J_townSonny

Just a side note --- The only sites I went to over the last few days was my Yahoo email and Facebook. I opened 2 stories on FB. 1 was about a US Army I.E.D. Field Tech and the other about a Police Officer and the 14 y/o kid who's life he saved and is now a cadet for the same police dept. It might have been hidden in one of those video on FB.

My PC was experiencing a rather sluggish internet connection yesterday morning and I noticed before I went to bed at 10:30 am (I work 6pm-6am for the railroad) that internet connection was starting to get sporadic. Just thought it was due to high winds yesterday but when I got home, there was no connection. My service is thru Comcast; Cable, phone, net; and I called to have a reset done. No change and full signals from all 3. I checked the lines and splitters I checked the lines from the splitter box on the power line, the box for the entire block is directly behind my garage, to the house. No corrosion, splits or broken connections. Finally I checked my PC settings. I ran the troubleshooter programs and it found nothing. Checked drivers; nothing. Checked settings and found the LAN/proxy settings were changed, the Windows permissions were changed and so was the auto-config. for home network was changed. Reset them and restarted the PC, but nothing helped. I ran MalwarebytesPRO and it found nothing. So, as I usually do when I think there still might be something there, I ran Windows Defender. It Did find something: Ransom: JS TechBrolo. I checked to make sure it was quarantined then restarted the PC. As soon as it loaded I had internet connection and all settings were back to normal. Please have your techs check as to How & Why it got passed MB-PRO.

I also need to add that every time the MW pop-up has blocked a website, the web address is now in Red; IP, 93.174.93.219. This is the way it should display, correct? This color difference doesn't refer to a different threat level, does it?

I don't understand why these are not only found as PUP's but also have not been deleted. Sys: XP /SP3 x86 Malwares: Premium. Labeled as: [PUP Optional.BundleInstaller.A.TYPE:Folder LOCATION: C:\Documents and Settings\USER\Application Data\101L1I1PtF1F1C1N] [PUP Optional.BundleInstaller.A.TYPE:Folder LOCATION:C:\Documents and Settings\USER\Application Data\101L1I1PtF1F1C1N\Adobe AIR Free Download Packages] Then these in files [PUP Optional.DriverUpdate.A.TYPE:File LOCATION: C:\Documents and Settings\USER\My Documents\Downloads\Driver Update-setup.exe101L1I1PtF1F1C1N] [PUP Optional.DriverUpdate.A.TYPE::File LOCATION: C:\Documents and Settings\USER\Application Data\101L1I1PtF1F1C1N\Adobe AIR Free Download Packages\uninstaller.exe]

Confirmed that is a MS program thru an HP tech doing remote access for my printer.

I just went to open up FF to check my mail and saw this running in the taskmgr: [mpam-cf081fdb.exe.] I assumed it was MB running but when I opened it from the desktop; it wasn't doing a virus upgrade. I always leave taskmgr open when I get off the web so that's why I found it today. Usually when MB run, like any other virus software, it slows the pc down so I usually get offline when they start. Never saw it before. today. PC was idle since 7 am. Getting worried. Was this MB auto clipboard export to MB virus center? Win XP Home 2003 SP3, (not sure if it's 32 or 64 bit) Comcast Cable ISP, the only other virus/firewall is MSE.

I have donne some digging and have found that this is either a trojan , something connected with avast, Win7 or an infected MW Pro. I don't use and have never installed Avast. My OS is Win XP Home 2003 SP/3. MW has not failed to scan, update or block a virus or malware so I don't think that's it. I did notice that when that popped up in task manager that MW PRO started again with "malicious website blocking diabled" again but once I do a manual update, it goes back to normal. So what is unsecapp.exe? I Have been having issues with videos playing on FB and Yahoo so I have set Flash to "ask to activate" when I want to see a vid. Ran debugger on plug-in container and is ok but after that unsecapp.exe appears again in task manager. Since that has been in the task manager, everytime I run MW PRO, it seems to take forever to finish: averaging 1h 30m on full scan. Is this a type of virus ir thread or something that is building in my system witing to crash it?

I posted this in another part of MW forums and was directed to post here. I guess this is where all the Experts are. I though, am not one of them, as you can tell. Hi folks. How's it going? I have an odd question that I cannot seem to find an answer for. I have MW Pro because I have found it to be the best software for what I need; and for the price; it Can't be beat. My question is: My Comcast cable service was interrupted for over 4 hours during the last snow storm 3/12/14. While the internet was out of service I disconnected my computer from the modem ;over 8+ hours; and ran MW full scan while I had the chance. As usual it found nothing, which means it's doing it's job. Now for the problem. During that 8+ hour down time; I kept getting a MW pop-up balloon every so often as if I was surfing the net, stating that MW blocked a potentially harmful incoming attack/site. Why on Earth would That pop-up? I was not connected to the net and my desktop does not have any wi-fi connected to or installed in. I do have Magic-Jack but it to was unplugged from the computer at that time. PC: eMachines 1200, OS: XP Home 2003. I little help or info would go a long way with this issue. It was quite annoying.

Thanks a heap. Woohoo! Customer service at it's best. MW Rocks!

What forum section do I need? My location is the Chicago metro area of Illinois. Thanks for your help.

The thing was that at that particular time there was No physical internet connection. I don't have Skype or ooVoo. I checked that particular forum and couldn't find anything related. Those were "when connected to the net" mine was not connected. Is MW Pro malfunctioning?

This is the first time trying to post from logs, Usually I see 2 progs to download and run then post and wait then rerun... As you can see from 16:19 thru to the end, I was not connected. I fell asleep and reconnected before I went to work at 4a the next morn. What I am most puzzled about is that, I just noticed it, most of them are an outgoing block. I really find that strange.

I got home at 4p that day, my hours are 4a to 3p M-F, and the cable was already out. That's when I unplugged it. I hope this is what you're asking for: 2014/03/12 03:28:56 -0500 EMACHINE-7AF6B9 USER IP-BLOCK 93.174.93.51 (Type: incoming) 2014/03/12 03:46:47 -0500 EMACHINE-7AF6B9 USER IP-BLOCK 80.82.78.85 (Type: incoming) 2014/03/12 07:25:39 -0500 EMACHINE-7AF6B9 USER IP-BLOCK 222.186.31.43 (Type: incoming) 2014/03/12 09:28:29 -0500 EMACHINE-7AF6B9 USER IP-BLOCK 93.174.93.51 (Type: incoming) 2014/03/12 10:47:17 -0500 EMACHINE-7AF6B9 USER MESSAGE Executing scheduled update: Daily 2014/03/12 10:48:00 -0500 EMACHINE-7AF6B9 USER MESSAGE Starting database refresh 2014/03/12 10:48:00 -0500 EMACHINE-7AF6B9 USER MESSAGE Scheduled update executed successfully: database updated from version v2014.03.11.08 to version v2014.03.12.09 2014/03/12 10:48:00 -0500 EMACHINE-7AF6B9 USER MESSAGE Stopping IP protection 2014/03/12 10:48:02 -0500 EMACHINE-7AF6B9 USER MESSAGE IP Protection stopped successfully 2014/03/12 10:49:11 -0500 EMACHINE-7AF6B9 USER MESSAGE Database refreshed successfully 2014/03/12 10:49:11 -0500 EMACHINE-7AF6B9 USER MESSAGE Starting IP protection 2014/03/12 10:49:50 -0500 EMACHINE-7AF6B9 USER MESSAGE IP Protection started successfully 2014/03/12 15:28:32 -0500 EMACHINE-7AF6B9 USER IP-BLOCK 93.174.93.51 (Type: incoming) 2014/03/12 16:19:15 -0500 EMACHINE-7AF6B9 USER IP-BLOCK 80.82.70.116 (Type: incoming) 2014/03/12 16:34:54 -0500 EMACHINE-7AF6B9 USER IP-BLOCK 88.214.225.161 (Type: outgoing) 2014/03/12 16:34:57 -0500 EMACHINE-7AF6B9 USER IP-BLOCK 88.214.225.161 (Type: outgoing) 2014/03/12 16:34:58 -0500 EMACHINE-7AF6B9 USER IP-BLOCK 88.214.225.161 (Type: outgoing) 2014/03/12 16:35:03 -0500 EMACHINE-7AF6B9 USER IP-BLOCK 88.214.225.161 (Type: outgoing) 2014/03/12 16:35:03 -0500 EMACHINE-7AF6B9 USER IP-BLOCK 88.214.225.161 (Type: outgoing) 2014/03/12 16:35:03 -0500 EMACHINE-7AF6B9 USER IP-BLOCK 88.214.225.161 (Type: outgoing) 2014/03/12 16:35:03 -0500 EMACHINE-7AF6B9 USER IP-BLOCK 88.214.225.161 (Type: outgoing) 2014/03/12 16:35:05 -0500 EMACHINE-7AF6B9 USER IP-BLOCK 88.214.225.161 (Type: outgoing) 2014/03/12 16:35:06 -0500 EMACHINE-7AF6B9 USER IP-BLOCK 88.214.225.161 (Type: outgoing) 2014/03/12 16:35:11 -0500 EMACHINE-7AF6B9 USER IP-BLOCK 88.214.225.161 (Type: outgoing) 2014/03/12 16:35:12 -0500 EMACHINE-7AF6B9 USER IP-BLOCK 88.214.225.161 (Type: outgoing) 2014/03/12 16:35:16 -0500 EMACHINE-7AF6B9 USER IP-BLOCK 88.214.225.161 (Type: outgoing) 2014/03/12 16:35:19 -0500 EMACHINE-7AF6B9 USER IP-BLOCK 88.214.225.161 (Type: outgoing) 2014/03/12 16:35:24 -0500 EMACHINE-7AF6B9 USER IP-BLOCK 88.214.225.161 (Type: outgoing) 2014/03/12 16:35:24 -0500 EMACHINE-7AF6B9 USER IP-BLOCK 88.214.225.161 (Type: outgoing) 2014/03/12 16:35:27 -0500 EMACHINE-7AF6B9 USER IP-BLOCK 88.214.225.161 (Type: outgoing) 2014/03/12 16:35:33 -0500 EMACHINE-7AF6B9 USER IP-BLOCK 88.214.225.161 (Type: outgoing) 2014/03/12 16:36:33 -0500 EMACHINE-7AF6B9 USER IP-BLOCK 88.214.225.161 (Type: outgoing) 2014/03/12 16:36:36 -0500 EMACHINE-7AF6B9 USER IP-BLOCK 88.214.225.161 (Type: outgoing) 2014/03/12 16:36:36 -0500 EMACHINE-7AF6B9 USER IP-BLOCK 88.214.225.161 (Type: outgoing) 2014/03/12 16:36:42 -0500 EMACHINE-7AF6B9 USER IP-BLOCK 88.214.225.161 (Type: outgoing) 2014/03/12 16:36:42 -0500 EMACHINE-7AF6B9 USER IP-BLOCK 88.214.225.161 (Type: outgoing) 2014/03/12 16:36:54 -0500 EMACHINE-7AF6B9 USER IP-BLOCK 88.214.225.161 (Type: outgoing) 2014/03/12 16:36:57 -0500 EMACHINE-7AF6B9 USER IP-BLOCK 88.214.225.161 (Type: outgoing) 2014/03/12 16:37:03 -0500 EMACHINE-7AF6B9 USER IP-BLOCK 88.214.225.161 (Type: outgoing) 2014/03/12 16:37:15 -0500 EMACHINE-7AF6B9 USER IP-BLOCK 88.214.225.161 (Type: outgoing) 2014/03/12 16:37:18 -0500 EMACHINE-7AF6B9 USER IP-BLOCK 88.214.225.161 (Type: outgoing) 2014/03/12 16:37:24 -0500 EMACHINE-7AF6B9 USER IP-BLOCK 88.214.225.161 (Type: outgoing) 2014/03/12 16:37:36 -0500 EMACHINE-7AF6B9 USER IP-BLOCK 88.214.225.161 (Type: outgoing) 2014/03/12 16:37:39 -0500 EMACHINE-7AF6B9 USER IP-BLOCK 88.214.225.161 (Type: outgoing) 2014/03/12 16:37:45 -0500 EMACHINE-7AF6B9 USER IP-BLOCK 88.214.225.161 (Type: outgoing) 2014/03/12 16:53:17 -0500 EMACHINE-7AF6B9 USER IP-BLOCK 78.140.142.60 (Type: outgoing) 2014/03/12 16:53:38 -0500 EMACHINE-7AF6B9 USER IP-BLOCK 78.140.142.60 (Type: outgoing) 2014/03/12 16:53:41 -0500 EMACHINE-7AF6B9 USER IP-BLOCK 78.140.142.60 (Type: outgoing) 2014/03/12 16:53:47 -0500 EMACHINE-7AF6B9 USER IP-BLOCK 78.140.142.60 (Type: outgoing) 2014/03/12 17:00:21 -0500 EMACHINE-7AF6B9 USER IP-BLOCK 93.174.93.51 (Type: incoming) 2014/03/12 20:43:55 -0500 EMACHINE-7AF6B9 USER IP-BLOCK 93.174.93.51 (Type: incoming) 2014/03/12 20:51:08 -0500 EMACHINE-7AF6B9 USER IP-BLOCK 222.186.31.43 (Type: incoming) 2014/03/12 23:11:39 -0500 EMACHINE-7AF6B9 USER IP-BLOCK 222.186.38.116 (Type: incoming)

Hi folks. How's it going? I have an odd question that I cannot seem to find an answer for. I have MW Pro because I have found it to be the best software for what I need; and for the price; it Can't be beat. My question is: My Comcast cable service was interrupted for over 4 hours during the last snow storm. While the internet was out of service I disconnected my computer from the modem and ran MW full scan while I had the chance. As usual it found nothing, which means it's doing it's job. Now for the problem. During that 4 hour down time; I kept getting a MW pop-up balloon every so often as if I was surfing the net, stating that MW blocked a potentially harmful incoming attack/site. Why on Earth would That pop-up? I was not connected to the net and my desktop do not have any wi-fi connected to or installed. I do have Magic-Jack but it to was unplugged from the computer at that time. PC is an eMachines 1200, XP Home 2003. I little help or info would go a long way with this issue. It was quite annoying.

I have purchased the full MalwarebytesPro on 4/13/11 and now for some reason I cannot enable "malicious website protection" module on the setings. What is causing it? It has always been enabled and now it's not. Tried to restart and change it in safe mode and still the same thing. This is perplexing to say the least.

Howdy guys. Haven't been here in a while since I got help form you guys months ago. Here's my querry; I ran the usual weekly scans of MalPro and MSE because my system has been slower than normal. Both came up clean so I Google searched different processes running in task manager. Found another techie site that had pretty much everything searchable. Had multiple, as in 7, svchost.exe running at the same time. Went back to the tech site and click click click found the explination. It also had a scan option; so I ran it. It was Ad Aware Anti-virus (free). All it found was Airinstaller(fs). Since I have different Adobe applications installed on my system, my question is this; Could it have mistaken the Adobe AIR application for the virus? Sys info: 2007 eMachines EL1200, Windows XP Home2002 SP3, AMD 2650e processor,1.6 GHz 896mb RAM, Comcast ISP, MagicJack plug-in, Firefox browser.

Thanks, I didn't know there was a difference. I went to Java.com and that was what the site recommended. Do I need to uninstall Java JDK and Java JRE and reinstall both or just one? Does that also include the update patch?

Updated info: This is a list of what was downloaded and installed to attempt to fix. Hope this helps: Printer Diagnostic.diacab MSJAVA_x86_build_3805 (recent Java patch) HPPSdr (HP scanner doctor) HPPSC700SeriesDisconnectionFix, (patch) a1403_05_enu_xp (printer driver), MicrosoftFixit.Printing.FISC13328027156214767.6.1.run JavaRa-2.0 jdk-6u38-nb-7_2_!-windows-i586-ml jre-6u38-windows-x64 jre-7u10-windows-x64 <------(last auto update)

I have gone o the HP website and have tried all the suggestions on partial and full reset. I had no prob before updates; albeit it was 3 months ago since I scanned anything; but it wouldn't even recignize the printer after the last (12/10) update. I uninstalled and then reinstalled the driver from the HP site but still nothing. Another thing I noticed was the icon was missing from my desktop after the update. What it does is print from the web, checked this by using the HP print check feature in their site and it prints from the pc. What it doesn't do is scan. Now when I start the printer and lift the hood to scan, nothing pop up on my desktop anymore. I worked on this for 6 hours last night and I became so frustrated I gave up. The last time I tried to scan I got a prompt box satating something close to: Scanner function disconnected - Java Virtual Machine could not load properly. Not sure if I missed a step because of being so frustrated. System is XP Home 2002 w/SP3 and the scanner is a HP PSC 750 All-in-One.

There is NO VIRUS in the netbook I have removed it but the after effect is the keyboard is screwed up. What can I do to fix the shortcut issue?

I'm not sure about why this is happening. I do have Magicjack and some of it Might be from the changing ad on it's own skin BUT it happens even when not connected: i.e. when Comcast Cable went offline for about 10 hours. This seems odd that it's blocking incoming sites when there is NO internet connection. It has even started to run when the cable was offline for 4+ hours because it detected an "active" incoming threat. How is that possible? Just one more question; Why do I get a pop-up when I run MBAM-PRO saying it's 4, 5, 6 days out of date when it's set to auto update daily? Are there some parts of a worm or trojan that is in my system that is setting MBAM off but not able to fully detect because it's not complete/large enough to remove? Could it be nothing more than just a system fluke?

The laptop is up and running and I'm not asking for help deleting or help config'ing the netbook. I'm asking what I need to do to get the keyboard out of shortcut mode. As explained above, I have done a step by step in the control panel and none of that has worked. How can I get out of shortcut mode? It was operational until it went into screensaver but once it came out of that mode, it was back to shortcut mode.

I have a Gateway LT10 Netbook and after a PUM virus was found and removed the keyboard stopped working properly. It seems only to work in partial shortcut mode. I have tried to restet it thru the control panel using BOTH Accessibility Options and Keyboard. I have held down both shift buttons for 5-10 sec to reset it, NOPE. I have done the 5x on the enter to reset, NOPE. I have even gone so far as to try ALL suggestions back to back and, as you can guess; NOPE. I have even tried to roll back driver and; at one point in time it was working; until it went to sleep then after I woke it up; guess what; it was back to being screwed up. AARRRGH! I can't figure this out! I'm going to look like Kojak in a couple of days if I can't get this straightened out. If someone could help me out either before 4p today or before 4p tomorrow while I'm here at the shop it would be HIGHLY appreciated!

Thanks for your info. I'll get to this tomorrow around 7p since I have a shopload of cars to get done. If I run into any problems I know Exactally where to go....Right Here.

Here is my question, in a not so vague form: I went to Java.com to check what version I had and it said it wasn't working. Hmm? This is my question: I have recieved a promt for a Java update J6 U37 and nothing matches what I have, let alone a non-working(?) installed version (http://www.oracle.co...es-1863283.html). The update I found was J6 U38 doing a Google search. I have heard that J6 U37 was a virus written to fool users. My old boss just had J7 U9 uninstalled because it kept freezing after installiation so that version is not an option for me either. Do I need to uninstall what I have and download J6U38 b01 or just click the update? Why has this become sooo complicated? I checked my system (Win XP Home 2002 SP3) and here is the path I found with what is installed currently: C:\Java\jre1.6.0_05\bin-File version 6.0.50.13. I hope this is a little clearer.