2013-06-01 16:23:58.0879 Closed network connection: [0200A8C0.6597 - 80222041.20480]
Sat 2013-06-01 16:23:58.0879 Closed network connection: [0200A8C0.6853 - 80222041.20480]
Sat 2013-06-01 16:23:58.0879 Closed network connection: [0200A8C0.7109 - E8C98962.20480]
Sat 2013-06-01 16:23:58.0879 Closed network connection: [0200A8C0.42181 - C459ECAD.20480]
Sat 2013-06-01 16:23:58.0879 Closed network connection: [0200A8C0.42437 - C459ECAD.20480]
Sat 2013-06-01 16:23:58.0879 Closed network connection: [0200A8C0.43461 - 7C37FE41.20480]
Sat 2013-06-01 16:23:58.0879 Closed network connection: [0100007F.960 - 00000000.0]
Sat 2013-06-01 16:23:58.0879 Closed network connection: [0200A8C0.7365 - 4D74064A.20480]
Sat 2013-06-01 16:23:58.0879 Closed network connection: [0200A8C0.7621 - 4D74064A.20480]
Sat 2013-06-01 16:23:58.0879 Closed network connection: [0200A8C0.7877 - 798C7D4A.20480]
Sat 2013-06-01 16:23:58.0879 Closed network connection: [0200A8C0.8133 - 5F867D4A.20480]
Sat 2013-06-01 16:23:58.0879 Closed network connection: [0200A8C0.8389 - 5F867D4A.20480]
Sat 2013-06-01 16:23:58.0879 Closed network connection: [0200A8C0.8645 - BF867D4A.20480]
Sat 2013-06-01 16:23:58.0879 Closed network connection: [0200A8C0.8901 - BF867D4A.20480]
Sat 2013-06-01 16:23:58.0879 Closed network connection: [0200A8C0.9157 - 5F897D4A.20480]
Sat 2013-06-01 16:23:58.0879 Closed network connection: [0200A8C0.9413 - 678B7D4A.47873]
Sat 2013-06-01 16:23:58.0879 Closed network connection: [0200A8C0.9925 - 798C7D4A.20480]
Sat 2013-06-01 16:23:58.0879 Closed network connection: [0200A8C0.10181 - 798C7D4A.20480]
Sat 2013-06-01 16:23:58.0879 Closed network connection: [0200A8C0.10437 - BF867D4A.20480]
Sat 2013-06-01 16:23:58.0879 Closed network connection: [0200A8C0.11461 - 6B25C2AD.20480]
Sat 2013-06-01 16:23:58.0879 Closed network connection: [0200A8C0.11717 - 0025C2AD.47873]
Sat 2013-06-01 16:23:58.0879 Closed network connection: [0200A8C0.11973 - EAE57D4A.20480]
Sat 2013-06-01 16:23:58.0879 Closed network connection: [0200A8C0.12229 - EAE57D4A.20480]
Sat 2013-06-01 16:23:58.0879 Closed network connection: [0200A8C0.12485 - EAE57D4A.20480]
Sat 2013-06-01 16:23:58.0879 Closed network connection: [0200A8C0.12741 - EAE57D4A.20480]
Sat 2013-06-01 16:23:58.0879 Closed network connection: [0200A8C0.12997 - EAE57D4A.20480]
Sat 2013-06-01 16:23:58.0879 Closed network connection: [0200A8C0.13253 - EAE57D4A.20480]
Sat 2013-06-01 16:23:58.0879 Closed network connection: [0200A8C0.13509 - BF897D4A.20480]
Sat 2013-06-01 16:23:58.0879 Closed network connection: [0200A8C0.13765 - EAE57D4A.20480]
Sat 2013-06-01 16:23:58.0879 Closed network connection: [0200A8C0.14021 - EAE57D4A.20480]
Sat 2013-06-01 16:23:58.0879 Closed network connection: [0200A8C0.14277 - EAE57D4A.20480]
Sat 2013-06-01 16:23:58.0879 Closed network connection: [0200A8C0.14533 - C45B1548.20480]
Sat 2013-06-01 16:23:58.0879 Closed network connection: [0200A8C0.14789 - 0A25C2AD.20480]
Sat 2013-06-01 16:23:58.0879 Closed network connection: [0200A8C0.15045 - 0A25C2AD.20480]
Sat 2013-06-01 16:23:58.0879 Closed network connection: [0200A8C0.15301 - A9D8B85D.20480]
Sat 2013-06-01 16:23:58.0879 Closed network connection: [0200A8C0.15557 - 678B7D4A.47873]
Sat 2013-06-01 16:23:58.0879 Closed network connection: [0200A8C0.15813 - F277161F.20480]
Sat 2013-06-01 16:23:58.0879 Closed network connection: [0200A8C0.16069 - 0025C2AD.47873]
Sat 2013-06-01 16:23:58.0879 Closed network connection: [0200A8C0.16837 - 7925C2AD.20480]
Sat 2013-06-01 16:23:58.0879 Closed network connection: [0200A8C0.17093 - 6B25C2AD.20480]
Sat 2013-06-01 16:23:58.0879 Closed network connection: [0200A8C0.17349 - 8F25C2AD.47873]
Sat 2013-06-01 16:23:58.0879 Closed network connection: [0200A8C0.17605 - 9A25C2AD.20480]
Sat 2013-06-01 16:23:58.0879 Closed network connection: [0200A8C0.17861 - 32240E6B.20480]
Sat 2013-06-01 16:23:58.0879 Closed network connection: [0200A8C0.18117 - C459ECAD.20480]
Sat 2013-06-01 16:23:58.0879 Closed network connection: [0200A8C0.18373 - C459ECAD.20480]
Sat 2013-06-01 16:23:58.0879 Closed network connection: [0200A8C0.18885 - 2BE18B62.20480]
Sat 2013-06-01 16:23:58.0879 Closed network connection: [0200A8C0.19141 - C1E57D4A.47873]
Sat 2013-06-01 16:23:58.0879 Closed network connection: [0200A8C0.19397 - F2B0DC5B.20480]
Sat 2013-06-01 16:23:58.0879 Closed network connection: [0200A8C0.19653 - F2B0DC5B.20480]
Sat 2013-06-01 16:23:58.0879 Closed network connection: [0200A8C0.19909 - F2B0DC5B.20480]
Sat 2013-06-01 16:23:58.0879 Closed network connection: [0200A8C0.20165 - 0A25C2AD.20480]
Sat 2013-06-01 16:23:58.0879 Closed network connection: [0200A8C0.20421 - 0A25C2AD.20480]
Sat 2013-06-01 16:23:58.0879 Closed network connection: [0200A8C0.20677 - 6B25C2AD.20480]
Sat 2013-06-01 16:23:58.0879 Closed network connection: [0200A8C0.21445 - C45B1548.20480]
Sat 2013-06-01 16:23:58.0879 Closed network connection: [0200A8C0.21701 - F8D7B85D.20480]
Sat 2013-06-01 16:23:58.0879 Closed network connection: [0200A8C0.22213 - 2AE18B62.20480]
Sat 2013-06-01 16:23:58.0879 Closed network connection: [0200A8C0.22469 - 872307B9.20480]
Sat 2013-06-01 16:23:58.0879 Closed network connection: [0200A8C0.22981 - F2B0DC5B.20480]
Sat 2013-06-01 16:23:58.0879 Closed network connection: [0200A8C0.23493 - 0A347242.20480]
Sat 2013-06-01 16:23:58.0879 Closed network connection: [0200A8C0.23749 - 832307B9.20480]
Sat 2013-06-01 16:23:58.0879 Closed network connection: [0200A8C0.24261 - 696201AD.20480]
Sat 2013-06-01 16:23:58.0879 Closed network connection: [0200A8C0.24517 - 696201AD.20480]
Sat 2013-06-01 16:23:58.0879 Closed network connection: [0200A8C0.24773 - 696201AD.20480]
Sat 2013-06-01 16:23:58.0879 Closed network connection: [0200A8C0.25285 - 19573741.20480]
Sat 2013-06-01 16:23:58.0879 Closed network connection: [0200A8C0.25541 - 19573741.20480]
Sat 2013-06-01 16:23:58.0879 Closed network connection: [0200A8C0.25797 - 19573741.20480]
Sat 2013-06-01 16:23:58.0879 Closed network connection: [0200A8C0.29893 - EB934017.20480]
Sat 2013-06-01 16:23:58.0879 Closed network connection: [0200A8C0.30149 - EB934017.20480]
Sat 2013-06-01 16:23:58.0879 Closed network connection: [0200A8C0.32197 - 6325C2AD.20480]
Sat 2013-06-01 16:23:58.0879 Closed network connection: [0200A8C0.33221 - C45B1548.20480]
Sat 2013-06-01 16:23:58.0879 Closed network connection: [0200A8C0.33477 - C45B1548.20480]
Sat 2013-06-01 16:23:58.0879 Closed network connection: [0200A8C0.33733 - C45B1548.20480]
Sat 2013-06-01 16:23:58.0879 Closed network connection: [0200A8C0.33989 - C45B1548.20480]
Sat 2013-06-01 16:23:58.0879 Closed network connection: [0200A8C0.34245 - 50450D1F.20480]
Sat 2013-06-01 16:23:58.0879 Closed network connection: [0200A8C0.34501 - 12ED53D0.20480]
Sat 2013-06-01 16:23:58.0879 Closed network connection: [0200A8C0.34757 - 12ED53D0.20480]
Sat 2013-06-01 16:23:58.0879 Closed network connection: [0200A8C0.35013 - A81FDA51.20480]
Sat 2013-06-01 16:23:58.0879 Closed network connection: [0200A8C0.35269 - A81FDA51.20480]
Sat 2013-06-01 16:23:58.0879 Closed network connection: [0200A8C0.35525 - A81FDA51.20480]
Sat 2013-06-01 16:23:58.0879 Closed network connection: [0200A8C0.36549 - C1E57D4A.47873]
Sat 2013-06-01 16:23:58.0879 Closed network connection: [0200A8C0.37061 - 2AE18B62.20480]
Sat 2013-06-01 16:23:58.0879 Closed network connection: [0200A8C0.37573 - 22240E6B.20480]
Sat 2013-06-01 16:23:58.0879 Closed network connection: [0200A8C0.37829 - A9D8B85D.20480]
Sat 2013-06-01 16:23:58.0879 Closed network connection: [0200A8C0.38085 - A9D8B85D.20480]
Sat 2013-06-01 16:23:58.0879 Closed network connection: [0200A8C0.38341 - A9D8B85D.20480]
Sat 2013-06-01 16:23:58.0879 Closed network connection: [0200A8C0.38597 - A9D8B85D.20480]
Sat 2013-06-01 16:23:58.0879 Closed network connection: [0200A8C0.38853 - 2A318A62.20480]
Sat 2013-06-01 16:23:58.0879 Closed network connection: [0200A8C0.39109 - 39240E6B.20480]
Sat 2013-06-01 16:23:58.0879 Closed network connection: [0200A8C0.40133 - 2AE18B62.20480]
Sat 2013-06-01 16:23:58.0879 Closed network connection: [0200A8C0.40389 - 82481BC7.20480]
Sat 2013-06-01 16:23:58.0879 Closed network connection: [0200A8C0.40645 - 28240E6B.20480]
Sat 2013-06-01 16:23:58.0879 Closed network connection: [0200A8C0.42949 - F1631332.20480]
Sat 2013-06-01 16:23:58.0879 Closed network connection: [0200A8C0.43205 - F1631332.20480]
Sat 2013-06-01 16:23:58.0879 Closed network connection: [0200A8C0.43717 - F1631332.20480]
Sat 2013-06-01 16:23:58.0879 Closed network connection: [0200A8C0.44229 - F1631332.20480]
Sat 2013-06-01 16:23:58.0879 Closed network connection: [0200A8C0.44485 - F1631332.20480]
Sat 2013-06-01 16:23:58.0879 Closed network connection: [0200A8C0.44741 - F1631332.20480]
Sat 2013-06-01 16:23:58.0879 Closed network connection: [0200A8C0.44997 - F1631332.20480]
Sat 2013-06-01 16:23:58.0879 Closed network connection: [0200A8C0.45253 - F1631332.20480]
Sat 2013-06-01 16:23:58.0879 Closed network connection: [0100007F.41422 - 00000000.0]
Sat 2013-06-01 16:23:58.0879 Closed network connection: [0200A8C0.41669 - 798C7D4A.20480]
Sat 2013-06-01 16:23:58.0879 Closed network connection: [0200A8C0.41925 - 798C7D4A.20480]
Sat 2013-06-01 16:23:58.0879 Closed network connection: [0100007F.59852 - 00000000.0]
--

Triple Helix - Microsoft® MVP Consumer Security 2012/14
VIP Member Of ASAP - (Alliance of Security Analysis Professionals™)
Official Webroot SecureAnywhere (Prevx) Support Forum Helper.
(H59 Clan)