mangowhite

Thanks for everything Maurice! I guess i'll just ignore these warnings since we protected this computer with your help. After this i'm surely buying malwarebytes premium. Thanks for your insane support.

Just did that.

Ok. No more issues then!

After the amount of support you gave me I'm really considering in buying malwarebytes premium. Ok, so, after I finished setting the firewall rules... literally 10 minutes later I get this report: MalwareBytesReport20-03.txt

Good Afternoon Maurice. I've done everything that the tutorial you sent asked me to. Here's the result: And I've also ran another windows defender scan. No threats were found and I have no idea of where this instup is.

I was checking windows security logs and got this. I'd like to know if it's normal:

Good morning Maurice. Well, the system is running very well and my computer isn't overheating anymore, although, the number of blocks on that same IP are still growing. As you said, this is something external, so I presume there's nothing we can do to stop it. Correct me if i'm wrong, but I think that it will stop soon since it had no success all these days. I'm including in the attachments the log created by Security Check, the one app you just sent me to download. I hope you're having an amazing Saturday. Thanks! SecurityCheck.txt

I couldn't find any log files. This is the result after an indeed long post

I've done what you said Maurice. The sub-folder and all its contents are gone. There was a file named pie in there and the word "ANSIOSA" (name of the threat) stands for anxious in english. Seems like I was dealing with some kind of brazilian malware as well. wtf.

I don't know if this one is relevant, but I did a full scan with malwarebytes tonight and got this following result: MalwarebytesReport.txt

Good Morning Maurice. I've looked in Windows Security Systems and they seem to look fine. All of them are enabled and I have a green checkmark in the desktop bar icon. I've downloaded the application you provided and will attach the file you asked along with an image of my windows security screen. FSS.txt

Hello Maurice. Good afternoon. I followed your instructions and everything that yFixlog.txtou said happened. I'll include in my attachments the file you requested. Thanks for having patience with me.

This is what I get when I follow the path you directed me to. It says "The Remote Desktop allows you to connect and control this computer from a remote device using a client of the Remote Desktop (Available for Windows, Android, IOS and MACOS). You will be able to work in another device as you'd be working directly in this computer. And then, in yellow, we have: Your edition Home of Windows 10 has no support to the Remote Desktop Feature. Finally, we go to the second path. Everything is now enabled, but not the "real time protection" which has been replaced by malware bytes. Anything else for me to do?

malwarebytesreport.txtHi Maurice. I have no Remote Acess on. I'll uninstall avast now then. I attached a new report here.

MalwareBytesReport.txt Hello Maurice. I'm starting to feel scared about this. I'd like to know if I should stay calm. It just wont stop. The same IP, the same port, once again.

MalwarebytesReport.txt It seems like no issues were found.

I realized I hmsert.logad to close it after giving you the report. Here it is

MalwarebytesReport.txt Right after finishing it, I receive another error. I had open: Email app, firefox which I JUST installed and these other applications:

I guess this is relevant too.

Hello. This is the result. It was a long scan. There was 9 infected files. What's the next step? msert.log

Hello Maurice, I hope you're having an amazing night. Thanks for taking time to help me. I had Chrome open. I uninstalled it as a matter of fact. Sadly, minutes after uninstalling it, I received another notification from the same IP and port. I included in the attachments the full report. Sorry for the portuguese language, it's set in my OS. MalwarebytesReport.txt

Hello! I've just started using MalwareBytes Premium Trial. The Real Time protection sends me a new message in this style every 2~3 hours. I want to know if I can do something to stop these attacks or if this is somehow expected to happen. All of them, when clicked, are accused of being a Trojan attempt. Please, help if possible. Also, they all have the same port: 445. This is weird. The same IP is trying to wreck my system, it seems. I've also read an old post with the same issue, it made me download an app provided by a staff of the MalwareBytes team. It's called FRST and it seems to be able to identify the issue. i've sent the attachments created by it to provide all the necessary information for an expert. Thanks for reading my issue, I hope you're able to help me! Will anxiously wait for your return. FRST.txt Shortcut.txt Addition.txt