Results 1 to 4 of 4

Thread: Block URL or IP address does not seem to work

  1. #1
    Join Date
    Feb 2014
    Posts
    2

    Unhappy Block URL or IP address does not seem to work

    I have been having a recurring problem with a worm keeping attempting a download.

    It's update.exe coming from update.mydatastatssrv.com.

    It happens several times a day and Zone Alarm detects it and gets treated.

    I tried to go into Advanced Setting -> Expert Rules and added a block to both the URL and IP address. With the URL/IP blocked I would assume that it would never get to the place where Zone Alarm would need to detect and treat it if the URL was blocked. The IP address seems to be the same every download. I ran into a problem before where a spam IP address was changing and even though Zone Alarm has both URL and IP address blocking it really only does IP address and the URL is useless for changing IP addresses because it looks up the URL and converts it to a static IP address. I consider this a "bug" but was told by ZA that this is a "feature". However, since the IP address is "sticking" this doesn't seem to be the issue.
    Shouldn't a blocked IP/URL be rejected before ZA tries to detect a virus?
    Also, the fact that I am getting multiple attempts for a download from this URL, this in itself must be a virus and why isn't ZA detecting it and getting rid of it?
    Thanks in advance for any input.
    FastEddie99

  2. #2
    Join Date
    Nov 2004
    Location
    localhost
    Posts
    17,289

    Default Re: Block URL or IP address does not seem to work

    You should actually clean your system rather than patch it. Please follow ALL the steps (if applicable) as detailed in the link below:

    Malware Clean-up Guidance
    Especially having your logs inspected at bleepingcomputer or spaywarehamer.

    Next read carefully below:
    xyz was not detected. What I should do?

    Thanks,
    Fax

    Click here for ZA Support
    Monday-Saturday 6am to 10pm Central time
    Closed Sundays and Holidays

  3. #3
    Join Date
    Feb 2014
    Posts
    2

    Default Re: Block URL or IP address does not seem to work

    Thanks for the suggestions Guru.

    I did a Safe Mode boot and ran a scan that didn't find anything.

    I looked at another post that gave me the idea to block both incoming and outgoing URL/IP for the problem download. I had just blocked incoming.
    If whatever is requesting this download from my PC can't get to to the IP to make the request, this sounded hopeful.
    This seemed to work.
    I'll look into MBAM to see if I can get rid of what's attempting the download.

  4. #4
    Join Date
    Nov 2004
    Location
    localhost
    Posts
    17,289

    Default Re: Block URL or IP address does not seem to work

    Aside from running those applications I warmly recommend you have your system checked by the volunteers at bleepincomputer (link in the previous post). This is the only way to ensure your PC is really clean. Modern malware can be very difficult to eradicate regardless the tools used. Hands on by experts is the best bet for piece of mind.

    Click here for ZA Support
    Monday-Saturday 6am to 10pm Central time
    Closed Sundays and Holidays

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Similar Threads

  1. Replies: 5
    Last Post: December 13th, 2008, 08:25 AM
  2. Block over IP Not Work in Mozila Firefox
    By ironicoii in forum General - Questions that don't fit any other category
    Replies: 0
    Last Post: September 18th, 2008, 04:07 AM
  3. Expert Rule not Working - Block IP address.
    By zeud in forum ZoneAlarm Configuration
    Replies: 2
    Last Post: January 7th, 2008, 04:14 AM
  4. Replies: 1
    Last Post: February 25th, 2007, 04:40 PM

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •