Jump to content


  • Posts

  • Joined

  • Last visited

  1. That's a very good suggestion. I'll see to it during the first part of week. It seems that both sites are reputable (Malwarebyte of course and also TheWindowsClub which I've been getting help from on and off for years; they should both be informed). Otherwise, I consider this thread closed as far as my original problem goes. I thank everyone for their help, comments and encouragement. Be well.
  2. https://www.thewindowsclub.com/windows-10-bloatware-windows10debloater You're right, for whatever reason, that link goes all 404. Perhaps it is because it got split between two lines in my reply. AAR, I tested the one above (after I pasted it in this message) and it goes to the correct page and, at least for me, generates the MB pop-up. If it doesn't work for you, try going to the windows club site and search on the word 'bloatware'. For me it was the first link that was listed. To clarify, I only have one start-up page: to Duckduckgo. I sometimes 'pin' a website to the browser when I am doing something that causes me to return to the site frequent but temporary basis. To me, in my tiny little world, there is a difference between a startup page and a pinned page. I've no idea why I think this but I do.
  3. I have, I think, finally figured this out having first gone through the process of approaching it as malware on my pc then, when that didn't fit the symptoms and the periodic (apparent) reappearance -- moving on to what I then thought was a problem with either Malwarebytes or Opera since the recurrence happened only when Opera was open then onto what I now believe is the problem: a particular web page I had 'pinned' in Opera (since I was working on the same problem across multiple computers) seems to be the culprit. Specifically, the page contained within the website 'thewindowsclub.com' https://www.thewindowsclub.com/windows-10-bloatware- windows10debloater triggers the Malwarebytes bytes Restoro pop-up consistently. It is my belief that there is an embedded link within their (Windows Club) page that is there either by mistake or perhaps is a false positive. In any case, once I de-pinned the page from Opera, it ceases to appear unless/until I browse directly to the page again (even after clearing the cache). If no one else has anything to add, I will drop back here in a day or three and mark this issue closed.
  4. I greatly appreciate the information you have referenced and will be looking at it more closely (I did spend about two hours reading through it, today) as it is complex and I want to make sure I understand before I pursue individual solutions. I'll be back with this thread either late in the weekend or on Monday. Have to do other things now . . . have a great weekend!
  5. Okay, first - thanks for the referrals to the anti-bloatware tools; there were two there I hadn't come across before so I will look at them also. Second, the machine we're talking about is my new DAW where I have already copied over backups of legacy studio apps for potential reinstall (some dating back to as early as 2001). Most won't get reinstalled but the backup files/folders have been copied to it just in case. I have a lot of leg work to do to get this all functioning again. There are a lot of legacy programs that involve sound, sound cards, midi, audio I/O, etc. so I will have to sort through all that you've highlighted. Third, the gaming 'cheats' frequently generate false positives. Clearly, I have made a mistake in copying those files to a place that seems associated with the DAW -- and it shouldn't be -- as the DAW will not be a gaming machine -- I have another device (a laptop) for gaming to whatever extent I might do any gaming at all. So I can remove those references to increase security. Superantispyware is a product I've had a license to for many years and have used on occasion. Are you recommending that this product no longer offers sufficient security to continue it's use? I have to admit that it is installed more from habit than any particular conviction as to its worth. It is also true that I don't quite understand how you derived your information but I'm curious to hear your recommendations for alternatives (if any). Also, is there a danger to continue using it (e.g. I'm I lulled into a false sense of security that is not justified by the product?) As for the rest of your detailed information, I will need to reread it when I've had more than four hours sleep - so forgive me if it is a few days before I return with more information. I deeply appreciate your time, effort and the trouble you've taken to assist me.
  6. Obviously, my plans changed and I ended up in the studio -- partially to wrap this up. I did more exploring and came across three things that I have neutered (or, if you prefer, spayed) all of them found in the startup apps/files section of the universe. 1) Opera Browser Assistant, 2) MSASCil and 3) updatechecker.exe; of these 1 or 3 may have been the culprit - research online seems to indicate it's pretty useless and maybe even qualifies as a form of spyware (odd, for a browser that makes the claims to privacy that they do) and everyone pretty much agrees that it can be removed or rendered useless. The second relates to operating system security but, again, strictly speaking it isn't necessary in the startup folder so I have (at least temporarily) disabled it. The third candidate shouldn't be there from what I can tell and it doesn't seem to be a legitimate part of the Minitools Disk Partitioner 12 so I disabled it then renamed it to see if anything happens. I will point out that none of my antimalware programs registered its existence in prior scans. But, for the sake of completeness, I reinstalled Malwarebytes and removed then reinstalled (the updated version) of Minitools DP 12. So far, I have not seen the pop-up again but I need to reboot my system after these changes then see what happens. Just so you know what I've done so far.....
  7. MBlog.txtAdwCleaner[S00].txtFRST.txtAddition.txt
  8. I am unsure what extensions are running on that version of Opera (I'm currently on a system that I recently acquired that hasn't got Malwarebytes installed on it, yet. I'm still in the process of configuring it for my wife's use. I will be adding it here, shortly. Your second question is why Opera is running out of Dropbox? Because in the days of Windows 7 x64 Ultimate -- it provided a way for me to have a single instance of Opera which I could use across several computers in my environment. It worked pretty well, too -- aside from having to delete 'conflicted copies' every few months or so. I did the same thing with Thunderbird, which was (and is) even more important to do so I can keep my emails consistent across different devices. Since being forced into Windows 10 Pro, I'm still working to determine if the same system can still work under the new and less flexible OS. I do not know if I can get those scans done today as I may not make it out to the studio to work on that computer. I should be able to get them back to you no later than Friday afternoon after I get back from my morning appointments. Fair enough?
  9. 1. I have and have had Malwarebytes installed and operational. 2. I do not believe I have anything installed that comes from Restoro.com. There is absolutely no evidence for it in the programs directory nor in the registry. I have already read your other posts about this (to other people) and checked. 3. Were not these logs covered in the attachment I already posted (see above). 4. Malwarebytes is stopping some sort of embedded reach-out that happens when I load up Opera (each time). I do not know how to find it within Opera and am not sure whether I should reach out to their support for additional help. 5. I do not and will not use Edge unless it is an absolute emergency. 6. I do not currently believe this a problem with Malwarebytes software but it isn't providing me with adequate information on what triggers the message to pop up every time I start Opera.
  10. Specs: Microsoft Windows 10 Pro Version 10.0.19043 Build 19043System Type x64-based PCProcessor Intel(R) Core(TM) i9-9900KF CPU @ 3.60GHz, 3600 Mhz, 8 Core(s), 16 Logical Processor(s)American Megatrends Inc. 1.D0, 12/31/2020 SMBIOS Version 2.8BIOS Mode UEFIMSI MPG Z390 GAMING PLUS (MS-7B51)Installed Physical Memory (RAM) 128 GB I am in the process of building a DAW. I use Opera as my principal browser and I don't much like Windows 10 pro (or any of Windows 10 versions) but I'll not get sidetracked on that rant. I have been removing a lot of the bloatware that comes with Windows 10 that I don't want conflicting with the DAW or robbing it of resources. For the last week or so, every time I pull up Opera, I get" Malwarebytes www.malwarebytes.com -Log Details- Protection Event Date: 7/21/21 Protection Event Time: 1:53 PM Log File: e610ac58-ea54-11eb-b0cb-2cf05dd23c20.json -Software Information- Version: Components Version: 1.0.1358 Update Package Version: 1.0.43347 License: Premium -System Information- OS: Windows 10 (Build 19043.1052) CPU: x64 File System: NTFS User: System -Blocked Website Details- Malicious Website: 1 , H:\DrpBx\Dropbox\newopera\Opera\77.0.4054.203\opera.exe, Blocked, -1, -1, 0.0.0, , -Website Data- Category: PUP Domain: restoro.com IP Address: Port: 443 Type: Outbound File: H:\DrpBx\Dropbox\newopera\Opera\77.0.4054.203\opera.exe (end) I have searched the registry and all the drives and cannot find anything in the registry which corresponds to any of the file/folder information published on this site. I would like to get Malwarebytes to stop this warning if I just knew what I had to get rid up in order to do so. Suggestions?
Back to top
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.