Jump to content

InternetUser

Members
  • Posts

    3
  • Joined

  • Last visited

Everything posted by InternetUser

  1. Tried this; seems like clearing the storage helped, the warnings don't appear anymore. Thank you.
  2. Every time Tumblr is opened (and only Tumblr), the Malwarebytes extension shows this: It started happening today; first, this morning, it blocked the entire Tumblr website because of "reputation"; that was solved with a database update, seemed like a few people had the same issue. However, now, it's blocking just this every time I open the website. I looked it up and it was described as a google advertising service, but on other places as a virus. Can't figure out if it's a false positive, precaution ("potentially" malicious activity), some kind of actual malvertising being blocked? Did scans and my system seems fine, but this is alarming. I checked the logs (tried to); seems that what's actually being blocked is " https://securepubads.g.doubleclick.net/tag/js/gpt.js" - a script?
  3. Today I was checking my flash drives for malware out of anxiety. I plugged one of them in and ran a custom scan with Microsoft Windows Defender. It showed this I immediately chose the option to remove the file, waited until the removal was finished, and took the flash drive out. I ran a scan with Malwarebytes, it showed that all is clear, tried to run another scan with Microsoft Defender Offline but couldn't exactly figure out how so not sure if it worked, then ran a full scan with Microsoft Defender, it showed that all is clear, then ran another scan with ESET online scanner, it did not find anything related to the issue (only an unrelated PUA - i remember installing it, so it wasn't brought here by the virus or anything. deleted it.). Right before posting this, ran FRST as well. Files attached, attached the ESET log too. All seems to be clear, but I've heard that this Trojan can hide quite well. I have also been told that autorun scripts like this are not a threat anymore. I hope that is true; but it is worth noting that when I was looking through settings later, the Autoplay feature was turned on, and the default action for external drives was set to "open folder to view files". I turned it off; not sure if it could've let the trojan through though. So, my main question is, is there anything I should do? Also, this is not the first time malware has been detected on this particular USB, just about a month ago I found the movemenoreg.vbs, helper.vbs and installer.vbs scripts in the WindowsServices folder on the E:\ drive - they did not do anything, and were also deleted by Windows Defender, so the computer wasn't infected, but, thing is, I am absolutely sure I have not plugged the flash drive into anything else after that problem, and this detection (phonzy) is completely new. I am confused by that. Maybe the flash drive is just broken and these are all false detections? eset scan log.txt Addition.txt FRST.txt
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.