Vortex425

kprm-20221228123956.txt

I have Notepad++ installed on my system. I installed JDownloader 2, and I'm aware of its purpose. It's not a threat... I checked for Windows Security updates and installed the one that was found. And I don't have outbound blocks anymore. Thank you very much for your help!

SecurityCheck.txt

Strange, during the scan the program indicated that it found 3 infected files, but nothing is mentioned in the log... 🤷‍♂️ msert.log

ScanLog.txt

Fixlog.txt

However, I have also noticed that after closing Malwarebytes, Windows Defender recognizes powershell.exe as a threat...

Here are the requested logs. However, I have to say that I somehow "solved" the problem very radically by deleting RegSvcs.exe in Windows Safe Mode. So far, the problem hasn't recurred. But I also don't know whether deleting the Execute will cause problems in the future. mbst-grab-results.zip

Since yesterday, the Malwarebytes info window keeps popping up with the following information: Malwarebytes www.malwarebytes.com -Protokolldetails- Datum des Schutzereignisses: 24.12.22 Uhrzeit des Schutzereignisses: 13:34 Protokolldatei: 54a8cf8e-8387-11ed-830c-00d861d9097c.json -Softwaredaten- Version: 4.5.19.229 Komponentenversion: 1.0.1860 Version des Aktualisierungspakets: 1.0.63776 Lizenz: Testversion -Systemdaten- Betriebssystem: Windows 10 (Build 19045.2364) CPU: x64 Dateisystem: NTFS Benutzer: System -Einzelheiten zu blockierten Websites- Bösartige Website: 1 , C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe, Blockiert, -1, -1, 0.0.0, , -Website-Daten- Kategorie: Schadsoftware Domäne: N/A IP-Adresse: 185.81.157.19 Port: 3315 Typ: Ausgehend Datei: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe A scan with Malwarebytes brought no results. I have already blocked port 3315 in my firewall, but the window keeps popping up. Is there anything I can do about it?