Positron

Here it is Maurice. I won't delete anything. Thanks for your help. pos mbst-grab-results.zip

The H.parrable.com is still showing up, being blocked by Malwarebytes popup.

I think I know what happened Maurice. I messed up big time. After uploading fixlog.txt, I deleted fixlog.txt from my computer. When I re opened the FRST program again as you wanted and attempted to run fix again, the program did not work and a message popped up. So I re downloaded FRST again and started over. My apology again Maurice. pos

Yes, just performed the operation. Attached is the appropriate file. Thanks Maurice. 20.09.2022_13.50.37.zip

Thanks for your help Maurice. Attached is the txt you requested. I have not run the computer to check yet, just booted it up and all seems ok so far. Thanks again. pos Fixlog.txt

Maurice, I ran the download and nothing was found, all is clean. I have firefox and ran the program again. Attached is the file you requested. Thanks for your time and help. Much appreciated. pos mbst-grab-results.zip

I also have this problem. Same I.P. address. Attacks every 30 seconds to a minute, over and over. I was wondering what "outbound" means. Is something already in my computer attempting to send? Thanks. pos

Thanks gentleman. Sure appreciate your time and efforts. All is working nicely. cheers pos

I noticed that these same two files have been quarantined 3 times in 3 days (opening Tidal 3 times). Just to be absolutely cautious, should I just delete the quarantined files? Thanks. pos

What does whitelisted mean? So it is ok to "restore" the files? Thanks again for your help and expertise. pos

Here are the two in quarantine Porthos. Much appreciated. Pos RTP 3.txt RTP 4.txt

Malware Antimalware detected and quarantined two tidal files. They are: C:users\owner\appdata\roaming\tidal\cache\F_000427 C:users\owner\appdata\roaming\tidal\widevine\widevinecdm\widevinecdm.dll What should I do with these files? Are they dangerous, or remove from quarantine and deemed safe? Thanks for help and time. pos

In reply to your first reply, I see no link. However, I just right clicked on both the sign in and rewards icons and created a block. Looking at your second reply, I shall go to link and see if I can opt out althuogh I don't think I ever joined. I shall check out your links in third reply. It might be sunday or monday before I get back due to engagements. Thanks again Advanced. pos

Hi and thanks for reply Advanced. I installed both ad ons last night and enabled. Just now I powered on the computer and booted up and opened firefox. The microsoft popup showed up again. I just checked and both ad ons are still enabled. Awaiting your instructions and thanks again for your time and efforts. pos

Below is a screen photo of something that was evidently added to my Firefox browser. Evidently I can log in to a site, which is what I did but probably should not have. Any help would be much appreciated. I am running win 7, 64. Can I get rid of it? Thanks. positron

Thanks Advanced. It was a little scary as it covered the entire screen, so I could not exit anything. I would like to ask one more question if I may. If it had been a real threat, could I have formatted the hard drive and then used my backup image to restore, or would remnants of the problem still be hiding somewhere, and require more work? Thanks again Advanced. pos

Thanks Advanced. Sure appreciate your help. Below are the txt that your requested. Cheers pos Report 8-17-21.txt AdwCleaner[S04].txt FRST.txt Addition.txt

I have no idea what it is called, so please move to appropriate site. Computer seems to be working fine now after what I performed below, but I have a feeling it is still there. I had one firefox browser open and all of a sudden I noticed 5 firefox browsers open in my tray. So I attempted to delete the first one, and my entire screen was taken over. A message appeared on my screen saying Windows Defender had detected a xxxx.dll file and my computer was taken over. (My windows defender was turned off at that time.) A message also said do not shut down your computer. The message stated to call Microsoft and a ph: number was given. A box was open asking me if I wanted to "deny" or "accept"?, something like that. I clicked X over and over, then deny again and again, but the message just stayed there. I clicked accept over and over but no luck ridding of the take over. I then did the following procedure. 1. I disconnected the computer from the internet. 2. Next I hit my power button, but only long enough for the computer to start to shut down. I did Not hold the power button long enough for the computer to actually power off. 3. I hit the power button just long enough for the screen to say that items needed to shut down, force or cancel. 4. I hit cancel and the computer immediately shown the normal desktop again as if nothing had happened. 5. I reconnected the computer to the internet. 6. I turned on my windows defender program and updated, but have not run it. 7. I ran Malware Antimalware but found no problems. I have Not powered off the computer, and await further instructions. Thank you for your time and any help. pos

Thank you for your help. I have attached the txt you request. I found a couple of problems. FRST found 6 prob. I actually leaned something about firefox and found I had three profiles. Figured out how to rid two of them. Thanks again. pos Addition.txt AdwCleaner[C03].txt FRST.txt Malware Report 4-13-2021.txt

I am checking to see if any start up files/programs might be malicious. I am using Win 7. Some I don't need to run? Conhost.ese CSRSS.exe dwm.exe explorer.ese integrator.exe mbamtray.ese (Malware bytes I think.) memfiles.servi... nvcontainer.exe nvidiaweb nvvsvc.exe nvxdsync.ese RAVCpl64.exe rundll32.exe sidebar.exe taskeng.exe taskhost.exe taskmgr.exe winlogon.exe Seems that everytime I watch a movie, very neer the end of the movie the computer stalls and the HD runs for 20 minutes. I have set the virtual memory very high to keep the computer running during the movie as it is. I am using Firefox and wonder if that might also be a problem. Thanks for time and help. pos

So it is true. Thanks again Nasdaq. Much appreciated and have a great week. pos

I may have to contact HP. It seems strange that it only happens after I power on the printer and attempt to print for the first time. After the stall popup, I click yes to cancel the printing, then it prints. The printer works fine after that. I have been thinking, I am using a HP cartridge that I have refilled for the first time some weeks ago. Any possible chance that the cartridge is programmed to cause such a problem? I had heard years ago that cartridges are sometimes rigged to stop working after their initial use but thought it was simply rumor. But could it be true? Cheers and thanks Nasdaq. Much appreciate your time and expertise. pos

Thanks Nasdaq. I performed all the functions you requested. One problem I am having is that when I print, the message ink carriage stalled, do I wish to cancel print. When I click yes to cancel the print, the printer makes a couple of noises and then prints after all. Weird? This is probably stupid on my part, but should I have uninstalled the HP printer program before I installed the new version you provided? Thanks again for your time and efforts Nasdaq. pos Fixlog.txt

Can we also rid of chrome garbage I noticed in the .txt above? Thanks pos

Seems to be fixed, no popups anymore. That problem is solved. Thanks Kevin. Pos