ViperMaul

Oh that is interesting. This is a chance for me to learn a new process. I just may follow. Can you share with me your thought process and method concerning this?

Reboot complete. Windows 10 had some updates to install. A new one showed up that I didn't know was missing or detected. As you can see there was no scan report about at 3:15am The History tab remains unchanged. Here are my current settings unchanged.

I'll reboot now. What changes should I be looking for?

No I have not.

No I do not. I wanted to keep that off. Is that the only way to manually unquarantine a specific file? I can turn than on now if that is the only way.

These files are missing

This is for v5 There were some files that were false positives. How do you restore them? There were 5 of them but only 1 shows up in Quarantined items, the other 4 shows up in History tab of Detection History.

STEPS TO REPRODUCE Go to https://csved.sjfrancke.nl/index.html Click either the CSVed v2.5.5 or the CSVed v3.0.0 RC4 under the Without Installer section

I have the detection... Malwarebytes www.malwarebytes.com -Log Details- Protection Event Date: 7/17/20 Protection Event Time: 9:29 AM Log File: e69dfa2e-c839-11ea-a54a-0a002700000c.json -Software Information- Version: 4.1.2.73 Components Version: 1.0.979 Update Package Version: 1.0.26951 License: Premium -System Information- OS: Windows 10 (Build 18362.959) CPU: x64 File System: NTFS User: System -Blocked Website Details- Malicious Website: 1 , C:\Program Files (x86)\BraveSoftware\Brave-Browser\Application\brave.exe, Blocked, -1, -1, 0.0.0 -Website Data- Category: Trojan Domain: home.hccnet.nl IP Address: 94.232.163.18 Port: 80 Type: Outbound File: C:\Program Files (x86)\BraveSoftware\Brave-Browser\Application\brave.exe (end)

Okay I will endeavor to reboot each weekend. Thank you for allowing me to benefit from your experience. Thank you Porthos!

Done. It is now off. So I understand what advantages did I just gain by doing that? I know you said because I have another AV tool running at the same time. What bad can happen if I leave it on?

I agree. My dad's computer has the same issue as he likes to shut his pc down. My pc never shuts down. But I changed the time as you suggested anyway. Thank you for the suggestion. For me personally I like having the daily scans to keep my pc clean. Is there a rational for deleting this altogether for you and Porthos?

Here you go. Thank you for your continued guidance. mbst-grab-results.zip

Done. Repair Process Complete.

RE: "Repair" When I get to step 9, I work from home. It is both my personal and work computer. In this case what is the best selection?

After reboot, I observed the issue inactive again. Will have to wait until the next trigger event to see if the issue is truly gone. I now am able to launch MB again and I have updated to the latest Component version 1.0.972. No reboot seem required. I am currently running the latest MB support tool and will provide results if requested. What next?

Maurice, Thank you for your reply. It is not my intention to offend. Your help in the past has got me a full 30+ days of no issues. I thank you for that. Since it is back, I just want to make sure you guys felt you received all the information you wanted from my machine in its current state. I will reboot now and update again as recommended.

So to be clear, you want me to reboot right now, losing the hard to reproduce state, in order to can access to MB GUI so that I can update to the latest Component version? And then wait days, weeks, months to see if this issue will be gone? Do you feel there is no one that wants additional information on this hard to solve problem that keeps re-surfacing on select subscribers computers for almost a year now? I have not used the word PING in any of my posts on this thread. No, this is not about any ping issues

Earlier tonight I your the UCheck_portable64 program, and updated a great many outdated programs I had. So I am not surprised.

Thank you for your continued attention in this matter. I really do appreciate it. Here is what I see

Normally it shouldn't but in my report above, albeit a messy one, I stated that I could no longer open MWB GUI. I launch it and nothing happens. So I cannot update or upgrade without a reboot.

Regarding Hibernation: It shows the setting to never as seen below. I followed option 4 to confirm https://www.tenforums.com/tutorials/2859-enable-disable-hibernate-windows-10-a.html#option4

Like I said, I refused to reboot unless guided to do so. I am sure your team will want more information before I reboot. Perhaps even to log on. I am willing to keep my main machine in this degraded state until you had a chance to analyze it. > Please check for program update should 1.0.972 This will require a reboot. Are you sure there is not anything more you need before I reboot and lose this degraded state?

Here is a partial upload as well of the newly updated mb-support-1.6.2.802 tool before it hung on Run FRST See attached partial results... mbst-1.6.2.802 -grab-partial-results.7z