crestj

All updated and system updated. No signs of infection from any scans and all other indicators (task manager, etc) are all normal. Thanks for your help!

File requested attached. Many thanks for your help with this issue! SecurityCheck.txt

I have now disabled SABnzbd until we're finished diagnosing this issue. I do still use Logitech Media Server as I have 4 Squeezebox Radios in use in my house. After the reinstall of MB I have noticed that the memory use for the MB service is hugely reduced down to ~200mb of memory even though the RTP Detections continue. Not sure why the memory used was so out of control before but at least that's better now.

Fresh scan run and files attached Addition.txt FRST.txt

Reinstall seemed to work OK. Logs gathered fine and attached. mbst-grab-results.zip

Left the PC to settle down for a couple of hours and came back to this (attached). The MB Tray Application using over 2GB of memory and the service grabbing another 1Gb?!?!

Log attached, seems to have stopped after 60 mins. Fixlog.txt

Yes it runs Windows 10 but it acts as a 24/7 server. So technically it's a home desktop PC. I'll run the new fix script and post back.

Once the server had rebooted and settled down, it appears MB is still under a huge load (attached) As you can see I'm still getting constant RDP Detections (which I guess I just have to wait until they stop) but is this memory, disk and CPU usage expected?

Script ran and finished with: Fixing is terminated due to reaching maximum fixing time of 60 minutes. <==== ATTENTION How do I confirm it did everything it was supposed to do? Attached fixlog.txt Fixlog.txt

MB seems to be having a lot of issues with whatever it's trying to do!

Files attached Addition.txt FRST.txt

Restarted and re-ran support program and received the same error after it was "creating zip logs" for ages.

Additional information: I've also noticed 1.2 millions files in the C:\ProgramData\Malwarebytes\MBAMService\MwacDetections folder!

I noticed this morning that the MalwareBytes Service was using almost 2Gb of memory and sitting at about 60% constant CPU usage. Looking further I can see a constant stream of RTP Detections in the History (attached). I assume MB is doing what it's supposed to be doing by blocking these inbound connections but the amount of system resources it's using is very high.