Athalwolf

So far so good. Thanks.

Good morning Porthos and thanks for your assistance. mb-check-results.zip

It's seems to be doing the same thing as the issue from a few days ago. Constant warning pop-ups and message that my Real-Time Protection is turned off. Have updated and restarted but Real-Time Protection will not stay on.

Thanks Duck! Good job!

Same issue here. Reinstalled but had a heck of a time reactivating licence. I'm not worried though as the Malwarebytes team will deal with this quickly. I'm also pretty good looking for an old guy so that helps too!

Hi Ron. I reinstalled windows so they problem should be gone. Thanks for your help.

No threats were found by Sophos. Your last instruction is to run Farbar. I did that at the onset and the results are above. Would you like me to run it again and if so should I delete the two .txt files it previously made and saved to my desktop?

Good morning, I'm not certain the JRT tool worked properly. I shut down Webroot but when I opened it to turn it back on it was running. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Junkware Removal Tool (JRT) by Malwarebytes Version: 8.1.3 (04.10.2017) Operating System: Windows 10 Home x64 Ran by Athal (Administrator) on 2017-06-24 at 4:59:49.69 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ File System: 0 Registry: 0 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Scan was completed on 2017-06-24 at 5:00:57.32 End of JRT log ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ There was a positive. It was ask.com. I attached a screenshot of the result. The PC did not restart here are the log files: # AdwCleaner v6.047 - Logfile created 24/06/2017 at 05:10:26 # Updated on 19/05/2017 by Malwarebytes # Database : 2017-06-23.1 [Local] # Operating System : Windows 10 Home (X64) # Username : Athal - DESKTOP-2OOT99N # Running from : C:\Users\Athal\Desktop\AdwCleaner.exe # Mode: Scan # Support : https://www.malwarebytes.com/support ***** [ Services ] ***** No malicious services found. ***** [ Folders ] ***** No malicious folders found. ***** [ Files ] ***** No malicious files found. ***** [ DLL ] ***** No malicious DLLs found. ***** [ WMI ] ***** No malicious keys found. ***** [ Shortcuts ] ***** No infected shortcut found. ***** [ Scheduled Tasks ] ***** No malicious task found. ***** [ Registry ] ***** No malicious registry entries found. ***** [ Web browsers ] ***** No malicious Firefox based browser items found. Chrome pref Found: [C:\Users\Athal\AppData\Local\Google\Chrome\User Data\Default\Web data] - ask.com [!] You may need to disable the Chrome synchronization from your Google account in order to fully remove the malicious preferences. Please consult this Google help: https://support.google.com/chrome/answer/3097271?hl=en [!] ************************* C:\AdwCleaner\AdwCleaner[S0].txt - [1142 Bytes] - [24/06/2017 05:09:21] C:\AdwCleaner\AdwCleaner[S1].txt - [1345 Bytes] - [24/06/2017 05:10:26] ########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [1418 Bytes] ########## # AdwCleaner v6.047 - Logfile created 24/06/2017 at 05:09:21 # Updated on 19/05/2017 by Malwarebytes # Database : 2017-06-23.1 [Server] # Operating System : Windows 10 Home (X64) # Username : Athal - DESKTOP-2OOT99N # Running from : C:\Users\Athal\Desktop\AdwCleaner.exe # Mode: Scan # Support : https://www.malwarebytes.com/support ***** [ Services ] ***** No malicious services found. ***** [ Folders ] ***** No malicious folders found. ***** [ Files ] ***** No malicious files found. ***** [ DLL ] ***** No malicious DLLs found. ***** [ WMI ] ***** No malicious keys found. ***** [ Shortcuts ] ***** No infected shortcut found. ***** [ Scheduled Tasks ] ***** No malicious task found. ***** [ Registry ] ***** No malicious registry entries found. ***** [ Web browsers ] ***** No malicious Firefox based browser items found. No malicious Chromium based browser items found. ************************* C:\AdwCleaner\AdwCleaner[S0].txt - [991 Bytes] - [24/06/2017 05:09:21] ########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [1063 Bytes] ##########

Hi Ron, Thanks for your assistance. FRST.txt Addition.txt

This started a week or so back. It occurs several time at start up then every hour or so. The last 3 IP addresses are in Russia and Kazakhstan and Plymouth, Michigan. I have Malwarebytes Premium and auto update is on. "Help me Obi-Wan Kenobi you're my only hope".

PC seem fine but TBH the only time I spent on it since the issue was running the tests here. I really appreciate your help. I'll give it a few days to see if there are any changes.

Microsoft Windows Malicious Software Removal Tool v5.47, April 2017 (build 5.47.13703.0) Started On Thu Apr 27 15:37:56 2017 Engine: 1.1.13601.0 Signatures: 1.239.313.0 Run Mode: Interactive Graphical Mode Successfully Submitted Heartbeat Report Microsoft Windows Malicious Software Removal Tool Finished On Thu Apr 27 15:38:40 2017 Return code: 0 (0x0) --------------------------------------------------------------------------------------- Microsoft Windows Malicious Software Removal Tool v5.47, April 2017 (build 5.47.13703.0) Started On Thu Apr 27 15:38:49 2017 Engine: 1.1.13601.0 Signatures: 1.239.313.0 Run Mode: Interactive Graphical Mode

OK back on track. Malwarebytes www.malwarebytes.com -Log Details- Scan Date: 4/27/17 Scan Time: 3:33 PM Logfile: Text File.txt Administrator: Yes -Software Information- Version: 3.0.6.1469 Components Version: 1.0.103 Update Package Version: 1.0.1822 License: Premium -System Information- OS: Windows 10 CPU: x64 File System: NTFS User: DESKTOP-2OOT99N\Athal -Scan Summary- Scan Type: Threat Scan Result: Completed Objects Scanned: 382127 Time Elapsed: 0 min, 51 sec -Scan Options- Memory: Enabled Startup: Enabled Filesystem: Enabled Archives: Enabled Rootkits: Enabled Heuristics: Enabled PUP: Enabled PUM: Enabled -Scan Details- Process: 0 (No malicious items detected) Module: 0 (No malicious items detected) Registry Key: 0 (No malicious items detected) Registry Value: 0 (No malicious items detected) Registry Data: 0 (No malicious items detected) Data Stream: 0 (No malicious items detected) Folder: 0 (No malicious items detected) File: 0 (No malicious items detected) Physical Sector: 0 (No malicious items detected) (end)

Uh crap. I read the above and uninstalled Malwarebytes before reading the rest of your paragraph.

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Junkware Removal Tool (JRT) by Malwarebytes Version: 8.1.3 (04.10.2017) Operating System: Windows 10 Home x64 Ran by Athal (Administrator) on 2017-04-27 at 13:19:06.01 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ File System: 0 Registry: 0 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Scan was completed on 2017-04-27 at 13:19:45.56 End of JRT log ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~