jnhyep57

Hello Kevin! Added the exclusions to Norton to exclude conflict. System seems to be working okay now, t hanks to your awesome help! Many many thanks & much appreciated! jnhyep57

Hi Kevin, I used the Norton removal tool to remove & reinstall Norton. While it was installing got a "Application Compatibility Check" message stating there is conflict with Malwarebytes and I should uninstall it. I didn't get that message before when I first installed Norton.

Since I uninstalled FRST would it be okay to leave the disabled version of Norton? If it won't cause any issues, would it be okay to leave it?

Hello Kevin! FRST64 unstalled. Removed all System Restore Points, created a fresh Restore Point and ran Windows Disk Clean Up Utility. One last question it's about my two versions of Norton. Was the disabled version deleted?

Computer seems to be working fine now. 😀

Sorry, see attached. Fixlog.txt

Attached FRST fix log FRST.txt

MRST log attached. Also, I didn't know I had two versions of Norton installed. Is it possible to uninstall the disabled version? mrt.log

Yes, here's the 2 requested logs. FRST.txt Addition.txt

Yes. Hope I exported the log correctly. Mbam.txt

I ran Malwarebytes again and this time it didn't get stuck!!

Sorry Windows 10 home version.

Hello Kevin, I tried running it in Safe Mode with Networking but it wouldn't update. My internet was disconnected and audio wasn't working as well.

Hello, Today Malwarebytes got stuck on one file while scanning. Initially opened a topic to in Windows Support Forum and was told to open a topic here in case my system is infected. https://forums.malwarebytes.com/topic/258713-malwarebytes-stuck-scanning-on-one-file/ I downloaded the Farber Recovery Scan tool but got that spinning circle again. After waiting awhile, got this message: SmartScreen can't be reached right now. Check internet connection. Windows Defender SmartScreen is unreachable and can't help you decide if this app is ok to run. Also, I can't open any websites on Chrome & Firefox but Opera is working fine. Thanks for your assistance!

I'll open a topic in malware removal. Thanks!

Downloaded Procmon.exe but got that spinning circle when I double-clicked it to run.

Today, malwarebytes scan was stuck on one file. Downloaded Malwarebytes Repair tool but when I tried to open mb-support-1.6.0.774.exe, I got that spinning circle. Also, I'm not able to open any website on Firefox & Chrome. However, Opera seems to be working fine. Thanks, jnhyep57

Hello again, After uninstalling and reinstalling MBAM Pro, everything is working fine. However, I found two commands for MBAM in my WinPatrol Plus startup programs: mbamgui.exe/..., type HKLM_RUN and mbamgui, type HKCU_RUN. Is this correct? Thank you for your help!

Thank you Firefox!!! My problem has been resolved by following your instructions. Thanks again, -jnhyep57

Hello, I have the following: Windows XP Home Edition, SP3 McAfee VirusScan 8.7 av MBAM Pro SAS WinPatrol Plus Windows Firewall Web browser: Mozilla Firefox I don't think my computer is reinfected. However, after doing some cleanup removing unused programs, updating drivers and upgrading from Office 2003 to 2007, MBAM Pro and WinPatrol Plus were no longer in my start up list and system tray. I added WinPatrol.exe to my start up list in WinPatrol and this resolved that problem. When I added mbam.exe to to my start up list in WinPatrol, "M" icon appeared in the system tray but I had to enable the protection module. Whenever I reboot, MBAM program will open and I have to enable the protection module. How can I resolve this issue with MBAM? Thank you for your help!

Hi Shy, Thank you so much for your advice. I'm definitely leaning towards installing Online Armor. If you don't mind, can you please explain to me how I can modify my HOSTS file to direct any IP address to 127.0.0.1? Thanks again!

Combofix uninstalled. I have no other issues to resolve. Thanks again for all your expertise, help and for being so patient with me!!

Hello, I am starting this topic again since my computer appears to be clean (thanks to Ron/AdvancedSetup & Chris/screen 317). However, I am still getting an onslaught of IP blocks. Ron said the following: So I'm back here to get help with firewall recommendations and advice. How do you setup a firewall to block specific IP addresses? Also, I'd like to install MVPS Hosts but I need help with this. Thank you!

Hi Ron, I couldn't uninstall Combofix. I clicked START - RUN and typed in combofix /uninstall. Instead of uninstalling combofix, I got this message - Windows cannot find 'combofix'. I did a search and was able to delete all the folders pertaining to combofix. However, I don't know if it's completely uninstalled. This is the last pending issue I have. Before you close this topic, I want to thank you for your gracious help, expertise and for being so patient with me. Thanks you so much!!

I am still getting IP blocks when I'm not web browsing and my email is not launched. Is this okay? I wasn't able to uninstall Combofix this time through the above. Message- Windows cannot find 'combofix'. I did a search and deleted all files. Is this okay? Done The only other pending issue is with My Way Search Assistant. I can't remove My Way Search Assistant with the ADD/REMOVE. This is the error message received when trying to remove it: RUNDLL Error loading C:\PROGRA~1\MyWaySA\SrchAsDe\1.bin\desrcas.dll The specified module could not be found. My Search Assistant Key Name: HKEY_LOCAL_MACHINE\SOFTWARE\MyWaySA Class Name: <NO CLASS> Last Write Time: 6/2/2010 - 8:37 PM Key Name: HKEY_LOCAL_MACHINE\SOFTWARE\MyWaySA\SearchAssistantDE Class Name: <NO CLASS> Last Write Time: 6/2/2010 - 8:37 PM Value 0 Name: CurInstall Type: REG_SZ Data: 1 Value 1 Name: sr Type: REG_SZ Data: 0 Value 2 Name: pl Type: REG_SZ Data: 9 Key Name: HKEY_LOCAL_MACHINE\SOFTWARE\MyWaySA Class Name: <NO CLASS> Last Write Time: 6/2/2010 - 8:37 PM Key Name: HKEY_LOCAL_MACHINE\SOFTWARE\MyWaySA\SearchAssistantDE Class Name: <NO CLASS> Last Write Time: 6/2/2010 - 8:37 PM Value 0 Name: CurInstall Type: REG_SZ Data: 1 Value 1 Name: sr Type: REG_SZ Data: 0 Value 2 Name: pl Type: REG_SZ Data: 9 Thanks again for all your time and help!