All Activity

Malwarebytes is not detecting that file. Malwarebytes is not associated with ANY of the vendors listed on Virus Total. Please contact those vendors directly. https://github.com/yaronelh/False-Positive-Center https://docs.virustotal.com/docs/false-positive-contacts

Also should i disable norton along with smartscreen and what not? or just smartscreen in this one?

I will do this tomorrow 20th april, i have now also gotten a few detections which isn't just "compromised" but riskware + now detections comes from steam.exe which is new. Just letting you know, but i will do this tomorrow asap and post it!

Thank you for helping My laptop is ok i don't see any signs of infection but i'll try to look out for them

Thanks https://www.virustotal.com/gui/file/ea9998a9d3326e3d06b58a8651b725f8b15cdd124faefccd8392a0131b8a6154 EFS.zip

Please zip and attach either the efs.exe file or the link from that VT scan.

Porthos & Blender, thanks for the quick replies and response. Just ran a scan and its not longer detected. Version: MWB - 4.6.13.324 Update Package - 1.0.83633 Component Package - 1.0.2319 Thanks

This is Andrew with Holistic Design Inc. EFS has been around for a while, but still gets false positives. Exe is available for free here: https://www.gog.com/game/emperor_of_the_fading_suns_enhanced_demo

Thanks so much - can confirm it's fixed :)

@JasdeepSIngh You should update some programs (if your still need them) or uninstall them (if you don't need them anymore): Microsoft Visual C++ 2015-2022 Redistributable (x86) - 14.36.32532 v.14.36.32532.0 Warning! Download Update Microsoft Visual C++ 2015-2022 Redistributable (x64) - 14.36.32532 v.14.36.32532.0 Warning! Download Update OpenOffice 4.1.14 v.4.114.9811 Warning! Download Update Google Drive v.1.0 Warning! Download Update 7-Zip 19.00 (x64) v.19.00 Warning! Download Update GIMP 2.10.36 v.2.10.36 Warning! Download Update Zoom v.5.15.5 (19404) Warning! Download Update Java 8 Update 291 v.8.0.2910.10 Warning! Download Update VLC media player v.3.0.16 Warning! Download Update Adobe Acrobat DC v.20.006.20042 Warning! Download Update Google Chrome v.123.0.6312.124 Warning! Download Update Thank you for your cooperation. You can use KpRm to remove FRST and other tools. Please download KpRm by kernel-panik and save it to your desktop. Right-click kprm_(version).exe and select Run as Administrator. Read and accept the disclaimer. When the tool opens, select Delete Tools under Actions. Under Delete Quarantines select Delete Now, then click Run. Once complete, click OK. A log may open in Notepad titled kprm-(date).txt. I do not need it. Just close Notepad if it shows up. A few final recommendations can be found here: https://forums.malwarebytes.com/topic/258363-tips-to-help-protect-from-infection/ Further reading if you like to keep up on the malware threat scene: Malwarebytes Blog https://blog.malwarebytes.com/ Hopefully, we've been able to assist you with correcting your system issues. Thank you for using Malwarebytes.

Here is another

I ran both the commands and also securitycheck. Here is the log file SecurityCheck.txt

I ran both the commands and also securitycheck. Here is the log file SecurityCheck.txt

So the file was detected by one of our heuristic engines. I couldn't tell you what exactly triggered the detection. That being said, you can probably prevent future detections by ensuring your files have a valid digital signature.

Hello, thanks for bringing this to our attention. We've reviewed the data from the site again and have determined it no longer warrants being blocked so we've disabled the block in our database. Removal should be reflected in the next database update going out in a few hours or so.

I have a premium subscription to virustotal so I can see a bunch more info about sites, files, etc. I could see a bunch of files related to your site and could download them. Mind you, the ones I grabbed were not detected but did allow me to get a wider variety between versions to create a prevention sig. There are many checks MBAM does when scanning the files. It is a machine learning detection. I'll try to find more info.

Hello, I'm Andrew from Anychat.one. Today we have a message from one of our customers about blocking our website by Malwarebytes. Screenshot is attached. Please remove the websites from the blacklist. https://anychat.one/ - our main website https://api.anychat.one/ - main API endpoint Kind regards, Andrew.

I'd go to a computer shop, but we've not got the money. I'm saving for the hard drive myself; that's why it might take a while. We won't have the money to go to a computer shop, so it would be really useful to know how to do it without going to one. Of course, I don't need it now, as I don't have the hard drive yet, but we don't really have much other option.

Did you purchase Malwarebytes for Teams?

Ram is just plug in and bam it just works. Installing Windows after you get it baked up on an external drive is a whole different thing entirely. I do this for a living. For now, I need to get back to it and check back later.

@JasdeepSIngh Thanks for your detailed feedback. I'm happy that windows update is working again. 👍 We've checked all important system files with SFC which came back clean: Windows Resource Protection did not find any integrity violations. If you like, you can run the following two commands from an elevated command prompt: dism /online /cleanup-image /StartComponentCleanup dism /online /cleanup-image /restorehealth I suggest to check all programs if they are up to date. Therefore, we can use SecurityCheck. I would like you to run a tool named SecurityCheck to inquire about the current security update status of some applications. Download SecurityCheck by glax24: https://tools.safezone.cc/glax24/SecurityCheck/SecurityCheck.exe If Microsoft SmartScreen blocks the download, click through to save the file This tool is safe. Smartscreen is overly sensitive. If SmartScreen blocks the file from running click on More info and Run anyway Right-click with your mouse on the Securitycheck.exe and select "Run as administrator" and reply YES to allow to run & go forward Wait for the scan to finish. It will open a text file named SecurityCheck.txt Close the file. Attach it with your next reply. You can find this file in a folder called SecurityCheck, C:\SecurityCheck\SecurityCheck.txt

Local shops are far to expensive. My dad managed to upgrade my ram no problem, so unless this is much more complicated, it should be fine.

We get they are paying for the drive, But do they know how to do the actual work? Sounds like you would be better off taking it to a local shop.

***This is an automated reply*** Hi, Thanks for posting in the Malwarebytes for Windows Help forum. If you are having technical issues with our Windows product, please do the following: Malwarebytes Support Tool - Advanced Options This feature is designed for the following reasons: For use when you are on the forums and need to provide logs for assistance For use when you don't need or want to create a ticket with Malwarebytes For use when you want to perform local troubleshooting on your own How to use the Advanced Options: Screenshots: If you are having licensing issues, please do the following: Thanks in advance for your patience. -The Malwarebytes Forum Team

Hi! I realised that on my desktop there is a version 4.6.13 and on my laptop the version 5.1 installed. On the desktop it says it's Teams. What are the differencies between these two? Is it "normal" for the 4.6.13 version to be Teams? Thank you for your help!