Jump to content

Jeemag

Members
  • Posts

    50
  • Joined

  • Last visited

Everything posted by Jeemag

  1. Thanks, Not much point in collecting anything as I've uninstalled it. It wasn't blue-screening just hijacking the processor and locking the system up. However if you wish I'll run the tool, but Geek uninstaller did a very good job of uninstalling MWB. Regards Cheemag
  2. Hello, Too late - it's gone - I had to uninstall it to get this far. Regards Cheemag
  3. Hello, I've had to uninstall MWB Pro as it was suddenly causing problems. Because I had to uninstall to get this far, I can't say what version it was. Windows 7 booted normally and behaved normally until the yellow box came up in the notification area asking me to turn on som protections that were not turned on. Doing anything with this box (even dismissing it) caused the machine to slow to a crawl with CPU at 80% or so and eventually locking up completely. It would then behave normally until MWB's yellowbox comes up ... I'm running Kaspersky 2018 Internet Security so MWB isn't too important, but is very useful for finding PUPs and other trash. Should I download MWB again and install ? Regards Cheemag
  4. Hello. This is what is worrying me now. The first time I viewed that log, it had these detections in, but not now. What is going on here ? There is also this, from another application (see below), which found three HK registry items, but was unable to find the keys. I cannot understand how items can be found and then not found ! ADW Cleaner was run yesterday without finding anything - real or imaginary ... Regards Cheemag -------------------- Fix result of Farbar Recovery Scan Tool (x64) Version: 12-08-2017 Ran by Owner (12-08-2017 18:31:08) Run:1 Running from C:\Users\Owner\Desktop Loaded Profiles: Owner & (Available Profiles: Owner) Boot Mode: Normal ============================================== fixlist content: ***************** REG: REG QUERY "HKU\S-1-5-21-3038485607-2243731855-3424446531-1000\Software\drpsu" /s REG: REG QUERY "HKCU\Software\drpsu" /s REG: REG QUERY "HKCU\Software\Wow6432Node\drpsu" /s ***************** ========= REG QUERY "HKU\S-1-5-21-3038485607-2243731855-3424446531-1000\Software\drpsu" /s ========= ERROR: The system was unable to find the specified registry key or value. ========= End of Reg: ========= ========= REG QUERY "HKCU\Software\drpsu" /s ========= ERROR: The system was unable to find the specified registry key or value. ========= End of Reg: ========= ========= REG QUERY "HKCU\Software\Wow6432Node\drpsu" /s ========= ERROR: The system was unable to find the specified registry key or value. ========= End of Reg: ========= ==== End of Fixlog 18:31:09 ====
  5. Hello again, Found it: AdwCleaner[S2].txt
  6. Hello, I can't find a long in C:\AdwCleaner with these entries. Where is the log that I posted reside ? Cheemag
  7. GEvening As expected nothing was found. Could it be that Adaware is wiping the items it finds without asking first? Given that there may be false positives, it shouldn't do this ! ----------------------------------- Regards Cheemag Fixlog.txt
  8. Thanks. The MWB scan was coincidence. It's working again now, so no problem. Regards Cheemag
  9. Hello, ADW Cleaner found these items: ***** [ Registry ] ***** Key Found: HKU\S-1-5-21-3038485607-2243731855-3424446531-1000\Software\drpsu Key Found: HKCU\Software\drpsu Key Found: [x64] HKCU\Software\drpsu ***** [ Folders ] ***** Folder Found: C:\Windows\SysNative\Tasks\WiseCleaner These keys and folder do not exist. What is going on here ? I've never used any of the software mentioned. Regards Cheemag
  10. Hello, Today I noticed that MWB-AR had stopped/was inactive (following a scan by Malwarebytes - coincidence?). [Fix Now] and [Start protection] have no effect. (Beta 0.9.18.797-1.1.86) Regards Cheemag
  11. Good Afternoon, Here are the directories. 7-zip error on the last one: couldn't open the Service\Log as it was in use (despite MWB-AR having been stopped. Regards Cheemag Anti-Ransomware.zip MWB-ARW.zip MWBLogs.zip
  12. The whole Anti-Ransomware directory ? Regards Cheemag
  13. Well it certainly has in this case! I've re-installed bart.exe and it's working as normal without MWB-AR complaining ... I'd used it for years before yesterday without this problem. I am aware that there is a ransomware of that name. Regards Cheemag
  14. Good Evening, Bart.exe, the file backup programme is NOT ransomware. Clearly MWB-AR thinks it is. It's from Zhorn Software: http://www.zhornsoftware.co.uk/bart/ I've been using it for years, now all of a sudden MBW-AR thinks it's ransomware. I've restored it. It has nothing to do with the Bart ransomware. Surely it isn't a Good Idea to tag something as malware from the filename alone. Regards, Cheemag Bart.zip
  15. Thanks! I did all that yesterday and it seems to be holding. Regards Cheemag
  16. Hello again, Sorry to be so tardy in replying. You neglected to say that the system won't allow files in these directories to be zipped as they're 'in use by another programme'. even with MWBAR stopped. They have to be copied to a temporary folder to be zipped. Regards Cheemag ProgData.7z Logs.7z
  17. I cannot get MBARW to run other than disabled. [Fix now] and Start Protection have no effect. Running mbarw.exe as administrator has no effect. What next ? Cheemag
  18. No problem. I've solved it: This machine has the 'black square icons' fault where all the desktop icons have been replaced by black squares. The icon cache has to be rebuilt at every boot to restore the icons. Mbae is in fact running and the icon showing in the tray - until the cache is rebuilt and Explorer restarted, then the mbae icon disappears from the tray although the prog is still running. I'm stuck with it unless and until I solve this icons problem. Regards Cheemag
  19. Evening, Any further ideas on this problem ? Retards, Cheemag
  20. I did that. Didn't help. Still the same. Regards Cheemag
  21. Good Morning, Here you go. Attached. Addition.txt FRST.txt
  22. Attached contents of C:\Users\Owner\<MWB Exploit Stuff> MWB-Anti-Exploit.7z
  23. Hello, I have Anti-Exploit Premium installed on Windows 7 Professional 64-bit SP-1 Up-to-date. mbae.exe is in the Startup and appears in Task Manager as mbae.exe*32, but there is no icon in the system tray (hidden or unhidden). To get the reassurance that it's running, I have to stop mbae.exe*32 in Task Manager and start mbae.exe from my file manager, after which it runs for the duration in the system tray. Is there a workaround for this ? It's a 64-bit machine but this programme appears to be running a 32-bit version despite there being a 64-bit executable in the application folder. Regards Cheemag
  24. MWB ARB put Bart Backup into quarantine as ransomware. I've been using it for years, so it certainly isn't ransomware. Programme said it was putting it into quarantine, but it hasn't and thankfully the application still works. -- Cheemag
  25. LB Booster is flagged as a PUP by MWB. This programme is a fork of Liberty Basic, both perfectly harmless Basic compiler programmes. Directory is: Volume in drive C is HDD-C Volume Serial Number is BCB3-EF10 Directory of C:\Program Files (x86)\lb_booster 14/02/2015 11:47 <DIR> . 14/02/2015 11:47 <DIR> .. 20/01/2015 20:50 2,422 lbb.bmp 20/01/2015 20:50 66,113 lbb.chm 20/01/2015 20:14 448,976 lbb.exe 20/01/2015 20:52 1,330 lbb.exe - shortcut.lnk 20/01/2015 20:14 156,976 lbbrun.exe 5 File(s) 675,817 bytes 2 Dir(s) 937,595,801,600 bytes free Regards Jeemag
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.