AllHailShronk

Here is what Windows Security says this thing is.

Hi AdvancedSetup, I was able to run the fixes and have uploaded the fixlog.txt. Windows Security is still not happy though--I'm kind of stumped as to what it could be 😅 Edit: I have noticed that if I make Malwarebytes my main AV, Windows Security shows the green checkmark on its tray icon and it stops getting after me. I don't know if it's helpful but I attached an image of what's going on in Windows Security to this post as well. It's odd because it's all the same date and time but it never wants to quarantine and then it just stays there... Thanks Fixlog.txt

One thing I did notice when looking at the adware scan was that it didn't like the Lenovo bloatware that's on laptop.

Hi AdvancedSetup, Thank you so much for your reply. Sorry for being a bit late here--I was able to do the scans and have attached the files here. Thanks! AdwCleaner[C00].txt AdwCleaner[S00].txt MalwarebytesScanResults.txt Addition.txt FRST.txt

Hi there, So this is an odd question. I recently purchased a new laptop (well new to me but it's refurbished) from Amazon. I haven't had any updates and I scan with both Windows Defender and Malwarebytes. I just had updates on my computer on 1/11/2024 and Windows is saying that it has found and removed VirTool:Win32/DefenderTamperingRestore several times. They are being marked as trojans too. I scan with Windows Defender, MSRT, and Malwarebytes and nothing shows up... I still keep seeing this virus pop up as being found and removed on Windows Defender but scans still show nothing. I decided to scan my computer with MSERT and it says that 9 files are infected. Once the scan has finished the results say "The scan completed successfully and no viruses, spyware, and other potentially unwanted software were detected." I haven't noticed anything weird happening before the updates on my laptop today. The only thing that seems weird is that these viruses seem to show up out of nowhere, so I'm not really sure what's going on. Would you be able to help? Thank you so much :)

Thank you so much for your help 😁 I've attached the log to this post for you as well. kprm-20230610173433.txt

I updated each of the programs you mentioned, restarted, and checked Windows Updates. There was a security definitions update found, and I installed it. Thanks

I was able to get SecurityCheck up and running. Here are the results: SecurityCheck.txt Thanks

Hi AdvancedSetup, I was able to run the scan, and here are the results.msert.log It looks like it found VirTool:Win32/DefenderTamperingRestore and removed it. I'm not sure what it is or where it was, but it found something. Thanks 😁

Thank you so much 😁 I don't seem to have anything when I scan still but I'm not getting that notification anymore so I'm guessing we're in the clear. You're the best! 😁

Hi So, quick question... I keep getting blocked website notifications when I do Google searches. The browser I'm using is Google Chrome. I've included the txt files of each instance today. 1,2, and 3 were from earlier in the day related to a program I was using and I removed it after receiving the notifications. 4 and 5 however were from a little bit ago and im not sure if theyre related to the previous 3. all i did to trigger the notification was hover over a search result with that websites name. URL and all... When I conduct a scan, everything looks clean. I'd appreciate any help and thanks in advance 1.txt 2.txt 3.txt 4.txt 5.txt

Awesome, thanks 😁 Would you recommend a scan after going to the site?

For sure. I've attached a link to the report. Detection info.txt

Hey, I got a notification from Malwarebytes that this site was unsafe due to being compromised. Just wanted to see if anyone could confirm that this website is unsafe and if I should run a scan just in case. The domain is techmoderna.com Thank you so much 😅

So I went to my schools website today and browser guard is blocking the following websites that are highly important for me to get to because I've got class at 6 tonight. www.niu.edu (main page and everything under it too is blocked) myniu.niu.edu (school links) webcourses.niu.edu (niu's blackboard page)

Sweet, Thanks Porthos

I just had that same thing happen. Auto update is on. Should I go ahead and restart?

Malwarebytes is no longer detecting it for me, however Virustotal is detecting it for me too. I have no idea what this file is but I'm getting rid of it.

I'm glad I'm not the only one with the problem. That is weird that the same thing was in Unity too--I'm going to run another scan and see if it still shows up and let you know what I find. If Virustotal is detecting something that sounds like there might be something there.

I updated the file and it flagged it again with the same Malware.AI. I've added the file to this responseastcenc.zip

A file in my Unreal Engine folder was flagged as Malware.AI. I'm thinking this is a false positive but I'm not for sure. I don't go in it's directory all that often so I quarantined the file and removed it from the computer. I haven't noticed anything unable to work so I'm not sure what was going on. Here is the info that I have. Malwarebytes www.malwarebytes.com -Log Details- Scan Date: 10/29/20 Scan Time: 9:45 PM Log File: 09d71efe-1a5a-11eb-ba84-000000000000.json -Software Information- Version: 4.2.1.89 Components Version: 1.0.1070 Update Package Version: 1.0.32214 License: Premium -System Information- OS: Windows 10 (Build 19041.572) CPU: x64 File System: NTFS User: DESKTOP-UA9D654\final -Scan Summary- Scan Type: Custom Scan Scan Initiated By: Manual Result: Completed Objects Scanned: 1 Threats Detected: 1 Threats Quarantined: 1 Time Elapsed: 0 min, 10 sec -Scan Options- Memory: Disabled Startup: Disabled Filesystem: Enabled Archives: Enabled Rootkits: Disabled Heuristics: Enabled PUP: Detect PUM: Detect -Scan Details- Process: 0 (No malicious items detected) Module: 0 (No malicious items detected) Registry Key: 0 (No malicious items detected) Registry Value: 0 (No malicious items detected) Registry Data: 0 (No malicious items detected) Data Stream: 0 (No malicious items detected) Folder: 0 (No malicious items detected) File: 1 Malware.AI.4041676787, D:\PROGRAMS\UNREAL ENGINE\UE_4.25\ENGINE\BINARIES\THIRDPARTY\ARM\WIN32\ASTCENC.EXE, Quarantined, 1000000, 0, 1.0.32214, 09BC9A8557E4F8F1F0E717F3, dds, 00961724, 70695AAC18279C2EDA92F4F2F231DEBE, 9C2664E2AEAB0FA064ADA4D9D40DF823EF64F6E26E033C79F509EBD7B2307992 Physical Sector: 0 (No malicious items detected) WMI: 0 (No malicious items detected) (end)

Thanks. So this is a false positive, correct?

New folder.zip I've attached the file in this zip folder. The file is named libGLESv2.dll

Malwarebytes detected a DLL file in the Streamlabs OBS/swiftshader folder as Malware.AI. It's never detected this file as malware before so I've got no idea why it's detecting this as malware now. I'm guessing this is a false positive because I scan it everyday, it's never detected this before and I have not edited the file in anyway. Virus total says it's clean too so I'm not sure what's going on. Anyone know if this is a false positive?

Any updates? I need to use these files but I keep getting the same exploit nonsense. I've followed what others have done on this forum but I still can't open the MS Office Programs.