Jump to content

All Activity

This stream auto-updates     

  1. Past hour
  2. Hello, Welcome to Malwarebytes. I'm nasdaq and will be helping you. If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed. === Nothing suspicious was found in your logs. Check these out. Reset Opera. http://www.guidingtech.com/25425/reset-chrome-firefox-safari-factory-defaults Opera synchronize between my devices. http://help.opera.com/opera/Windows/2393/en/sync.html Remove the Sync if enabled. After a restart of the computer enable it. Clean cache - Opera. https://kb.wisc.edu/helpdesk/page.php?id=12381 ===
  3. Hello, Welcome to Malwarebytes. I'm nasdaq and will be helping you. If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed. === Your logs are clean. MBAM remove the script before it could be executed. Stay safe.
  4. Hi, Remove this program in bold via the Control Panel > Programs > Programs and Features. NativeDesktopMediaService (HKLM-x32\...\{FC44DE72-60F9-4BC1-B098-D2F6B5A06187}) (Version: 3.5.0 - Jetmedia) <==== ACHTUNG <<<>>> Please download the attached Fixlist.txt file to the same folder where the Farbar tool is running from. The location is listed in the 3rd line of the FRST.txt log you have submitted. Run FRST and click Fix only once and wait. The tool will create a log (Fixlog.txt) please post it to your reply. === Reset Chrome Open Google Chrome, click on menu icon or the 3 vertical dots located right side top of the google chrome. Click "Settings" then "Show advanced settings" at the bottom of the screen. Click "Reset and clean up" > "Restore settings to their original defaults" Restart Chrome. <<<>>> Please post the Fixlog.txt and let me know what problem persists. fixlist.txt
  5. Today
  6. Hi, I get timeout errors in Opera trying to load multiple web sites. I have the VPN features in Opera enabled and use https always-on. I can get to the same sites fine using Edge. I have cleared my cache using CCleaner, but it has not helped. I have scanned using Malwarebytes and Norton; both come back clean. PFA my Malwarebytes report and the FRST.txt and Addition.txt files, as requested. I look forward to hearing from someone. Thank you, Martha712 Addition.txt FRST.txt mwb log.txt
  7. Hi, It's no longer supported by Firefox. https://addons.mozilla.org/en-US/firefox/addon/hoverzoom-plus/ Where did you get that Extension and when?
  8. Hi, Nothing suspicious was found in your logs. Navigate to this page and see if you can find a solution to your slow Boot Time. 6 Tips to Fix Slow Boot Times in Windows 10 https://www.makeuseof.com/tag/windows-10-slow-boot-issues/ Keep me posted.
  9. there are so many answers on so many website and forum about this file . I just read this topic from here , and I had to manually remove this file form this path : "C:\end" and everything seems fine . @Exile thanks for help and the information and we waiting for an answer from @fr33tux
  10. I'm not sure that I understand. The Report All Messages part is not something associated with Malwarebytes, so it must be an iOS feature that shows up when you have registered an app to handle call reporting. I'm not sure under exactly what circumstances that message appears. The screenshot you're showing is of the new reporting functionality provided by Malwarebytes through the new reporting APIs provided by iOS. It should appear regardless of what network you're on, if you use the new reporting method.
  11. You stated - "I tried it anyway but of course as soon as I uplink it downloads fake dns servers and default GW. " NetRange: 71.96.0.0 - 71.127.255.255 CIDR: 71.96.0.0/11 NetName: VIS-71-96 NetHandle: NET-71-96-0-0-1 Parent: NET71 (NET-71-0-0-0-0) NetType: Direct Allocation OriginAS: Organization: MCI Communications Services, Inc. d/b/a Verizon Business (MCICS) RegDate: 2005-01-18 Updated: 2016-08-18 Ref: https://rdap.arin.net/registry/ip/71.96.0.0 71.115.11.1 is a WAN node on Verizon and thus become a gateway into the Internet for a Verizon subscriber 71.252.0.12 -- nsrest01.verizon.net ( Verizon DNS ) 68.238.112.12 -- nsrich03.verizon.net (Verizon DNS ) 71.115.11.1 -- lo0-100.RCMDVA-VFTTP-316.verizon-gni.net 96.228.38.1 -- lo0-100.RCMDVA-VFTTP-316.verizon-gni.net verizon-gni.net - Domain is registered to Verizon Trademark Services LLC Everything looks normal for a Verizon FiOS connection ( FTTP ) for a Virginia Point of Presence ( PoP )
  12. Yes, I'm sure you did. It is because just as with the file listed on that VirustTotal page, your file is a 0 byte file meaning it is completely empty/no content, and any file that is 0 bytes/has no contents (regardless of what it might be named) will have the same hash/checksum, so the results will be the same. The file name and path/location is what you need to use to research it if you wish to find out what it is and where it came from which is why I speculated that it appeared to be a trace left over from a Conduit PUP/infection because Conduit would create a file by that name in that location according to the information I found (and I suspect that's the purpose of this signature in ADWCleaner that is detecting the file as well, though I do not know for certain as only Research would have access to that information).
  13. Greetings, The information in the following links should help to clarify much of this with regards to what Malwarebytes detects as PUP and why: https://www.malwarebytes.com/pup/ https://blog.malwarebytes.com/malwarebytes-news/2016/10/malwarebytes-gets-tougher-on-pups/ https://blog.malwarebytes.com/cybercrime/2015/06/digital-snake-oil/ https://blog.malwarebytes.com/cybercrime/2015/06/driver-updaters-digital-snake-oil-part-2/ https://blog.malwarebytes.com/cybercrime/2015/07/pup-makers-digital-snake-oil-part-3/ https://blog.malwarebytes.com/threats/registry-cleaner/ https://blog.malwarebytes.com/puppum/2016/12/why-malwarebytes-detects-pc-pitstop-as-potentially-unwanted/ https://blog.malwarebytes.com/malwarebytes-news/2017/11/winning-the-battle-against-pups-on-your-computer-and-in-u-s-district-court/ https://blog.malwarebytes.com/puppum/2016/07/pup-friday-cleaning-up-with-5-star-awards/ https://blog.malwarebytes.com/puppum/2016/08/systweak-redux-our-response/ Regarding legal precedent, please refer to the following articles which cite two cases involving Malwarebytes and vendors blocked as PUP: https://blog.ericgoldman.org/archives/2017/11/section-230c2-protects-anti-malware-vendor-enigma-v-malwarebytes.htm https://blog.ericgoldman.org/archives/2018/09/section-230-helps-malware-vendor-avoid-liability-for-blocking-decision-pc-drivers-v-malwarebytes.htm The following links should also prove informative as to why many items are classified as PUP by Malwarebytes: https://decentsecurity.com/#/registry-cleaners/ https://support.microsoft.com/en-us/help/2563254/microsoft-support-policy-for-the-use-of-registry-cleaning-utilities https://www.howtogeek.com/171633/why-using-a-registry-cleaner-wont-speed-up-your-pc-or-fix-crashes/ https://www.howtogeek.com/162683/pc-cleaning-apps-are-a-scam-heres-why-and-how-to-speed-up-your-pc/ https://lifehacker.com/5482701/whats-the-registry-should-i-clean-it-and-whats-the-point https://lifehacker.com/5033518/debunking-common-windows-performance-tweaking-myths https://www.howtogeek.com/198758/never-download-a-driver-updating-utility-theyre-worse-than-useless/ https://www.howtogeek.com/233115/the-only-way-to-safely-update-your-hardware-drivers-on-windows/ http://www.tomshardware.com/answers/id-1857635/good-free-automatic-driver-updater.html http://www.tomshardware.com/answers/id-1974868/trusted-driver-updater.html https://www.howtogeek.com/172839/10-types-of-system-tools-and-optimization-programs-you-dont-need-on-windows/ https://computer.howstuffworks.com/question1751.htm https://lifehacker.com/5415355/do-you-really-need-more-than-4gb-of-ram https://www.tomshardware.com/reviews/memory-module-upgrade,2264.html https://www.howtogeek.com/128130/htg-explains-why-its-good-that-your-computers-ram-is-full/ https://techlogon.com/2011/03/28/will-more-ram-memory-make-my-computer-faster/ Obviously you're free to change how PUPs are handled and this is in fact the very reason those options are provided. Additionally, if you only wish to exclude a specific PUP rather than all PUPs you may instead perform a Threat scan with Malwarebytes by opening Malwarebytes and clicking the Scan Now button on the Dashboard, then once the scan completes, verify that all of the detected items belong to the program that you wish to exclude then click the empty checkbox at the top of the list in the column header to clear all of the checkboxes next to all of the detections then click Next and when prompted on what to do with the remaining detections select the option to always ignore and they will all be added to your Exclusions in Malwarebytes so that those items will no longer be detected by future scans or the Malware Protection component. I hope that helps to clarify things and if there is anything else we might assist you with please don't hesitate to let us know. Thanks
  14. weird . I’m sure I have to upload the "END file" to virus total but not sure why they have give back another name for this file ! I can to upload this file as in attachment if needed . anyway ، is this file safe or unsafe and why it has 0 byte anyway ? and also , VT says "file published by a trust developer" , in other word should I manually remove of this file since all other anti-malware scan came back clean expect adwcleaner !
  15. Greetings, You should be able to click on the Date and Time column header to sort the list by date/time accordingly and the order will reverse if you click it a second time. The image below illustrates where you should click: I hope this helps and please let us know if there is anything else we might assist you with. Thanks
  16. Block has been removed on 2019-04-16.
  17. I believe I wrote about this file naming trick years ago. EDIT: RE: Post #11 (2014) , Post #20 (2017) I have also replied to your posts Amaroq_Starwind with specific information. Please stop suggesting what MBAM should do. Write you own anti malware application. MBAM specifically targets binaries that start with the first two characters being; MZ They can be; EXE, CPL, SYS, DLL, SCR and OCX. Any of these files types can be renamed to be anything such as; TXT, JPG, CMD and BAT and they will still be targeted just as long as the binary starts with 'MZ'. This includes file names that use Right to Left Override to obfuscate an executable file extension. Reference: https://en.wikipedia.org/wiki/Bi-directional_text https://en.wikipedia.org/wiki/Right-to-left EDIT: Here's a file I submitted years ago. https://www.virustotal.com/en/file/3ac80eecd863e0f33fa124d5ae13bbbf070672d03628415823cbd0397aa100fc/analysis/ First submission 2013-08-07 18:58:40 UTC ( 5 years, 8 months ago )
  18. ***This is an automated reply*** Hi, Thanks for posting in the Malwarebytes 3 Help forum. If you are having technical issues with our Windows product, please do the following: If you are having licensing issues, please do the following: Thanks in advance for your patience. -The Malwarebytes Forum Team
  19. The scan reports shown on the 'Reports' tab of MalwareBytes (3.7.1) are listed in an apparently random date/time order. Is there some way to make the list appear in earliest to latest order?
  20. The scan reports shown on the 'Reports' tab of MalwareBytes (3.7.1) are listed in an apparently random date/time order. Is there some way to make the list appear in earliest to latest order?
  21. Notice how its always someone else's opinion what the public wants. ( just reading about the court case.) Give the people themselves a voice, I really don't like these big business types talking about what the people want, because it never reflects on what the people want. And is only beneficial to the company's themselves. and they're wants. Who could think its a good idea to have a program that is supposed to be there to get rid of dangerous and unwanted malware and spyware? to start removing paid for programs. as if they are dangerous. What this encourages is the company with the court rulings those who win to design programs that remove other companies programs in favour of there own. It is Cloak and dagger tactics. And if that's what's truly going on, am not saying it is in this case. but who knows. It's very dishonest. and not helpful to the people who pay money for programs your removing. This should NEVER happen. Isn't it better that companies work together? And design programs that everyone is happy with instead of THIS unhelpful behaviour. Anyways PUPs ignored. !!! FIXED.
  1. Load more activity
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.