Leaderboard

Hi Grimallday: I don't want to interfere with Porthos' troubleshooting, but while you're waiting for further assistance you should confirm that KB4474419 (rel. 23-Sep-2019) is installed on your Win 7 SP1 computer. KB4474419 adds SHA-2 code signing support (and is called the the "Microsoft 2019-09 Security Update" <here> in the system requirements) and must be installed before you can install the latest Malwarebytes v4.5.x program. I assume the current standalone offline installer mb4-setup-consumer-4.5.9.198-1.0.1699-1.0.56987.exe would not even launch unless your system supported SHA-2 code signing but it might be something you want to check. If your Win 7 OS has Service Pack 1 (SP1) (see the Computer Hope article <here>) but you aren't sure if it supports SHA-2 code signing go to Control Panel | Programs and Features | View Installed Updates and search for KB4474419. When searching, enter the full KB number in the search box [i.e., search for "KB4474419" (without the quotes) and not a partial string like "4474419"]. Note that AdvancedSetup posted a set of "abbreviated" instructions on 05-Jun-2021 in murph's thread Now MBAM Wants a Microsoft Security Update that is intended for Win 7 SP1 users who already have most of the Windows security updates released prior to end of support on 14-Jan-2020 and just want to install KB4474419. -------------- 64-bit Win 10 Pro v21H2 build 19044.1706 * Firefox v101.0.1 * Microsoft Defender v4.18.2203.5-1.1.19200.6 * Malwarebytes Premium v4.5.9.198-1.0.1699 * Macrium Reflect Free v8.0.6758 * Inspiron 5583/5584 BIOS v1.18.0 Dell Inspiron 15 5584, Intel i5-8265U CPU, 8 GB RAM, 256 GB Toshiba KBG40ZNS256G NVMe SSD, Intel UHD Graphics 620

Your first report of today had put nothing in quarantine. The last scan ( also) put nothing in quarantine. I would like to see what if anything is actually in Quarantine before you do anything on your own. I would like a report set for review. This is a report only. Please download MALWAREBYRES MBST Support Tool Once you start it click Advanced >>> then Gather Logs Have patience till the run has finished. Upload an archive once it is done. Attach the mbst-grab-results.zip from the Desktop. Please attach mbst-grab-results.zip to your reply 😀

This is a False positive. Please turn off the above non default setting.

Hi JhonHamilton: See Malwarebytes employee AdvancedSetup's 11-Jun-2022 post <here> in Adam2022's thread. Malwarebytes has acknowledged that there is a bug in the Excel Macro 4.0 Abuse Prevention protection technique of Malwarebytes' Exploit Protection that seems to have been introduced by Malwarebytes Premium v4.5.9.198-1.0.1699 (rel 10-Jun-2022) and that it could take "days for a fix or weeks or months". In the mean time AdvancedSetup is advising that MS Excel users leave the Excel Macro 4.0 Abuse Prevention protection technique DISABLED in their advanced Exploit Protection settings until a bug fix is released. It would still be helpful if you could attach your mbst-grab-results.zip diagnostic logs generated by the Malwarebytes Support Tool (Advanced tab | Gather Logs) to your next reply. Attached logs can only be viewed by Malwarebytes employees and a few technical experts with advanced permissions, and those logs will show Malwarebytes your current Windows OS, Malwarebytes version and custom settings, etc. The more information they can gather about affected systems the sooner this bug will be fixed. ----------- 64-bit Win 10 Pro v21H2 build 19044.1706 * Firefox v101.0.1 * Microsoft Defender v4.18.2203.5-1.1.19200.6 * Malwarebytes Premium v4.5.9.198-1.0.1699 * Macrium Reflect Free v8.0.6758 * Inspiron 5583/5584 BIOS v1.18.0 Dell Inspiron 15 5584, Intel i5-8265U CPU, 8 GB RAM, 256 GB Toshiba KBG40ZNS256G NVMe SSD, Intel UHD Graphics 620

hello @Googolplex As starter steps, lets be sure this pc has the very latest release version of Malwarebytes. Then set some adjustments. Then do a new scan. [ 1 ] Do a Check for Update using the Malwarebytes Settings >> General tab. See this Support Guide https://support.malwarebytes.com/hc/en-us/articles/360042187934-Check-for-updates-in-Malwarebytes-for-Windows When it shows a new version available, Accept it and let it proceed forward. Be sure it succeeds. If prompted to do a Restart, just please follow all directions. [ 2 ] Some adjustments. Start Malwarebytes for Windows. Click the Settings icon. Click the tab marked SECURITY Under the section "SCan options" scroll down to "Use expert system algorithms to identify malicious files". See that it is set to the far left ( OFF position). [ 3 ] Click the small x on the bar titled "Settings" to exit this section. Next click the blue button marked Scan. When the scan phase is done, be real sure you Review and have all detected lines items check-marked on each line on the left. That too is very critical. >>>>>> 👉 You can actually click the topmost left check-box on the very top line to get ALL lines ticked ( all selected). <<<< 💢 Please double verify you have that TOP check-box tick marked. and that then, all lines have a tick-mark Then click on Quarantine button. Then, locate the Scan run report; export out a copy; & then attach in with your reply. See https://support.malwarebytes.com/hc/en-us/articles/360038479194-View-Reports-and-History-in-Malwarebytes-for-Windows-v4 😉 Please just only attach reports as we go alog.

Hi JhonHamilton: From my 11-Jun-2022 post in Adam2022's Excel Macro 4.0 Abuse Protection Prevents Opening Password Protected Files: Are you able to open your Excel file if you DISABLE the Excel Macro 4.0 Abuse Prevention protection technique in Malwarebytes (Settings | Security | Exploit Protection | Advanced Settings | Application Behavior Protection | MS Office column | Excel Macro 4.0 Abuse Prevention)? It would be helpful if you could run the Malwarebytes Support Tool (Advanced tab | Gather Logs) and attach the mbst-grab-results.zip file to your next post. If the .zip file is created on your desktop it will have to be moved to a different location (e.g., to your Documents or Downloads folder) before you can attach it to your post. ----------- 64-bit Win 10 Pro v21H2 build 19044.1706 * Firefox v101.0.1 * Microsoft Defender v4.18.2203.5-1.1.19200.6 * Malwarebytes Premium v4.5.9.198-1.0.1699 * Macrium Reflect Free v8.0.6758 * Inspiron 5583/5584 BIOS v1.18.0 Dell Inspiron 15 5584, Intel i5-8265U CPU, 8 GB RAM, 256 GB Toshiba KBG40ZNS256G NVMe SSD, Intel UHD Graphics 620

Here are some suggestions to help you keep the computer safer. Make sure you set up a good backup to an external drive. Recommend using a Password Manager for all websites, etc. that require a password. Never use the same password on more than one site. https://www.howtogeek.com/240255/password-managers-compared-lastpass-vs-keepass-vs-dashlane-vs-1password/ Make sure you're backing up your files https://forums.malwarebytes.com/topic/136226-backup-software/ Keep all software up to date - PatchMyPC - https://patchmypc.com/home-updater#download Keep your Operating System up to date and current at all times - https://support.microsoft.com/en-us/windows/windows-update-faq-8a903416-6f45-0718-f5c7-375e92dddeb2 Further tips to help protect your computer data and improve your privacy: https://forums.malwarebytes.com/topic/258363-tips-to-help-protect-from-infection/ Please consider installing the following Content Blockers for your Web browsers if you haven't done so already. This will help improve overall security Malwarebytes Browser Guard Google Chrome: https://chrome.google.com/webstore/detail/malwarebytes-browser-guar/ihcjicgdanjaechkgeegckofjjedodee Microsoft Edge: https://support.malwarebytes.com/hc/en-us/articles/4413298736787-Install-Malwarebytes-Browser-Guard-on-Microsoft-Edge-browser Mozilla Firefox: https://addons.mozilla.org/en-US/firefox/addon/malwarebytes/ uBlock Origin Google Chrome: https://chrome.google.com/webstore/detail/ublock-origin/cjpalhdlnbpafiamejdnhcphjbkeiagm Microsoft Edge: https://microsoftedge.microsoft.com/addons/detail/ublock-origin/odfafepnkmbhccpbejgmiehpchacaeak Mozilla Firefox: https://addons.mozilla.org/en-US/firefox/addon/ublock-origin Further reading if you like to keep up on the malware threat scene: Malwarebytes Blog https://blog.malwarebytes.com/ Thanks and good luck

After a good rest, use this application to remove tools used and quarantined items (Except for Malwarebytes Antimalware): Please download KpRm by Kernel-panik and save to your Desktop. Click on KpRm.exe to run the tool. Vista/Windows 7/8/10 users right-click and select Run As Administrator. Put a check mark next to these items: - Create Restore Point - Delete tools - Delete now Click the "Run" button. When the tool has finished, it will create and open a log report and delete itself. Regards

Won't touch those with a ten feet pole. Download the enclosed file. Save it next to FRST64. Run FRST64 as you did before and click on the Fix button. A Fixlog.txt will be produced in the same location FRST64 was ran from. Attach it to a reply for us to see. Fixlist.txt After a restart, Scan with FRST64 and FFS. Post the FRST.txt, Addition.txt, FSS report and the Fixlog.txt.