daledoc1

January 4, 2015

EDIT: I forgot to answer your other question....

If you do not have MBAM Premium Self-Protection enabled, then you will not see the Chameleon service running.

Cheers,

January 4, 2015

Hi:

That's a known logging/display bug that is due for fixing soon (perhaps with the next version release coming up in the next month or so).

(In some cases, the bug becomes obvious when the user has the setting enabled to "check for updates before scanning". As scheduled update checks are randomized +/- 15 minutes, so, too, are the subsequent scans. That throws off the GUI display for "next scheduled scan".)

Until this is fixed:

You can verify that scheduled scans (and update checks) are running as planned by opening the GUI > History > Application Logs.

The scan logs will show that the scans are running.

The protection logs will show that the update checks are running (when there is an available update -- a check that runs when there is no available database update is not logged). And you can mouse over the system tray icon to see what database version is installed.

Cheers,

January 4, 2015

Hello and :welcome: , @Neverwinterx:

I just noticed the same issue. Probably the scheduled tasks didn't carry over to the new year.

Actually, that's not likely to be the case -- if it were, there would be several million reports here at the forum.

We're sorry to hear you are having issues.
Each computer is unique.
Problems that sound "the same" most often are not.
The same is true for solutions.
They most often need to be individualized.

It is less confusing for everyone if we try to stick to "one user per topic".
Please start a NEW, SEPARATE forum topic using this clickable button.
The staff and experts will be able to more easily provide both you and the OP with individual help to get you both up and running.

@robkarp:

Thanks for the logs -- we'll need to wait for a forum expert or staff member to review them.

I didn't see anything obvious, so you might want to try a clean reinstall, to see if that resolves the issue.

Instructions are here: MBAM Clean Removal Process 2x

Thank you both for your patience,

January 4, 2015

Hi:

Your logs do not show that site in your MBAM web exclusions.
A Google search shows that it is some sort of javascript item, akin to Google Analytics.
It might have been a temporary occurrence while you were on a particular website?
(There are extensions for browsers, such as NoScript for Firefox, that will block this sort of thing.)

If you would like an expert to review your logs and perhaps run some deeper system scans, then I suggest that you might want to please follow the advice in this pinned topic: Available Assistance For Possibly Infected Computers.
It explains the options for free, expert help >>AND<< the suggested, preliminary steps to expedite the process.
A malware analyst will assist you with looking into your issue.

Thanks,

January 4, 2015

Hello and :welcome: :

It's not Facebook.com itself, but likely rather content on some of the pages.
It sounds as if MBAM is doing its job.
More info here: What does it mean when I get an alert that Malwarebytes Anti-Malware has blocked a malicious site?

OTOH, if you are getting a lot of IP blocks, especially with no browsers open, it could be a sign of infection.
In that case, you might want to please follow the advice in this pinned topic: Available Assistance For Possibly Infected Computers.
It explains the options for free, expert help >>AND<< the suggested, preliminary steps to expedite the process.
A malware analyst will assist you with looking into your issue.

ALSO, for additional information:
There is an FAQ Section here: Common Questions, Issues, and their Solutions
And here are links to the MBAM 2.0 User Guide: Online and PDF
And there are many useful KB topics and videos at the helpdesk support page

Thanks,

January 4, 2015

Hi:

<snip>

Why do I have to download a 3rd party app to run with Malwarebytes?

Not sure what you mean by "run with Malwarebytes".
FRST is a perfectly safe, non-invasive diagnostic scanner that was developed by farbar, one of the experts here at this forum.
It is used 100s of times a day here, at bleepingcomputer (where it is hosted), and at other computer disinfection forums.
It provides a bit of basic system information to help with troubleshooting and (if needed) malware removal.

As we are not in front of your computer, and as each computer is unique, such diagnostic tools are the only way we can try to determine what might be going on.

Why not something from Malwarebytes themselves?

The mbam-check tool is developed and published specifically by Malwarebytes to help to diagnose problems with MBAM.

Why does Norton AV remove FRst.exe when I go to run it?

Norton is notorious for flagging legitimate anti-malware tools and scanners.
(It is due in part to Norton's failure to actually test and whitelist these sorts of tools.)
Please just temporarily disable Norton to download and run FRST.
Then, re-enable Norton.

Then, please attach the requested 3 logs (FRST.txt, Addition.txt and Checkresults.txt).
The forum staff and experts will review them and advise you further.

OTOH, if you think you might be infected, then it might be more efficient simply to head over to the malware removal section.
If so, then suggest that you might wish to please follow the advice in this pinned topic: Available Assistance For Possibly Infected Computers.
It explains the options for free, expert help >>AND<< the suggested, preliminary steps to expedite the process.
A malware analyst will assist you with looking into your issue.

Thanks,

January 4, 2015

Hello:

Well, speaking only as a home user, not an MBAM staff member, the status of a particular IP can change, either clean --> not, or vice versa.
That's why blocks are added or removed.

If you're not satisfied with the IP blocking module, then there are several options:

Ignore the program notifications about the module being disabled until the new version of MBAM is released, which will afford more user control of those notifications (at least the popups)
Set web exclusions for potentially malicious sites MBAM blocks but which you want to visit (not recommended)
Uninstall MBAM Premium and reinstall as the free, on-demand, manual scanner with no real-time protection (not recommended)
Or follow KenW's advice here

ALSO, for additional information:
There is an FAQ Section here: Common Questions, Issues, and their Solutions
And here are links to the MBAM 2.0 User Guide: Online and PDF
And there are many useful KB topics and videos at the helpdesk support page

Thank you,

January 4, 2015

Hello:

It appears to be a legitimate Windows file that is signed by Microsoft.

However, we are not permitted to work on possible malware-related issues here in this section of the forum.

So, if you think you may be infected, I suggest that you might want to please follow the advice in this pinned topic: Available Assistance For Possibly Infected Computers.
It explains the options for free, expert help >>AND<< the suggested, preliminary steps to expedite the process.
A malware analyst will assist you with looking into your issue.

Thanks,

January 4, 2015

Hello and :welcome: :

A couple of easy things to check:
>>First, please be sure your system date/time are correct.

>>Also, please check to be sure there are no "Detected Threats" that need to be dealt with first, as this can prevent the program from updating: Click the "Scan" button at the top of the dashboard and verify that there are no detected threats (especially PUPs or PUMs) awaiting your actions.
>>Then, please be sure that your AV and firewall both give MBAM full permissions. It's possible that your AV or firewall might be treating MBAM as a new program and may be blocking it -- the files that need to be excluded can be found HERE (just the one reply, not the entire thread). Please post back if you need help with that.

If those suggestions don't resolve your issue:

Please follow the steps in this pinned topic to uninstall your current version of MBAM and reinstall the latest build - MBAM Clean Removal Process 2x
If that does not correct the issue, then please read the following and attach to your next reply the 3 requested logs - Diagnostic Logs (the 3 logs are: FRST.txt, Addition.txt and CheckResults.txt)
NOTE: There is an FAQ section with valuable information located here - Common Questions, Issues, and their Solutions

Please let us know how it goes.

Thanks,

January 4, 2015

Hello and :welcome: :

We are not permitted to review scan logs or work on possible malware-related issues here in this section of the forum.

So, if you think you might be infected, I suggest that you please follow the advice in this pinned topic: Available Assistance For Possibly Infected Computers.
It explains the options for free, expert help >>AND<< the suggested preliminary steps to expedite the process.
A malware analyst will assist you with looking into your issue.

Thanks,

January 3, 2015

"Classics" as in "in the classic style", not as in "these are old".

Sorry if it came across the wrong way.

January 3, 2015

AFAIK "Refresh" is for Windows 8.

I don't think it's applicable to Windows 7.

And if you end up with the wrong/illegal file(s) and the wrong instructions, you could end up in serious trouble.

Question: Are you sure that you need to do a repair install?

There is an entire sub-forum devoted to Windows 7 Update issues at SF.com.

Pinned topic with posting instructions: Windows 7: Windows Update Posting Instructions

The Update sub-forum: Windows Updates and Activation

Perhaps they could help to resolve the issues you're having?

Another thought: Is the laptop under warranty? If so, your manufacturer probably offers support.

Again, all of this is merely a respectful suggestion from another home user -- please feel free to "take it or leave it".

Cheers,

January 3, 2015

Hello and :welcome: :

That can occasionally happen with some infections on some systems.

We are not permitted to work on possible malware-related issues here in this section of the forum.

So, for expert assistance, I suggest that you please follow the advice in this pinned topic: Available Assistance For Possibly Infected Computers.
It explains the options for free, expert help >>AND<< the suggested preliminary steps to expedite the process.
A malware analyst will assist you with looking into your issue.

Thanks,

January 3, 2015

Hello and :welcome:

Until the staff members have a chance to reply, we could use a wee bit of additional info:

Please read the following and attach to your next reply the 3 requested logs - Diagnostic Logs (the 3 logs are: FRST.txt, Addition.txt and CheckResults.txt).

Thank you for your patience,

January 3, 2015

Funny "classics"!

Thanks for sharing!

And Happy New Year!

January 3, 2015

Hi:

Please follow the advice in this pinned topic: Available Assistance For Possibly Infected Computers.
It explains the options for free, expert help >>AND<< the suggested preliminary steps to expedite the process.

As you have already run FRST, after reading the sticky topic mentioned above, please start a NEW, separate forum topic in the malware removal section.

Please include the same logs you posted here.

Then, please wait at least 48 hours for an expert helper to assist you -- replying to the topic or "bumping" it before then could lead to inadvertent delay, as it will appear that you are being helped.

Thanks very much for your patience and understanding,

January 3, 2015

Thanks for your kind words (on behalf of the true forum pros).

It's just that, if you look around (even in this area of the forum), you won't see too many topics about MAJOR repairs/OS reinstalls and that sort of thing.

"We" just don't very much of that sort of support here, with step-by-step help.

Please do feel free to wait for help here, if you wish.

There are a lot of very talented and expert folks on staff and volunteers.

And someone is bound to weigh in here.

I was just presenting a few other options that might be a bit more efficient for you.

Please let us know how it goes.

Cheers,

January 3, 2015

Hi:

It looks as if "Twin" has helped you with some cleanup in your other topic.

Please note: 1 GB of RAM is not very much for running an OS and today's software.

So, there may be only "so much" that can be done to improve your performance and speed with that setup.

One option-- assuming that a new computer is not an option:

If your computer's motherboard and specs will support it: add more RAM (It's very cheap these days and will likely improve performance, even with an older, slower processor).

AFTER "Twin" gives you the "all clear" from a malware standpoint, and after you have completely and cleanly uninstalled one of the 2 AVs (we would recommend that you uninstall MSE and keep Avast), you might want to start a new topic in the General PC Help section >>here<<.

The forum members/experts may be able to assist you there with upgrading the RAM on your computer.

If you do, please copy/paste both of these links into the new post, so that other forum folks can get up to speed:

https://forums.malwarebytes.org/index.php?/topic/163046-premium-makes-my-computer-very-slow/https://forums.malwarebytes.org/index.php?/topic/163057-possible-malware/

Thank you again,

January 3, 2015

It's not a problem and no apology is needed.

I was just pointing you to the best place to get help for your issue.

Thanks!

January 3, 2015

Hi:

Welcome back.

Given that it's the holiday weekend and many of the staff and experts might be taking some time away, I might suggest perhaps posting at a more "general" computer forum (such as bleepingcomputer.com) or one specific to Win7 support (such as sevenforums.com).

The members and volunteers there tend to deal with these sorts of ambitious projects on a regular basis.

So, you might find tutorials and help there a bit quicker than here?

Thanks,

January 3, 2015

Sorry, but the malware did not come with Firefox, IF you obtained it from the official source.

Otherwise, there would be 10s of millions of similarly affected and infected users.

But, that's neither here nor there.

We are not permitted to work on malware diagnosis, removal or repair here in this area of the forum.

So, I suggest following the original advice given by noknojon in his original reply.

A malware expert will assist you -- for free -- with checking, cleaning and repairing the system.

Thank you again,

January 3, 2015

Hello and :welcome: :

We are not permitted to review scan logs or work on possible malware-related issues here in this section of the forum.

So, for expert assistance, I suggest that you please follow the advice in this pinned topic: Available Assistance For Possibly Infected Computers.
It explains the options for free, expert help >>AND<< the suggested preliminary steps to expedite the process.
A malware analyst will assist you with looking into your issue.

Thanks,

January 3, 2015

Hi:

There is a batch file around that will rebuild the task bar icon cache, that I have used. <snip>

The first link below?

Ennywho, for the icon issue, you might want to have a look at these tutorials, if you are comfortable with this sort of thing:
HERE or HERE or HERE

Cheers!

January 3, 2015

You are most welcome.

Take care,

January 3, 2015

Great!

Thanks for letting us know.

I'm glad I was able to help.

Take care,

Events

Profiles

Forums

Posts posted by daledoc1

Important Information