djkeefer

Sorry I have been busy myself. Yes, I found a good Ad and Script Blocker for Chrome and it seems to have resolved issues. I was just curious if there was still a potential malware/trojan, etc still on my system?

OK, I have gone and looked up and installed a script blocker and Ad blocker, so far I see them protecting me, however I want to get to the source of what is causing this. Suggestions?

I also am slightly confused when you say an Adblocker or script blocker, do you have a suggestion on what to use specifically?

Hi, sorry for the delayed response. I tried everything you mentioned, and I am still getting browser re-directs, although I notice it happening mostly on Yahoo.com's Fantasy Football site. I also have installed Norton products into my browser to try to have an extra level of protection, but I noticed I have the same problem regardless of weather or not those extensions are on. Otherwise, I have no additional extensions currently activated. Here are a few event logs from recent intrusion attempts that were caught by MB. Event.txt Event 1.txt Event 2.txt Event 3.txt

Here is one of the events from this morning, there were 3, all the same. Event.txt

Well I did this, and it seemed to work, however this morning I had a browser type hijack where the website changed off my Yahoo sports page and an intrusion was blocked by MB. What steps should I take at this point since I did the browser resets? FYI, I did resets on both IE and Chrome, and I do not have Firefox/Waterfox.

OK, ran TDSSKiller, got an infection. Here are the log files attached. i wasn't sure if you needed both or not. Advise... TDSSKiller.3.1.0.15_24.10.2017_14.24.39_log.txt TDSSKiller.3.1.0.15_24.10.2017_14.19.45_log.txt

Just checked MB and yes, still having outgoing messages blocked. Same IP config as before.

Mixed results. I still feel like there is something taking over svchost.exe At times it runs fine, but other times mundane tasks take forever but for only a few seconds, then everything works fine again. Problem is this, I ran ADWCleaner 4 times last night, each time coming up with a result of either PUP.optional.Amazonbrowserbar or PUP.optional.legacy coming up. AFter the 5th time last night, i got a clean scan from ADW Cleaner, but today i cam up with both results at different times. Advise??

Ok, here are the documents as requested. Sorry it took me a few days, been busy. Export Summary.txt AdwCleaner[C0].txt FRST.txt Addition.txt

I understand life emergencies, thank you for replying. Yes I still need help.

I have been getting svchost.exe being blocked by MB for about a week or so, was on vacation so did not have time to deal with until now. Attached are the files from the scans as per the instructions. Please advise, my last go around in the forums nobody responded. MB Scan.txt Addition.txt FRST.txt New Blocked.txt Protection Event.txt Blocked 1.txt Blocked 2.txt

I posted the requested documents, are you guys going to reply??

Also, this was caught on 9/15 in Quarantine, here is a screenshot: https://gyazo.com/5ff40df48bd8ee387313d11cbbf53d28

Here are four of them, a few have different ip/domain's. Blocked.txt Blocked 1.txt New Blocked.txt Blocked 2.txt

I have been getting svchost.exe being blocked by MB for about a week or so, was on vacation so did not have time to deal with until now. Attached are the files from the scans as per the instructions. Please advise... FRST.txt Addition.txt MB Scan.txt

I keep receiving a popup from MB that tells me that svchost.exe is being blocked trying to connect to a website. It lists the IP address as 255.255.255.255 Attached is one of many that have been blocked, all from the same IP and port. I have read a couple of forum posts, but each seem to be specific to their issue, so i started a new topic. I am currently running the MB rootkit scan to see if there are any results. I have also downloaded AdwCleaner to my desktop, but I have not run the setup yet. Please advise... Protection Event.txt