Nonie

I'm using Malwarebytes Premium on Windows 10 64-bit, and whenever I run any search in the latest Firefox, no matter what I search for, a notification banner from Malwarebytes pops up on my computer that says "Website blocked due to Trojan", and the IP address given is a site that I have never visited. I ran a full scan with Malwarebytes, and no threats are found. Does anyone know how to get rid of this problem? If there is a trojan, shouldn't Malwarebyts find it? Thank you!

I'm using Malwarebytes Premium on Windows 7 64-bit, and have Real-Time Protection always enabled, and also a scan at start up, yet I did a manual scan and found I had Neshta for who knows how long. Malwarebytes has it quarantined now after the manual scan, but I'm still wondering how a trojan was able to get on my computer when Malwarebytes is always on, and also, if that's the case, how do I know it's really gone if Malwarebytes doesn't always find things? Not sure whether I should rebuild Windows to be safe, or if I can be sure my system is clean now. Any advice appreciated. Thanks!

Thank you, Nasdaq. When I got Malwarebyte's auto-reply that it might take a couple days for a response, I just went ahead and installed my back up drive, figuring it's probably better to start clean anyway, so I'm already involved in the process of updating and reinstalling everything. If it happens again, I'll follow your advice. Thanks again! Sorry to take your time!

Hello, I recently reinstalled Windows 7 Pro due to this issue, and now yesterday, I tried to install a driver and ended up with the same issue. Malwarebytes detects Trojan.Agent.SVC.Generic, and there's a file called svchost.com (yes, it's ,com, not ,exe) in my Windows directory. Malwarebytes says it needs to reboot in order to quarantine the trojan, but after rebooting, Malwarebytes just gives the same message again, and the file is still there. The biggest problem is that none of EXE files will launch, all of them just open the window asking which application to open the file with, so I can't do anything on that computer. I tried dragging the svchost,com file to the trash, and it said I needed permission from the administrator. My computer on has one User Account, which is my admin account, and that's what I was using. I do have a clean install of Windows on a separate drive that I save for these occasions, which is how I dealt with it recently, but if there's a way to repair it, that might be the way to go. Thank you for any suggestions.

Does anyone know how it can continue checking ports after the email is deleted? I'm using Thunderbird for email, so that shouldn't allow anything to download. Thanks!

I'm not sure what you mean... do you mean I could block through a file related to my ISP? Or is HOSTS a service of some kind?

I use Malwarebytes 3 Premium on Windows 7, and recently I've been getting a lot of spam from the domain mx4.earthlink.net which triggers Malwarebytes notifications that a website is blocked. They keep popping up, showing that whatever it is in the email is continually trying sequential ports until it finds one it can get through. The notifications continue for a while even after the email is deleted, so it appears that something is continuing to run on my computer (I'm attaching one of the notifications). Eventually it stops, and I don't know if that means it got through a port, because the spamming is increasing each day, which shows they think they have a live one. I use Thunderbird for email, blocking everything except text, unless I approve to download content, which of course I don't. I've run scans with Malwarebytes, and no threats are found. My questions are 1) Why do notifications continue after the email is deleted and does Malwarebytes definitely block ALL ports? and 2) since all of these are coming from one domain, is there any way to block that particular domain from coming in, if that makes any sense? For some reason, since my ISP is Earthlink, they won't allow me to block a domain that is one of theirs. Thank you for your help!