Jump to content

updatehelp

Members
  • Content Count

    38
  • Joined

  • Last visited

Everything posted by updatehelp

  1. anywhere.uc-host.net Malwarebytes www.malwarebytes.com -Log Details- Protection Event Date: 5/13/20 Protection Event Time: 5:00 PM Log File: c084ad3e-955c-11ea-8c13-1866da062493.json -Software Information- Version: 4.1.0.56 Components Version: 1.0.896 Update Package Version: 1.0.23778 License: Premium -System Information- OS: Windows 10 (Build 18362.778) CPU: x64 File System: NTFS User: System -Blocked Website Details- Malicious Website: 1 , C:\Program Files (x86)\Microsoft Office\Office15\OUTLOOK.EXE, Blocked, -1, -1, 0.0.0 -Website Da
  2. Hi recnetly i've been getting the message that " Category: Trojan Domain: IP Address: 37.49.227.202 Port: [19] Type: Inbound File: C:\Program Files\Common Files\McAfee\MMSSHost\MMSSHOST.exe" was blocked one of twice a day. i also noticed that mcafee itself has been blocking a lot of incoming connections. what should i do? thx
  3. Results of screen317's Security Check version 0.99.88 Windows 7 Service Pack 1 x64 (UAC is enabled) Internet Explorer 11 ``````````````Antivirus/Firewall Check:`````````````` Windows Firewall Enabled! avast! Antivirus Antivirus up to date! `````````Anti-malware/Other Utilities Check:````````` Java 7 Update 67 Adobe Flash Player 15.0.0.152 Adobe Reader 10.1.11 Adobe Reader out of Date! Google Chrome 38.0.2125.101 Google Chrome 39.0.2171.13 ````````Process Check: objlist.exe by Laurent```````` Malwarebytes Anti-Malware mbamservice.exe Malwarebytes Anti-Ma
  4. hi i rad adw cleaner and JRT. a few weird things happened to my computer. my outlook settings are all gone and it doesn't access my email. also for another program the registration information was deleted "chessbase". also my good bookmarks were deleted. is this all normal? here are the logs ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~Junkware Removal Tool (JRT) by ThisisuVersion: 6.3.1 (10.06.2014:1)OS: Windows 7 Home Premium x64Ran by d on Tue 10/07/2014 at 9:03:51.41~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~ Services ~~~ Registry Value
  5. one other slightly wierd thing malware bytes doesnt automatically update, even though i have it set to update automatically. is this a problem?
  6. so far the redirects seem to be good, nothing popping up for 3 days., yes i do know that folder. everything seems to be ok now. do i need to do anything to clean up the tools?
  7. also i get a resolving host stall in chrome now when i search anything. this doesn't happen in IE though.
  8. sorry i pasted the wrong log, here is the correct one ComboFix 14-09-29.02 - d 09/30/2014 11:07:32.1.8 - x64Microsoft Windows 7 Home Premium 6.1.7601.1.1252.1.1033.18.16279.10905 [GMT -4:00]Running from: c:\users\dl\Downloads\ComboFix.exeAV: avast! Antivirus *Disabled/Updated* {17AD7D40-BA12-9C46-7131-94903A54AD8B}FW: avast! Antivirus *Enabled* {2F96FC65-F07D-9D1E-5A6E-3DA5C487EAF0}SP: avast! Antivirus *Disabled/Updated* {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}..((((((((((((((((((((((((((((((((((((((( Other Delet
  9. hi i get the error application has generated an exception that could not be handled. procedd id = 0x1990, threat id=0x1e50 (7760) click Ok to terminate the application click cancel to debug the application. the program did produce a log though Farbar Recovery Scan Tool (x64) Version: 26-09-2014Ran by dl at 2014-09-30 09:28:20Running from C:\Users\dl\DownloadsBoot Mode: Normal ================== Search Registry: "searchnet;blinkxcore" =========== ===================== Search result for "searchnet" ========== [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\SharedAccess\Parameters\FirewallP
  10. Farbar Recovery Scan Tool (x64) Version: 26-09-2014 Ran by dl at 2014-09-30 09:28:20 Running from C:\Users\dl\Downloads Boot Mode: Normal ================== Search Registry: "searchnet;blinkxcore" =========== ===================== Search result for "searchnet" ========== [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules] "{D92078C4-1B1D-4122-B77C-847294D3E05A}"="v2.10|Action=Block|Active=TRUE|Dir=Out|RA4=66.45.56.100-66.45.56.199|Name=searchnet.blinkxcore.com|" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\SharedAccess\Para
  11. Malwarebytes Anti-Malware www.malwarebytes.org Update, 9/29/2014 7:45:00 AM, SYSTEM, D-HP, Scheduler, Malware Database, 2014.9.29.2, 2014.9.29.4, Protection, 9/29/2014 7:45:26 AM, SYSTEM, D-HP, Protection, Refresh, Starting, Protection, 9/29/2014 7:45:26 AM, SYSTEM, D-HP, Protection, Malicious Website Protection, Stopping, Protection, 9/29/2014 7:45:27 AM, SYSTEM, D-HP, Protection, Malicious Website Protection, Stopped, Protection, 9/29/2014 7:45:45 AM, SYSTEM, D-HP, Protection, Refresh, Success, Protection, 9/29/2014 7:45:46 AM, SYSTEM, D-HP, Protection, Malicious Website Protection,
  12. ~~~~~~~~ Junkware Removal Tool (JRT) by Thisisu Version: 6.2.3 (09.27.2014:1) OS: Windows 7 Home Premium x64 Ran by d on Mon 09/29/2014 at 21:32:49.65 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~ Services ~~~ Registry Values ~~~ Registry Keys Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{70AC9BAC-E975-40CE-B361-AE6048A26D49} Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{70AC9BAC-E975-40CE-B361-AE6048A26D49} ~~~ Files ~~~
  13. after running these i sitll get the popup. agian only for some websites. ~~~~~~~~ Junkware Removal Tool (JRT) by Thisisu Version: 6.2.3 (09.27.2014:1) OS: Windows 7 Home Premium x64 Ran by d on Mon 09/29/2014 at 21:32:49.65 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~ Services ~~~ Registry Values ~~~ Registry Keys Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{70AC9BAC-E975-40CE-B361-AE6048A26D49} Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Se
  14. i was reading anotehr otpic that a system restore fixed this blinkx issue. should i try that?
  15. Malwarebytes Anti-Malware www.malwarebytes.org Scan Date: 9/26/2014 Scan Time: 9:01:14 AM Logfile: Administrator: No Version: 2.00.2.1012 Malware Database: v2014.09.26.04 Rootkit Database: v2014.09.19.01 License: Premium Malware Protection: Enabled Malicious Website Protection: Enabled Self-protection: Disabled OS: Windows 7 Service Pack 1 CPU: x64 File System: NTFS User: dl Scan Type: Threat Scan Result: Completed Objects Scanned: 288290 Time Elapsed: 7 min, 34 sec Memory: Enabled Startup: Enabled Filesystem: Enabled Archives: Enabled Rootkits: Enabled Heuristics: Enabled PUP: Enab
  16. here is the frst log, i didn't realize it created a log b/c it crashed, it looks like maybe i overwrote the first log by running it again, and that the fix worked? Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 26-09-2014Ran by dl at 2014-09-26 08:54:53 Run:8Running from C:\Users\dl\DownloadsLoaded Profiles: UpdatusUser & d & dl (Available profiles: UpdatusUser & d & dl)Boot Mode: Normal============================================== Content of fixlist:*****************CHR Extension: (Auto Refresh Plus) - C:\Users\dl\AppData\Local\Google\Chrome\User
  17. hi i uninstalled norton. then i ran frst fix. but the farbar crashed every time i tried to run it. i restarted teh cmputer and the same thing happened so i downloaded farbar again and ran it and it still crashed. what should i do? thx
  18. actually i reran the gmer as i wasn't sure if i ran it correctly the first time. this itme the log was much smaller her eis it GMER 2.1.19357 - http://www.gmer.netRootkit scan 2014-09-25 23:57:48Windows 6.1.7601 Service Pack 1 x64 \Device\Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-1 Hitachi_ rev.JF4O 698.64GBRunning: cz4v388t.exe; Driver: C:\Users\d\AppData\Local\Temp\pxldapoc.sys ---- Processes - GMER 2.1 ---- Library C:\ProgramData\Trusteer\Rapport\store\exts\RapportGP\baseline\MSVCP80.dll (*** suspicious ***) @ C:\Program Files (x86)\Trusteer\Rapport\bin\RapportMgmtService.exe [10
  19. the tdss killer showed nothing on the scan. i ran for GMER i followed instructions and the scan i ran was a quick scan. i treid to post the log here but i got the error that th log was too long, what should i do?
  20. i keep getting te notification that malware bytes blcoks an ooutgoing process to this site. it happens in chrome as well as my other browsers. basicaly wehni go to any side that has some particular kid of ads this pops up. i have malwayrebytes preium and i attached the protection log as well as frst.txt and addition from running farbar. any help appreciated. thx malwarebytes log 9-24.txt FRST.txt Addition.txt
  21. the link is intersting, but dosen't seem to answer why more files are scanned with a custom scan than with a normal threat scan and why a custom scan takes much longer than a regular threat scan.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.