AussieWayne

Ok so here are the requested files for your perusal. Thank you Kind regards Wayne AdwCleaner[S05].txt Mbam scan 27 June 2021.txt Addition.txt FRST.txt

Hello The following popped up in my scan this morning? machinelearning/anomalous100% What is it and what do I need to do please? pc is running very slow so am posting from my ipad roguekiller scan using 20% cpu and running for an hour or so??? wayne Malwarebytes www.malwarebytes.com -Log Details- Scan Date: 25/06/2021 Scan Time: 09:45 Log File: 5019b870-d546-11eb-9be7-70f3955f6860.json -Software Information- Version: 4.4.0.117 Components Version: 1.0.1318 Update Package Version: 1.0.42129 Licence: Premium -System Information- OS: Windows 10 (Build 19043.1052) CPU: x64 File System: NTFS User: System -Scan Summary- Scan Type: Threat Scan Scan Initiated By: Scheduler Result: Completed Objects Scanned: 406155 Threats Detected: 1 Threats Quarantined: 1 Time Elapsed: 16 min, 59 sec -Scan Options- Memory: Enabled Startup: Enabled Filesystem: Enabled Archives: Enabled Rootkits: Disabled Heuristics: Enabled PUP: Detect PUM: Detect -Scan Details- Process: 0 (No malicious items detected) Module: 0 (No malicious items detected) Registry Key: 0 (No malicious items detected) Registry Value: 0 (No malicious items detected) Registry Data: 0 (No malicious items detected) Data Stream: 0 (No malicious items detected) Folder: 0 (No malicious items detected) File: 1 MachineLearning/Anomalous.100%, C:\USERS\WAYNE\APPDATA\LOCAL\TEMP\BIT6818.TMP, Quarantined, 0, 392687, 1.0.42129, , shuriken, , 6D0BC6BBDD7141243BF266D2B66F32F5, F4FB7A563E159311364B7AF44ADB060A09A51163DC99DF9D663E353907DF952F Physical Sector: 0 (No malicious items detected) WMI: 0 (No malicious items detected) (end)

Ok thank you I will leave it at that as I think that you would have much more important things to do. I am working my way through all your advice and the links you have provided and will definitely end up with an improved safety profile by the time I have finished. I will run Firefox with DuckDuckGo for a while with the bookmarks and passwords imported and see how I go? I will investigate an external password manager but the thought of having to go and visit say 200 websites to then manually change the current passwords that I have set seems a bit daunting but............. Sorry one last question arises from writing this : Could I just use the current passwords imported into Firefox which encrypts them and turn on he Primary (master) password to protect unwanted access? Is this not so very similar to using say KeePass?? If happy then I will eventually delete Google Chrome all together.

Ok once again thank you so much for all your advice and guidance, it has been very helpful. I am reading my way through your last two links and will move to Firefox with DuckDuckGo as the search engine and see if it works for me. It's quite involved because I have to export import all bookmarks and then somehow work out which is the best password manager from your links or do you think it would be safe enough if I imported my passwords (about 200) into Firefox and relied on the beefed up security provided by switching to Firefox?? The theoretical problem I have with using password managers is that if someone manages to get just one master password then they own me as they have unfettered access to everything that I have that does not have a further 2FA attached? I only use these passwords from my laptop (not android phone or iPad) which is pretty well secured at all times in one of two places ie home or small office.

I have been toying with the idea of changing to Firefox for a while. It's just that I am so ingrained into the Google Chrome world? Could I use Firefox with Google as the search engine or is that not improving things much? I have Firefox installed with DuckDockGo but I don't think the search results are as broad as with Google. What do you think? Also any recommendations to replace my much loved CCleaner that was removed in this cleansing process? Thank you

Ok so we have success with the modelwork.org message not popping up anymore. I was following your instructions in preparing to completely reset Google Chrome to default. I exported bookmarks and passwords and policies as a backup. I removed all the extensions and the message still popped up upon opening a new tab. So I next removed three search engine selections Yahoo, Bing and Ecosia? This leaves only Google and Duck Duck Go installed Then tested again and the problem was solved👍 without having to go to the drastic step of a complete reset. I believe that it was most likely this ecosia engine which I have never heard of before and I do not know how it installed itself on my computer? I have continued to test with opening and closing new Chrome windows and tabs and so far all is good. I have reinstalled all my extensions and some new ones as well and this has not recreated the problem. I would like to thank you for your valuable support and guidance through this procedure as it has been most helpful and successful. Kindest regards

Hi Yes tomorrow is fine> We have all got to sleep😴 The problem does not arise when Firefox is used, just Chrome either signed in or totally signed out???? Thanks

Hello to any Admins I have not heard back after posting my logs in my previous post following the running all the fixes? Is there any further guidance you can provide as the problem still persists. Thank you

Ok so I have followed your instructions without a problem. I have just turned Defender back on and opened a Google Chrome shortcut and the same message is still popping up. In other words nothing has changed?? Files attached What do I do next please? Thank you FRST.txtAddition.txt

Ok so please see the attached files as requested. Addition.txt FRST.txt Mbam scan 26 05 2021.txt AdwCleaner[C04].txt

Indeed it happens even when I am not signed into any gmail account? So when I click on the Google Chrome shortcut on the Desktop it opens the page then the same message pops up?

Thank you for the guidance. I have checked each of my gmail addresses and none of them have Sync turned on so not sure if I should still follow your instructions in full? I seem to have this problem no matter which personality I log in as? Please advise Thank you

Hi guys I have a new Malwarebytes message continually popping up starting today the 25th. Message relates to blocking modelwork.org as a trojan see below This occurs when I begin to type anything into the search box in the Google Chrome browser on my Windows 10 laptop? Can anyone advise what this is about please and what I need to do? Should I be worried? Have run MBAM scan and Defender scan of program files(x86) as well as Defender offline scan with nothing reported? Thanking you in anticipation AussieWayne Malwarebytes www.malwarebytes.com -Log Details- Protection Event Date: 25/05/2021 Protection Event Time: 11:48 Log File: 503181c0-bcfb-11eb-81c1-70f3955f6860.json -Software Information- Version: 4.3.0.98 Components Version: 1.0.1292 Update Package Version: 1.0.40868 Licence: Premium -System Information- OS: Windows 10 (Build 19041.985) CPU: x64 File System: NTFS User: System -Blocked Website Details- Malicious Website: 1 , C:\Program Files (x86)\Google\Chrome\Application\chrome.exe, Blocked, -1, -1, 0.0.0, , -Website Data- Category: Trojan Domain: modelwork.org IP Address: 5.149.254.180 Port: 443 Type: Outbound File: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (end)