Elochai

Still have not heard from Malwarebytes support team. I still have a key I have fully paid and renewed in September that claims to be expired. I feel like I paid to only lose a month or more of my subscription. I know times are hard, but is Malwarebytes not allowing support staff to work from home ? Is that the reason there is a shortage of support employees ? It just seems weird to me as I know the company I work with, we just VPN and remote desktop to the network and do the work from home on computers, and I know my buddy in the call center is doing his job from home by VPN and VOIP for answering calls. Just wondering what Malwarebytes is doing or what plan if any do they have for getting back on track ? Guess the next question is, should I keep waiting for support, or would it be better for me to just contact Visa, reverse the payment, and just buy a new license altogether ?

ticket 3219009 i tried a clean install as well and no luck. Still says the key is expired and to update payment information. This is very weird as payment went through back in September and the renewed key says it good for another year in my account.

I open a support ticket on this matter back on sunday but no one has gotten back to me. Anyway I renewed my subscription for a key I have for 6 users. Unfortunately Malwarebytes keeps telling me the key is expired and that I need to update my payment information. I have made sure Malwarebytes is up to date, have re-entered my key right from the order complete email. Still says it is Expired. Yet the payment has went through, and my account on the website here says it is active for another year. So Any idea's why this is happening ? I'd like to get it fixed as my mom uses that license for her laptop and she not very computer literate.

Ok here the file. I really don't think I am infected. I believe this to be a bunch of brute force attacks to get into Remote Desktop. mbst-grab-results.zip

As posted over here I been getting these attacks on my system. I have ran a full scan with both Malwarebytes and AVG. Both come up clean. I also used Process Explorer and ran all active processes through VirusTotal and all came back fine. These are my FRST64 logs:FRST.txt Addition.txt From what I can tell is that these attacks are brute force attacks, trying to find an open Remote Desktop Connection to break into to gain control over the system. I read these messages after looking up some of the IP's in the abuse ip database. For now I have disabled Remote Desktop on my system and Malwarebytes has stop reporting blocked RTP connections. But I can't keep Remote Desktop off as I often need to log into this system by it when out of the area.

I'm not sure what is going on but I been getting inbound connection attempts every 15 mins it seems today. It appears to have started in the early hours of the morning. The computer has been rendering 4k footage all last night and today so it hasn't really been used as it CPU and GPU has been working non-stop. The attacks started out spread apart and have now gone to about 15 - 20 mins apart. They seem to use different IP's. Anyone have any info on this ? Ports are usually in the 50000's range and up. Only a few have been lower numbers. Never the same port number. File is always C:\Windows\System32\svchost.exe I attached an image of the ones that been caught by MalwareBytes. I do not run any P2P services or torrent services on this system. I really don't know why I am getting these inbound connection attempts. I have only two other systems other then my Desktop on this network that share the same router. A laptop, and a NAS box.

Thank you David, I am happy this is the case. I was reading someone else's post and when I went to the FAQ on the page and clicked I have a lifetime license, am I covered ?, I was given the response for the next question without the heading. So I took that answer as the answer to my question which was saying I have to buy a subscription. I'll blame IE for not going to the right anchor for the question I clicked . But I am happy to see that my lifetime license will stay that way. You been very helpful

I just updated to the new looking MB and though it does look nice, I can't help but feel I am being ripped off / lied too. When I bought this software, I paid for a lifetime license with the promise of always having the latest updates at hand. That a promise of never having to repay for the software and always being protected. But now from what I read, MB is no longer honoring people who bought these licenses. Now I like MB and I don't mind having to pay for an add on or something, but I don't like being lied too. MB should honor all customers who bought into Lifetime Licenses and allow them to keep that service like any other company would as it respectful, not to mention false advertising to not allow it. If you want to make any newcomers pay per year go for it, but allow your lifetime members to stay life time members. And I don't want to hear (well you get 3 computers now). Could case less about 3 computers, I bought a single lifetime license for a single computer and I be more then happy to keep it that way as that's what I paid for. Scott,

Ok thank you ! I'm happy their a way to fix this as I just did a check on the IP address my VPN provider uses and it seems Malwarebytes has blocked an entire datacenter within Sweden. I know spammers and malware creators use servers all over the world but, it seems kind of extreme to block an entire datacenter. That a large amount of servers and websites. Like any datacenter their goanna be a few servers being rented or owned that are used in bad ways but your not goanna have a full datacenter at them things.

I use a VPN service and one of the VPN networks I use, I can't connect to because Malwarebytes blocks it. Which means my VPN access to that site is completely shut off. How can I add an exception to Malwarebytes so I don't got to disable the full program just to get access to one of my VPN networks ?

Thanks Kevin for all the help again. Won't need to read the info on security and best practices tho as I know the does and don'ts for not getting infected or having data read. I always keep the AVG up to date and I always use an encrypted VPN. Only reason I got this infection this time was because I left my computer in the hands of my Mother who is older and not to up to date on computers. Solution, she can use my laptop next time because I couldn't care if I had to format that thing. But I did come out of this issue on an upside. I got a new program to help me stay protected for less then $30, I learned some new programs and tricks to deal with suspected infections, and I found a with a great community who are friendly, knowledgeable, and very willing to help. So once again thank you Kevin and everyone else here at Malwarebytes

No as long as you believe I am good to go, then I will trust that all is good. I must go order a Christmas gift now, been afraid to do so using this computer thinking I am going to get my card number took by some key logger. by the way, thanks Kevin for all your help. I can't give much but I hope you will appreciate my 2 GBP that I sent you for all your help.

Oh sorry, I wanted to add this to my last post as well but don't see an edit button. I still have 3 rundll32.exe processes showing in task manger

Ok I have done everything you asked but the defrag as the drive is an SSD and doesn't need it. So is it safe to say that this infection I had that started out as not allowing me to enter the right password into any password protected field is gone now ? I can't help but think that the only purpose of such a virus is to log the password they enter and force them to have too reset passwords and log any information needed for changing a user password such as DOB, Names, and other security information. I'd like to think I am safe now so I can order a Christmas gift for my girl without wondering if a virus is on my computer reporting back to some scum bag my card numbers and account info. This is why I use VPN's and ID security programs, but a VPN can't stop a key logger virus / infection if it on your computer.

I know your looking to remove this malware but I want to make a suggestion that will help fight these type of infections. I am an adf.ly member myself. I use the adf.ly links on my own personal websites to make a little money to help with the hosting cost. If an adf.ly member has made a virus or some malware that forces you to see adf.ly ad's just for opening your browser then you should get there adf.ly ID number which will be in the top left hand of the screen. The adfly image itself which is a link back to there site will have a referral number. Copy it down, report it to adf.ly, even provide a link to this topic as proof. They don't put up with this kind of abuse from any of their members.