[Website detection needs review (www.dbpoweramp.com/foobar2000)]

Malwarebytes
www.malwarebytes.com

-Log Details-
Protection Event Date: 9/5/19
Protection Event Time: 3:07 PM
Log File: c6d7cb18-d003-11e9-ad56-9c5c8e3e5192.json

-Software Information-
Version: 3.8.3.2965
Components Version: 1.0.613
Update Package Version: 1.0.12339
License: Premium

-System Information-
OS: Windows 10 (Build 17134.950)
CPU: x64
File System: NTFS
User: System

-Blocked Website Details-
Malicious Website: 1
, , Blocked, [-1], [-1],0.0.0

-Website Data-
Category: Trojan
Domain: www.dbpoweramp.com
IP Address: 89.238.182.185
Port: [50714]
Type: Outbound
File: C:\Program Files\Vivaldi\Application\vivaldi.exe

(end)

the page was foobar2000.org home and download sections ? 

 

[Software Suggestions for blog post?]

Ill test and consider any thoughts on the others i have listed or maybe something I am missing ?

[Software Suggestions for blog post?]

thats a interesting one  I have always used true image any reason you perfer Macrium ?

[Software Suggestions for blog post?]

The reason why is actually because I wanted to updte my recommended software blog post here

  https://itstotallylife.com/totally-life-recommended-computer-software-setup/

[Software Suggestions for blog post?]

Well to be fair ninite is great but only downloads from official sources which is great unless you dont trust the official source ?    

@Porthos can you verify your copies for me also which one do you prefer 

[Software Suggestions for blog post?]

Well in the past ive used imagburn and cdburnerxp but those have all been infected in the mist recent years so dont trust using them now 

[Software Suggestions for blog post?]

Which cd authoring  program does the MBAM community use thats free I ask here because I do not trust the current internet landscape 

 

[Riskware process explore]

I know I can ignore it however  it should  not be detected at all as has not been  until today and my version is much older them the other users so  there has be  a change  in the last 34 hrs to malwarebytes to cause this 

[Riskware process explore]

Malwarebytes
www.malwarebytes.com

-Log Details-
Scan Date: 7/23/19
Scan Time: 2:03 PM
Log File: f63fb876-ad84-11e9-947b-10bf487f7f03.json

-Software Information-
Version: 3.8.3.2965
Components Version: 1.0.613
Update Package Version: 1.0.11688
License: Premium

-System Information-
OS: Windows 7 Service Pack 1
CPU: x64
File System: NTFS
User: System

-Scan Summary-
Scan Type: Threat Scan
Scan Initiated By: Scheduler
Result: Completed
Objects Scanned: 306145
Threats Detected: 4
Threats Quarantined: 0
Time Elapsed: 3 min, 59 sec

-Scan Options-
Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Detect
PUM: Detect

-Scan Details-
Process: 0
(No malicious items detected)

Module: 0
(No malicious items detected)

Registry Key: 2
RiskWare.IFEOHijack, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\TASKMGR.EXE, No Action By User, [6345], [711127],1.0.11688
RiskWare.IFEOHijack, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\TASKMGR.EXE, No Action By User, [6345], [711127],1.0.11688

Registry Value: 2
RiskWare.IFEOHijack, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\TASKMGR.EXE|DEBUGGER, No Action By User, [6345], [711127],1.0.11688
RiskWare.IFEOHijack, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\TASKMGR.EXE|DEBUGGER, No Action By User, [6345], [711127],1.0.11688

Registry Data: 0
(No malicious items detected)

Data Stream: 0
(No malicious items detected)

Folder: 0
(No malicious items detected)

File: 0
(No malicious items detected)

Physical Sector: 0
(No malicious items detected)

WMI: 0
(No malicious items detected)

(end)

my report matchs the following 

 

and thats only today what is going on guys

I

[Media Player Classic will not lanch]

Tried unistalling and reinstalling and its wierd becausw its been my defult for years and all other media players seem to work just fine

 

[Blacked outbound IP from webbrowser]

Malwarebytes
www.malwarebytes.com

-Log Details-
Protection Event Date: 11/15/17
Protection Event Time: 7:36 PM
Log File: a33e1f42-ca59-11e7-b9a7-9c5c8e3e5192.json
Administrator: Yes

-Software Information-
Version: 3.3.1.2183
Components Version: 1.0.236
Update Package Version: 1.0.3266
License: Premium

-System Information-
OS: Windows 10 (Build 14393.1884)
CPU: x64
File System: NTFS
User: System

-Blocked Website Details-
Malicious Website: 1
, , Blocked, [-1], [-1],0.0.0

-Website Data-
Domain: 
IP Address: 185.14.28.10
Port: [51462]
Type: Outbound
File: C:\Program Files\Vivaldi\Application\vivaldi.exe

was going through my logs and say this entry twice 

thought i would ask in here to be safe 

i have not seen it since  could be my browser and malwarebytes recently started blocking somthing but im not sure  it seems to lead to norway ip 

[sendinfo.exe]

my firewall has this log entry C:\Users\myname\AppData\Local\Temp\nsr2388.tmp\sendinfo.exe    IN/OUT - All allowed

any idea what \sendinfo.exe may be

[Driver Less then not equal to on start up]

I did find 1 Wireless update for Asus that i installed today as instructed  This all started with a new wireless router provided by my ISP to compensate i have turned the wifi adapterr off and weird myself in  its a new gateway and modem tandem set up i believe was initially poorly configured      even with the configuration resolved and the update today im still concerned about turning wifi back on    thoughts? also id hate to unstall malwarebytes

[Protection Layer: Application Behavior Protection bug]

I think i have found a bug

if i turn off my browsers application protection off and  then immediately back on the system locks my browser crashes and generates the following log

Malwarebytes
www.malwarebytes.com

-Log Details-
Protection Event Date: 8/10/17
Protection Event Time: 12:14 PM
Log File: block text.txt
Administrator: Yes

-Software Information-
Version: 3.1.2.1733
Components Version: 1.0.160
Update Package Version: 1.0.2552
License: Premium

-System Information-
OS: Windows 10 (Build 14393.1593)
CPU: x64
File System: NTFS
User: System

-Exploit Details-
File: 0
(No malicious items detected)

Exploit: 1
Malware.Exploit.Agent.Generic, , Blocked, [0], [392684],0.0.0

-Exploit Data-
Affected Application: Vivaldi Browser
Protection Layer: Application Behavior Protection
Protection Technique: Unauthorized attempt to unload protection detected
File Name: 
URL: 

(end)

browser used is https://vivaldi.com/download/

 

  Vivaldi 1.11 64bit

[Driver Less then not equal to on start up]

bump 

[Driver Less then not equal to on start up]

Bump so it doesn't get lost in recent posts 

[Driver Less then not equal to on start up]

html checkup file added

report.zip

[Driver Less then not equal to on start up]

not sure whats causing the issue however its made the laptop nearly unusable and i have to hurry before it happens agian

SysnativeFileCollectionApp.zip

[Crashs with speaker buzzing]

SysnativeFileCollectionApp.zipSysnativeFileCollectionApp.zipis this better then what you saw before

I tried my best to update what items  i could 

 mainly bios

 

SysnativeFileCollectionApp.zip

report.zip

[Crashs with speaker buzzing]

 thanks updates are set to automatic so id assume proper windows updates were being installed? as for glary drivers i have updated those i hve never belive it or not flashed a bios before

nothing really bad stands out though?

[Crashs with speaker buzzing]

So this happened  twice now always starts with a frozen youtube video  then a ear shattering speaker buzz and then a BSOD which leads me to think the graphics driver is crashing however the computer is a year old and its a travel laptop so i only use it every 8 months 

its a Asus X555LAB

intel 15

SysnativeFileCollectionApp.zip

 

 

 

 

 

 

 

 

 

report.zip

[Can zemana and malwarebytes play nice?]

When both have retime protection on?

[Check for updates before scan removed?]

ill keep a eye it

 

[Check for updates before scan removed?]

Odd seems to have "fixed" itself would you still like the check

 

 

[Check for updates before scan removed?]

It's a manual threat scan