liz2509

Hello! Sorry I couldn’t respond in time. Just to be sure: check all of the 6 boxes?

@Maurice Naggar hello! here are the files FSS.txt SecurityCheck.txt

@Maurice NaggarHello! So, the printer driver is apparently updated, since I just tested and checked for updates even, and therefore I don’t have any issue with it specifically. I also checked a video from a forum you sent me, on how to solve the core isolation issue and it unfortunately wasn’t my exact problem. In the video, the person is not able to activate it because there’s an old driver stoping it, which is warned by Windows. This is not what happens to me because I am able to activate it and also apparently it doesn’t turn off everytime I restart my PC, like one of the people in that other forum - but there’s still that yellow sign and a text saying it is not active 🫤 Regarding the hyper-v thing, it’s not shown in Programs in Features… So I couldn’t deactivate it in this way. There’s these two steps that I didn’t follow (quoted above). Can I still do them? Thanks

@Maurice Naggarhello! i just downloaded epsons software to check if it’s updated. just a curiosity: in this last program you recommended to check my print driver info, it told me that a virtual machine feature from windows was active. is that normal?

yes, an epson l3150

@Maurice NaggarHere's the fix file Fixlog.txt

Here's the file for HWiNFO. I'll do the second step and post the file next. LAPTOP-IHLGJ1QM.zip

@Maurice Naggar Hello! Sorry it took me longer to reply you. I went to Windows Update to check if my printer driver had a problem and there was not anything there. And there are some updates as well that are being processed while I’m writing this. So, do you know exactly how I can find out if my driver is outdated and how to remove? I didn’t follow these steps yet because I don’t know how relevant it is for me to exclude this driver/if it causes any impact on the following steps

@Maurice NaggarOh, I see. It could make sense since my computer reported the printer driver was outdated before I took the system restore. I will take a look on these forums. Are there any new steps? Is my computer safe to be used now? I felt so worried I just simply stopped using it and logged off every single account I had. Do you have any recommendation as what I should do from now on, do I use malwarebytes as my antivirus now and microsoft defender? Do scans from time to time in both? Thank you

Oh I see. However I still worry because of the context of it all. I had a system restore and these protection/control tools were deactivated for some reason since the first day of restore. Also the fact that the “tamperingrestore” file was found and related to W. Defender and the amount of infected files found even though I hadn’t really downloaded anything on my PC after the restore makes me very confused and worried ☹️

@Maurice Naggar Hello! The Windows Defender still has a warning sign saying my “device protection” (when it comes to “core isolation”) and “apps & browser control”* are both deactivated. I have searched for any updates for virus and threat protection and it says it is up to date. I have done a custom scan and it says nothing was detected. Took 30 minutes and scanned around 365.000 files. *I am not sure if these are the exact names in English because my computer is registered in another language, but I believe it is comprehensible.

@Maurice Naggar Ok. Done it. Here's the file Fixlog.txt

@Maurice Naggar Oh, that is good. I will wait then. Thank you. Just a small question: some files were quarantined and others, replaced. Is it normal?

@Maurice Naggar I checked to see if there was any update and it said it was up to date. So I immediately repeated the scan and selected quarantine for all of them, with Here's the file. Scan run report 2.txt

@Maurice Naggar Hello. Here are both files. After I uninstalled McAfee, I received notifications from Windows Defender saying the protection was deactivated. Also, after doing the second step, I also got a notification saying both Windows Defender and Malwarebytes were deactivated. Scan run report.txt AdwCleaner[S00].txt

@Maurice Naggar Yes, this computer came with McAfee LiveSafe from the factory. I have not paid it, it is actually a free trial version. It is installed automatically and I have never directly used it in the sense of actually accessing it and selecting any tools or tasks from McAfee, however, it is active on my computer and it does scans of my files and what I download on the Internet, since it always pops up with a message telling me. I have just loaded McAfee now and it says my antivirus protection is on, and the 'tracker remover' is as well. With that in mind, should I still uninstall McAfee? I have disabled the fast startup option now and I am going to do the restart.

Hello. Here's the file. Is it correct? Thank you for reaching me! mbst-grab-results.zip

Hello. I really need your help. I had decided to look on my task manager program and I had seen an unusual process occurring. Unusual because it had a very specific installation date - very different from the others, who had the same date - and there were some reports on the internet saying it could be something suspicious. It was recommended to do a scan on the computer with Microsoft Safety Scanner, so that was something I decided to do as well. It scanned almost my entire computer, for some reason it stopped when the loading bar had already 2/3 of it completed. It detected 2 infected files. The program informed the scanning was done immediately and there was 1 malicious file deleted, which was the defendertamperingrestore one. Fine. Then I went to enable Tamper Protection on Windows Defender. It asked me to restart my PC to apply it. Did it. Tamper Protection was activated, however it had the warning sign still as if I hadn’t actually enabled it. I did not repeat any scanning because I knew there is this possibility that this malware has not been removed from this PC. Some notes: - I have used this device for exactly 1 year; I had done a system restore about two weeks ago, and no files were kept. That one suspicious process running had been informed to be installed on Feb 11th 2023. - I have a history of downloading pirate games in this device, and I knew there was the possibility of installing something considered suspicious - therefore did not consider it could actually be. - When i start my computer, it seems like something is running because of the cooler sound and brief loading pointer. - I had decided to system restore this computer because I was worried something suspicious was installed since my Microsoft account keeps getting several unsuccessful entries. - This computer comes previously installed with McAfee however I had not selected any preferences nor executed any scans. I hope these infos were clear enough. I am not so much aware of the language of this field so if there’s the possibility of providing more detailed steps, I would appreciate it so much. I really need your help removing it because this device is used for work, study and personal purposes. At this point I am very very desperate and anxious. If anyone can help me, please. Thank you.