blade7658

I ran KPRM (attached). Comments: 1. I use LastPass and have found it very helpful. 2. I back up continuously with an online service. Proved helpful when I lost a file storage hard drive a few months back. Recovered everything. 3. Installed PatchMyPC - I like the idea and will give it a try for a while. So far very impressive. 4. I believe I have this set up correctly and have not noticed any problems with Windows not updating. 5. Great read. I might go back to Firefox, but I got away from it as some sites were not running well on it. Have to admit, the value of cookies currently outweighs the negatives for me, so I don't think I will be deleting them daily any time soon. 6. Browser Guard is already installed (and it works very well). I added UBlock as well. Really amazing stuff - definitely bookmarked #5 and have opened up the referenced material for further reading. Thanks! kprm-20220720170842.txt

I liked GeForce because it optimized my games and it kept the video card up to date, but now that it can't do the second part, I might dump it. I will try uninstalling Bonjour. Thanks for all the help - have a great week!

Wow, I try hard to keep things up to date! Interestingly Malwarebytes update failed when I used the system tray but it worked when I opened the program and updated via the about tab. Now the system tray icon tells me I am update. Updated GeForce Experience security patch, but I can't run the latest version of GeForce Experience - NVIDIA has ceased support of my video card that is about 8 years old now (but still works for me). I am likely going to replace it in the next year, but I am not really in a rush. Updated VS Code by opening VS Code (and gave me the nudge I needed to get some work done). Updated Python to 3.10.5 (the latest version now) 7-zip uninstalled and new version installed. I uninstalled web-x. I don't use it any longer, so will reinstall at a future date if needed. Updated Zoom via the app. Quick Time unistalled. Firefox was updated yesterday when I opened it. I need Bonjour as I plug my iPhone into my PC. Pretty sure my PC won't be able to talk to my phone without it. Windows is up to date. Attached is the latest Security Check - looks good to me. Thanks! SecurityCheck.txt

Things all seem good now. I feel like I got so much more help than just removing healthy.exe. Thanks so much for your incredible help. Attached is the log. I don't use Firefox currently but every so often I pull it up if I am having a problem on some web site and it updates the software then (I just did that to confirm). I stand by for any other advice. Thanks so much! SecurityCheck.txt

Scan is done and log is attached. Looks like good news to me (one malware removed), but I await your thougths and instructions. I hope you had a terrific day! msert.log

I meant to tell you I updated the firmware before running those tests. I deleted the healthy folder. I was going to run the Microsoft Safety Scanner tonight when I head to bed. I didn't see this message until this AM. Thanks!

I think I found the actual logs for both scans (attached). Thanks! SMSVC_1658175649.log SMUI_1658175656.log

That drive failing would be tragic as it is only 2 months old. I saw something that made me wonder (an event viewer entry - the same one you saw?), so I checked it with CHKDSK (including Stage 5) previously and with CrystalDiskInfo. Both had no errors. Good news is I have a strong backup regiment. The short SMART scan csv is attached. Looks fine to me but it doesn't say much. I couldn't find any other logs for either scan. The short scan had no bad results and said drive is in good condition. I could not see how to get a log (used export for SMART, but not an option for short). Calder short SMART.csv

Thanks for your support! Attached is the new FRST logs. Thanks Addition.txt FRST.txt

@AdvancedSetup Thanks for the help, I feel like I just took a giant step forward. I retired from the military 2 years ago (before that I hit military sites daily). I might still occasionally go to a .mil site, but mostly just dfas.mil (the pay site) at this point. Except DFAS, it might be a base website or a news page, but nothing that would require a certificate (I would think). I thought I removed folding at home years ago (I liked the concept, but did note it ran the computer hard, so I removed the program with add/remove). Let me know if I need to do more as I can't find it on my computer (using search) and it was not on the add/remove list. I ran FRST and the fixlog is attached. Several questions after the reboot. I had three Defender Firewall popups on reboot. I think I want to allow them, but will wait for your thoughts. They are: Steam Client Bootstrapper - least important to me, but not sure what will be broke if I deny. I play a lot of Steam games, which typically require connecting with their server before you are allowed to play. ACDSee Commander Ultimate 2022 - this program is my picture organizer and one feature I use is to automatically download pictures from my phone. This represents the vast, vast majority of pictures I take and it not a small number (we have our first grandchild now!). Plex Media Server - this is my movie organizer and allows me to play movies on my TV stored on a hard drive attached to my computer. I think it is "safe" to turn these 3 on, but await your thoughts. Thanks for the summary of what will happen - I use LastPass and love it. I had no concerns, so I let it run. One editing comment - you may want to put a comment "read below!" before you say "press the fix button". I do things as I read them (like many I suspect), but just happened to glance down at the rest of the message before I ran FRST. I looked at the "Healthy" directory (in Scott\AppData\Local) since that was my initial concern and it is still there, but now only with only a "User Data" folder which contains 3,589 files and 94 folders (327 MB), but none are exe files. Many "file" types, some database files (.db), "OLD" and "text" files, and two "PMA" files. I am guessing I can delete this whole "Healthy" directory, but will also await your inputs. Thanks again! Fixlog.txt

Thanks so much @AdvancedSetup! Attached are my files. Nothing found that I could tell, but I am not even a 1% expert on this. AdwCleaner[S00].txt blade7658 malwarebytes scan results.txt FRST.txt Addition.txt

I received a warning today from Windows Firewall about healthy.exe. I can't find anything on this program and so thought I would pick your brains. When I scanned the folder with Malwarebytes it found nothing suspicious (nor did my daily full scan). But the file location is under C:\Users\Scott\AppData\Roaming\Healthy and it looks like the entire program is there (the exe file, several dll files and two folders (img and locales). I find that really odd, but admit I don't spend anytime in the appdata folder. When I searched the internet, I found nothing on this program, which I also found odd. Any thoughts? Thanks! Scott

That was fast, great work!

I just posted the same thing in another string. I wasn't sure if it was on my end or not. Apparently not.

mbst-grab-results.zip Attaching the grab results as recommended by the automated message from Malwarebytes.