Malicious Website Protection reset by website

[baroque_quest]

I have multiple PCs running W-7 with F-Secure, Malwarebytes Pro and Malwarebytes Anti-Exploit free.

 

I was looking for statistical information and looked at one website.  At the bottom was a link which read "stats.bls.gov" which appeared to be safe.  I could have sworn I cut-and-pasted it rather than clicking on it, but maybe my OpSec was lax.  The webpage which popped up was "stats.bls.gov.com" which immediately alerted me that I had been hijacked.  I killed the browser (IE11) and started MBAM.  The color of the GUI was not green, telling me that something was wrong.  I looked through the settings and noticed that Malicious Website Protection was OFF.  I turned MWP back on.

 

F-Secure gave no visual warnings.  I ran a full system scan with it.  It said nothing was found but it only ran for about 10 seconds.

 

Then I started a full custom scan with MBAM including rootkits.  It ran for 22 seconds(this is an SSD) and then stopped with the Nothing Found message.  I rebooted and tried to scan again.  Same result.

 

I rebooted into Safe Mode and ran a full custom MBAM scan.  It ran for 15 minutes which is as expected.  Nothing was found.  I rebooted in normal mode and ran another full custom scan: 22 seconds.  Then I ran a threat scan which took two and a half minutes.

 

Questions:

 1) The website was able to change my MBAM settings.  How is that possible?  I had Self-Protection Mode set to OFF, so I will keep it set to ON from now on.

 2) It appears that the malware has caused both MBAM and F-Secure to short-circuit.  I can reinstall Windows in my sleep, so I know what to do, but I would like to know what is going on here.  Is MBAM's custom scan broken or do I have malware?

 

[Firefox]

Hard to say what has happened without looking at some logs...

Let's get some logs first....

Please read the following and post back the 3 requested logs - Diagnostic LogsThank You,

Firefox

[baroque_quest]

Sure, except that Windows warned me that FRST could harm my computer.  Perhaps that file has been replaced by malware.  No thanks.

[Firefox]

FRST tool gets used hundreds of thousands a time a day and its just a diagnostic tool, it is safe to use.