Jump to content

general714

Members
  • Posts

    11
  • Joined

  • Last visited

Everything posted by general714

  1. Thanks but provision of these logs in a public forum is not advisable. Thanks anyway.
  2. Malwarebytes keeps putting NetServices into quarantine (along with three registry settings related to this). Why does it keep getting onto my system? Is it a false positive? Would appreciate any advice on this. Thanks! File: 1 Trojan.Agent, C:\WINDOWS\SYSTEM32\TASKS\Microsoft\Windows\NetService\Network\NetServices, Quarantined, 490, 1050593, 1.0.54466, , ame, , B56AFAFD1D58BA36EB36E18718BC1E46, 6076495DFE60D3AD6299A7B567FF1B4795CCE2DD30A0D367344C63DDF04EEC9B Registry Key: 3 Trojan.Agent, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\Microsoft\Windows\NetService\Network\NetServices, Quarantined, 490, 1050593, , , , , , Trojan.Agent, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{3B0188C0-4531-4C39-A816-2DF682E76AE7}, Quarantined, 490, 1050593, , , , , , Trojan.Agent, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\BOOT\{3B0188C0-4531-4C39-A816-2DF682E76AE7}, Quarantined, 490, 1050593, , , , , ,
  3. Thanks for this workaround, Popeye, much appreciated. As you say, we'll just have to wait for updates to get it fixed but the workaround is great.
  4. Tried that, doesn't work for me - need to disable the MB Browser Guard completely.
  5. Definitely a bug with Malwarebytes Browser Guard as Firefox works fine without Malwarebytes messing it up. Would appreciate an update to fix it...
  6. Hi - since FF updated to v80, I cannot download photos with Malwarebytes Browser Guard installed. Works fine without it there so it's not another add-on etc. Every time I try, it shows up as 'cancelled' in the download area, and I have to 'retry' it to get it to download. I deleted and reinstalled the Browser Guard, same thing. Weirdly, even if I disable all four options on the Browser Guard I still cannot download the photos, I have to uninstall it to get this basic functionality back for FireFox. Any ideas? I'd love to keep it installed but I do need to download photos routinely. Thanks! 🙂
  7. Been wondering why sites are so slow to load, and the MB Browser Guard is the culprit. Disabled add-ons one by one and this is it. bbc.co.uk/news takes almost a minute to load, with everything unchecked on Browser Guard, whereas it loads almost immediately without Browser Guard being activated. Slows down browsing everywhere so much as to be unusable. A real shame as it blocked so many unwanted tracking and surveillance items, but can no longer use it. Very sad!
  8. Hi - PowerPoint will not open when being 'protected' by Malwarebytes 3.0. Works fine when protection is turned off. Word and other Office apps work fine...
  9. I had the same thing - I just shut down Malwarebytes 3.0 ('Quit'), turned it back on, and web protection started after about 30 seconds.
  10. Hi Gringo - not sure if you read my original post, I wasn't asking for your assistance but was just highlighting my problem and the resolution in case it would help another Forum user. Thanks anyway. I resolved the issue as was indicated in my post.
  11. Hi - I had an infection that continually put a bitcoin miner exe file in my C:\Windows folder and it started up randomly. Some of these were caught by Malwarebytes but most were not, but even after deleting them, new ones reappeared, always with a different name (e.g. moy.exe). Tried everything, went through all the advice on this forum, nothing worked. I tried a competing software programme (not sure if I'm allowed to mention the name here) and it was found. Details: C:\Windows\System32\wensrSvc.dll Size . . . . . . . : 1,688,064 bytes Age . . . . . . . : 10.9 days (2014-01-06 22:34:18) Entropy . . . . . : 7.9 SHA-256 . . . . . : A519FA9B9E916959EF9751DBB3AECAE561D20BD67C60791363DB14FFBFBB68C3 Service . . . . . : wensrSvc Fuzzy . . . . . . : 26.0 Entropy (or randomness) indicates the program is encrypted, compressed or obfuscated. This is not typical for most programs. Starts automatically as a service during system bootup. Authors name is missing in version info. This is not common to most programs. Version control is missing. This file is probably created by an individual. This is not typical for most programs. Program starts automatically without user intervention. The file is in use by one or more active processes. The file is located in a folder that contains core operating system files from Windows. This is not typical for most programs and is only common to system tools, drivers and hacking utilities. Time indicates that the file appeared recently on this computer. Startup HKLM\SYSTEM\CurrentControlSet\Services\wensrSvc\ Anyway, it's totally fixed now (thank goodness!) and I wanted to warn other users of this. Simple to remove, just delete this file and any similar ones (there was also a wensrSvc.ocx file). Best of luck!!
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.