jondilly1974

The only signs I used to have was the MBAM blocking website popups and those are gone since the repairs were made.

All steps above have been completed. Most of the above was simply uninstalled as most weren't needed often. The webplugin.exe is a IP camera codec plugin to allow browser based support. It was removed as asked. These plug-ins have never tripped a malware detection in the past. If they are malware, would you expect detection? In addition to the above, there were quite a few Adobe CC updates as well that were applied. Also there was an Intel NIC update that was applied as well.

Attached FRST.txt Addition.txt

Attached FSS.txt

Attached SecurityCheck.txt

No new detections since the repair. I think this one is good to go. Thank you for your help!

None so far, but I will continue to review and report back. Can you leave this open for a few days?

cureit.log

Fixlog.txt

I happen to be the end user, owner, and IT Dept. This is my "work" PC at my home owned business.

Where is the attachment?

Here is the answer about the blocked website. The recent blockages do not have a domain or IP address, but ones from a few days ago do have them. Here is an example that did have the info: Malwarebytes www.malwarebytes.com -Log Details- Protection Event Date: 7/14/2024 Protection Event Time: 1:57 PM Log File: 983b2376-420a-11ef-9a5d-00090ffe0001.json -Software Information- Version: 5.1.6.117 Components Version: 1.0.1270 Update Package Version: 1.0.86832 License: Premium -System Information- OS: Windows 11 (Build 22631.3880) CPU: x64 File System: NTFS User: System -Blocked Website Details- Malicious Website: 1 , C:\Windows\System32\svchost.exe, Blocked, -1, -1, 0.0.0, , -Website Data- Category: RemotePortScan Domain: IP Address: 47.185.19.88 Port: 64394 Type: Outbound File: C:\Windows\System32\svchost.exe (end)

Here are results from steps 1 & 2 AdwCleaner[C00].txt AdwCleaner[S00].txt Malwarebytes Scan Report 2024-07-22 151933.txt

Here is one example: Malwarebytes www.malwarebytes.com -Log Details- Protection Event Date: 7/21/2024 Protection Event Time: 2:22 PM Log File: 259677ba-478e-11ef-af2e-00090ffe0001.json -Software Information- Version: 5.1.6.117 Components Version: 1.0.1270 Update Package Version: 1.0.87042 License: Premium -System Information- OS: Windows 11 (Build 22631.3880) CPU: x64 File System: NTFS User: System -Blocked Website Details- Malicious Website: 1 , C:\Windows\System32\svchost.exe, Blocked, -1, -1, 0.0.0, , -Website Data- Category: Malware Domain: IP Address: Port: 7680 Type: Outbound File: C:\Windows\System32\svchost.exe (end) Addition.txt FRST.txt