D1117

I think I ran everything. Let me know if I missed attaching a results file. I also have noticed that I am unable to get other PCs in the house to attach to a shared printer I have on this PC, as well as a file share that I used to connect to using the Apple Files program SMB connection from my iPad. These aren't crucial, but I am wondering if there is a firewall issue going on? I have a net analyzer program on my iPad that seems to say there are lots of blocked ports. I have very little firewall experience. I can ping this PC from other computers on my network, I just cannot connect to shared files from the iPad or the shared printer. I can connect from this PC to another PC on the network and copy file to this one, so it seems to affect only incoming attempts. Thanks for your help. I will be out of town most of Monday. Regards, Dave mbst-grab-results.zip Fixlog.txt SecurityCheck.txt

I will have to take a few days off the testing plans. We have a houseguest using that room, so I expect to be offline for the time. I will get back to you in a few days. Thanks again. Dave

I will be doing the steps above today. Thought you might be interested in the article link I am attaching. My wife knows the woman described in the article. https://www.washingtonpost.com/dc-md-va/2023/12/14/cyber-crime-scams-irs-taxes/ Dave

I did complete running that .CAB file install without any issues. Have not yet removed the tamper protection on the Malwarebytes, but will try that tomorrow. Otherwise, the system seems to be running well. No new unauthorized purchases. Should I run full scans more often for a few days rather than once-a-week scans? Any other advice? Regards, Dave K

I will give things a day or so to settle down. On my end I have been dealing with several medical issues and fixing the financial problems caused by my original, badly chosen, response to the phishing letter. I am learning that several top scientists my wife worked with have also been badly bitten by the same scam. I am very appreciative of your assistance. Have a good day. Dave

Defender completed a scan of all the drives and, other than the ones it showed already. Nothing was found. I had it remove the items it found. To change any of the Malwarebytes settings, Tamper Protection seems to be set to ON and it does not want to all me to change anything.. Should I remove that? I think that will require a re-install of the program. Dave K

Just for the heck of it, last night, after the Kaspersky scan was completed and it said all was OK, I ran MS Windows Defender. It did find some things. See the attached screen print. I need to go out of town soon and hope to be back by 6 pm. Let me know what other steps I should take. Thank you, Dave K

Here are the two report files. I just added a .txt suffix to the end of the original file names. report_2023.12.11_11.52.54.klr.txt report_2023.12.11_17.41.43.klr.txt

I followed the directions, added the command line parameter and changed the parameters, then told it to scan. It is showing progress activities. Will let you know how it goes.

I let it run overnight no threats detected. Does this program do something other than what Malwarebytes or Windows Defender does?

Sorry, I guess I skipped this step. Regards, Dave system-log.txt mbar-log-2023-12-09 (14-12-33).txt

I did send you the Fixlog. Txt file yesterday. Did you not get it? Dave

Here is the FIXLOG.TXT file. BTW, thank you for the assistance. Dave K Fixlog.txt

I checked the third PC. It has Malwarebytes on it now.

I am running the anti-rootkit program. Prior to that, I did discover keyboard logger extensions on Chrome and Edge. I removed these. This is a home PC. I do have two other PCs on my home network, but these don't seem to be infected. The second one is Win 11. The other is Win 10 Pro. The Win 11 does have Malwarebytes installed. Not sure about the other. The infection was caused by me stupidly clicking on a scam email about Norton Lifelock refund. I will send more info after the root scanner finishes.