poles00 Posted May 11, 2016 ID:1039264 Share Posted May 11, 2016 so my malwarebytes is blocking ips from Svchost . not sure whats going on as i scanned with Malwarebytes and avast no malware or viruses . is this a false positive ?. its annoying as its happening every few seconds . how do confirm if its a false positive or not ? sorry if my english isnt so good Link to post Share on other sites More sharing options...
kevinf80 Posted May 11, 2016 ID:1039325 Share Posted May 11, 2016 Hello poles00 and welcome to Malwarebytes, My screen name is kevinf80, i`m here to help clean up your system, continue as follows please: Download RKill from here: http://www.bleepingcomputer.com/download/rkill/ There are three buttons to choose from with different names on, select the first one and save it to your desktop. Double-click on the Rkill desktop icon to run the tool. If using Vista or Windows 7/8/10, right-click on it and Run As Administrator. A black DOS box will briefly flash and then disappear. This is normal and indicates the tool ran successfully. A log pops up at the end of the run. This log file is located at C:\rkill.log. Please post this in your next reply. If you do not see the black box flash on the screen delete the icon from the desktop and go back to the link for the download, select the next button and try to run the tool again, continue to repeat this process using the remaining buttons until the tool runs. You will find further links if you scroll down the page with other names, try them one at a time. If the tool does not run from any of the links provided, please let me know. Next, Please open Malwarebytes Anti-Malware. On the Settings tab > Detection and Protection sub tab, Detection Options, tick the box "Scan for rootkits". Under Non-Malware Protection sub tab Change PUP and PUM entries to Treat detections as Malware Click on the Scan tab, then click on Scan Now >> . If an update is available, click the Update Now button. A Threat Scan will begin. When the scan is complete Apply Actions to any found entries. Wait for the prompt to restart the computer to appear (if applicable), then click on Yes. After the restart once you are back at your desktop, open MBAM once more. To get the log from Malwarebytes do the following: Click on the History tab > Application Logs. Double click on the scan log which shows the Date and time of the scan just performed. Click Export > From export you have three options:Copy to Clipboard - if seleted right click to your reply and select "Paste" log will be pasted to your replyText file (*.txt) - if selected you will have to name the file and save to a place of choice, recommend "Desktop" then attach to replyXML file (*.xml) - if selected you will have to name the file and save to a place of choice, recommend "Desktop" then attach to reply Please use "Copy to Clipboard, then Right click to your reply > select "Paste" that will copy the log to your reply… Next, Download Farbar Recovery Scan Tool and save it to your desktop.Note: You need to run the version compatible with your system (32 bit or 64 bit). If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version. If your security alerts to FRST either, accept the alert or turn your security off to allow FRST to run. It is not malicious or infected in any way... Double-click to run it. When the tool opens click Yes to disclaimer.(Windows 8/10 users will be prompted about Windows SmartScreen protection - click More information and Run.) Make sure Addition.txt is checkmarked under "Optional scans" Press Scan button to run the tool.... It will make a log (FRST.txt) in the same directory the tool is run. Please copy and paste it to your reply. The tool will also make a log named (Addition.txt) Please attach those logs to your reply. Next, I also want to see the most recent Protection Log from Malwarebytes, Open Malwarebytes.. Click on the History tab > Application Logs. Double click on the Protection Log which shows the most recent Date and time.. Click Export > From export you have three options:Copy to Clipboard - if seleted right click to your reply and select "Paste" log will be pasted to your replyText file (*.txt) - if selected you will have to name the file and save to a place of choice, recommend "Desktop" then attach to replyXML file (*.xml) - if selected you will have to name the file and save to a place of choice, recommend "Desktop" then attach to reply Please use "Copy to Clipboard, then Right click to your reply > select "Paste" that will copy the log to your reply… Let me see those logs in your reply... Thank you, Kevin... Link to post Share on other sites More sharing options...
poles00 Posted May 12, 2016 Author ID:1039515 Share Posted May 12, 2016 thank you kevin . i will try to resolve this on my own as i cant comply with the forum rules. as i do have downloaded content on my pc. you can lock this topic . thank you aether way ! Link to post Share on other sites More sharing options...
kevinf80 Posted May 12, 2016 ID:1039535 Share Posted May 12, 2016 Thanks for the update, if you do not wish to continue i`ll ask for your topic to be closed out... Kevin.... Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted May 13, 2016 Root Admin ID:1039605 Share Posted May 13, 2016 Since this issue is resolved I will close the thread to prevent others from posting here. If you need assistance please start your own topic and someone will be happy to assist you. Link to post Share on other sites More sharing options...
Recommended Posts