Longshot583

Hey AdvancedSetup and JSntgRvr, I just performed a fresh install of Windows 11 and everything appears fine. The first thing I downloaded was MB, and I am happy to report that I am no longer receiving warnings like the ones I've posted about. I'm going to chalk this up to the dubious installation of Win11 that came with my Japanese PC. This new install appears genuine and I have had no problems so far. Just to be safe, I'm going to wait until tomorrow to declare my problem solved, but for now I want to extend my sincere thanks to both of the experts that helped me get to where I am now. Godbless.

Thanks AdvancedSetup. I'll reinstall Win11 and report back on what happens.

Thank you AdvancedSetup for your reply, but before I perform your recommended steps I think I should clarify that I bought this computer from Yahoo Auctions Japan, from a listing that said that Windows 11 was installed "using the workaround method". When I bought the computer I assumed that "workaround method" meant the seller had upgraded it from Windows 10 while bypassing Win11's restrictions on older CPUs which lack a certain security chip, something which I had heard of previously. However, I am now wondering if the installation of windows is not genuine, and that's what is causing KMS connection broker to attempt so many outgoing connections. Any thoughts on this? If my installation is not genuine, how might I check for that? I greatly appreciate your help.

Heres the Search.txt Search.txt

Here is what the notification looks like. I restarted my computer after finishing the FRST fix, and got one upon startup:

Yes, those are incoming notifications that appear in the bottom right corner of my screen. Here is the FRST log: Fixlog.txt

Alright, will do. As of right now, my computer is running fine and as expected, but I am still receiving frequent pop-ups from Malwarebytes about this blocked "trojan" website. Before I noticed the problem, I upgraded the HDD on this computer to an SSD using Macrium. I still have the old HDD, and am wondering if it might be best to re-install it to see if MB still reports the website block. I don't remember having downloaded very much with the computer before upgrading the drive, so I don't think it was infected. However, I hesitate to do that as I wouldn't want to let malware copy itself to the old drive via the RAM or something if it wasn't present on the drive before the upgrade. Do you have any thoughts on this? Thank you so much for your replies thus far.

Hey JSntgRvr, so several hours later I came back to my computer and it is still at 62.3% of the way through executing that command.

It's been stuck on 62.3 for about an hour now.

I've run four of the five commands, and CMD is currently stuck on the 4th. Here's what I've gotten so far.

Fixlog.txt

Thanks JSntgRvr. Here are the logs. Fixlog.txt cureit.log

Thank you for your reply. Here are all of the relevant log files. Addition.txt AdwCleaner[C00].txt AdwCleaner[S00].txt FRST.txt Malwarebytes Scan Report 2024-08-09 180633.txt

Also, should note that I have gone through multiple scans with MB including a >1hr long rootkit scan and a scan with MB AdwCleaner, and both are coming up with no detections.

Hello, for the past two days since I installed Malwarebytes on a new computer, I have been receiving a popup notice about a blocked trojan website every time I log into Windows 11. In the attached photos you can see the IP address and file location that the notice is coming from. If needed I can provide log files. I'm a little confused as to how an IP address that looks very spoofed (12.34.56.78) is connecting to my computer and accessing System32??? Thank you so much in advance to anyone who can help me with this.