Bodylotion

Yes, keep making new threads and spam the forum instead of keeping it to one thread... Logic...

Same here. Mbamservice uses 13%CPU constantly and memory goes up till it uses 100% memory 15GB used by mbam

Looks like it's NoScript addon for Firefox. I disabled noscript since monday and I got nothing all week until today I enabled it again and I got the malware popup.

Ace stream plugin you already removed with FRST a couple of days ago, I don't have it installed anymore. I'll test for a few days.

It did not remove sophos so I guess I uninstall that manually. Got the Protection Technique: Exploit blocked by Anti-HeapSpray today again with BetterTTV not installed in Firefox. I only ever get this popup from Malwarebytes the first time I start Firefox after a Windows boot, never again after that until maybe the next boot, but not always. Guess it's an other addon. Doubt it's Adblock Plus or NoScript.

So should I keep all this stuff still on my desktop? It's full with icons and logs.

Looks like I cannot edit my last post. I now uninstalled BetterTTV addon and try with that for a while, maybe it's the firefox addon.

Now today when I start up firefox just after pc boot I get the same popup from malwarebytes again: Protection Technique: Exploit blocked by Anti-HeapSpray Enforcement. Firfox then closes on it's own. I start it up again and firefox starts up normally without closing.

No need, I already re-installed it manually. I have no issues that I am aware of.

Hello, I did as all you said. The SVRT scan said my PC was clean. A couple of questions, why is my addon BetterTTV removed? It's an addon for twitch.tv that I use a lot. Why is Process Explorer unusable suddenly? It's still there but cannot execute it. Process explorer is a program developed by Microsoft that I like to use instead of task manager since I think it's way more useful. PC runs fine, ran fine before this also. Thank you. Fixlog.txt JRT.txt AdwCleaner[S0].txt

Hello, I am not getting the Malware message anymore when I start up my PC. I got it one time and that's when I made this thread since I thought I had malware.

Hello, Today when I started my PC I got this message just as Windows booted up: Malwarebytes www.malwarebytes.com -Log Details- Protection Event Date: 5/16/17 Protection Event Time: 5:02 PM Log File: Administrator: Yes -Software Information- Version: 3.1.2.1733 Components Version: 1.0.122 Update Package Version: 1.0.1946 License: Premium -System Information- OS: Windows 10 CPU: x64 File System: NTFS User: System -Exploit Details- File: 0 (No malicious items detected) Exploit: 1 Malware.Exploit.Agent.Generic, , Blocked, [0], [-1],0.0.0 -Exploit Data- Affected Application: Mozilla Firefox (and add-ons) Protection Layer: Application Hardening Protection Technique: Exploit blocked by Anti-HeapSpray Enforcement File Name: URL: (end) I also ran a Malwarebytes scan with rootkits enabled and a FRST scan with addition enabled. Malwarebytes threat scan.txt FRST.txt Addition.txt

Yeah we can close it, thanks for the help, Kevin!

I really think it has something to do with uTorrent, no idea why it says svchost.exe though. But as soon as I started uTorrent today I instantly got the malicious website protection from svchost.exe. While usually it always says uTorrent.exe. I even got the messages 5min after I closed uTorrent. I just guess this is a false positive somehow.

All 3 files scanned were clean on virustotal. SystemLook.txt