Jump to content

TweakBits?


Recommended Posts

Greetings from the Great Country of TEXAS,

Found this within "SCANNING HISTORY LOG" and never received any notice that it was found.  Other logs have not shown any thing listed.  Do I just go into that folder and delete that record?

"PUP.Optional.TweakBit, C:\ProgramData\BSD\DriverHive, No Action By User, [e9ebb9db5b3fa591049ce71b0005b050]"

The red part of that report tells me there was a notification, WRONG!  Never happened and has occurred before several times.

TIA, CU "L8R,

NTxLS

"LoneWanderer"

Link to post
Share on other sites

Excuse me, please?  MBAM (Premium) v2.2.1.1043 (Pd version) keeps finding this "Non-Malware Detected" with a 'Always on TOP' box telling of the "Scan Complete" with "Click here to view details."  Yet NOTHING is found when going to the location shown in the log file.  My first post shows what is within the log file.  How am I to STOP this from occurring any more?

Link to post
Share on other sites

1PW.

This has been so strange, nothing found in the folder listed.  Now there are more things being placed on my system.  Do not know where they are coming from, maybe Microsoft because I have not upgraded to WX and have their TELEMETRY BLOCKED.  They are not telling the truth about 'CompatTellRunner.exe' nor the DIAG files for that same program.

The Log/file titled "PUP_OPTIONAL_TWEAKBIT'

PUP_OPTIONAL_TWEAKBIT.txt

Link to post
Share on other sites

Hi NTxLS :)

Open Malwarebytes, go in the Settings panel, followed by Detection and Protection. Under PUP (Potentially Unwanted Program) detections and PUM (Potentially Unwanted Modification) detections, what is the action taken? 

428493

Edited by Aura
Link to post
Share on other sites

 Aura,

Mine is as you have shown except for "Scan for Rootkits" is also selected.  Should I set the "PUP + PUM" to 'Warn User' or leave as you have shown?

Also just started another scan and it has shown the box with the same data as first reported.

Your system will not allow me to edit that post so repeating with my last line included.

Link to post
Share on other sites

Aura,

Just ran a fresh scan and the attached is my screen shot of what was found and this time allowed me to  quarantine what was found.Those dated today, 10/07/2016, were found today the others are from a couple of days ago.  Those of 10/05/2016 have not been displayed like this so were never quarantined, until now.  There has not been more than just one shown until today, just now, there are four (4).  Do not understand why this is behaving this way.  Also just after that scan my system did a REBOOT without any warning, presume that was done by MBAM thought the need of a reboot would give me a box to agree now or delay.  NEVER did this last.

Link to post
Share on other sites

Aura,

Just ran a fresh scan and the attached is my screen shot of what was found and this time allowed me to  quarantine what was found.Those dated today, 10/07/2016, were found today the others are from a couple of days ago.  Those of 10/05/2016 have not been displayed like this so were never quarantined, until now.  There has not been more than just one shown until today, just now, there are four (4).  Do not understand why this is behaving this way.  Also just after that scan my system did a REBOOT without any warning, presume that was done by MBAM thought the need of a reboot would give me a box to agree now or delay.  NEVER did this last. 

Cannot get my attachment to work, keep getting a "-200" presuming that is an error, will work on getting it through some how.

Latest NOTE: that "Scan Complete - Non-Malware Detected" again as originally posted.

Link to post
Share on other sites

Aura,

Your system keeps telling me I cannot edit a post that was just made, so I copied and made my edit and re-posted twice (2) plus would not allow me to include my screen shot.  Will work on getting that done so it may be shown.

Thank you for your patients

Link to post
Share on other sites

Aura,

The time for doing the edit could not have been more than two (2) minutes.  I just will not post until I feel like it, which means my reply will be delayed until I have a chance to think over what needs to be said.

I quarantined them to show you what was found and was able to post the attach, that is included with this message, and just before starting this message DELETED all that are shown in my attached file.

LatestMBAM_Quarantine.jpg

Link to post
Share on other sites

Aura,

One question if I may?  Why is the "Malicious Website Protection" being "STOPPED"?  I did not request that action nor did I uncheck that feature.  Under "Advanced Option" all are checked except for 'Delay Protection at startup for 15 seconds' want it fully operational ASAP!

Link to post
Share on other sites

9 minutes ago, Aura said:

So these threats have indeed be quarantined. Now, if you run a new Threat Scan, are they detected again?

Aura,

Just ran a scan and removed that PEST non-malware again, also had not set a password because I am the only user of this system, running as Limited USER, so that was added to MBAM.  Yes, that PEST was discovered again, after setting the password am running another scan at this time.  Plus need to do a reboot after this is finished scanning this time around.  Will report results later

Link to post
Share on other sites

4 hours ago, Aura said:

Let us know how it goes. If Malwarebytes keeps on detecting these items, it means that the PUPs responsible for these are probably still active on your system, and you'll need to head to the Malware Removal for Windows section to get them removed.

Aura,

I THANK YOU very muchly for this assistance.  This has been bothering me for some time and just could not figure out what the issue is or remove anything because the folder listed is EMPTY.  Plus MBAM is supposed to treat that as malware and remove same, it will not only says it is warning yet that is not happening either.

Will check into the "Malware Removal for Windows" next step.

Have a good week-end

Link to post
Share on other sites

22 hours ago, Aura said:

No problem NTxLS, you're welcome :)

Once you post your thread over there, feel free to post the URL for it here. If it hasn't been taken already, I'll take it and assist you.

Aura,

Thank you for that offer, but; so far I managed to eliminate that troublesome pest.  A bit of a resourceful problem solver, self taught, just need some time and set my mind to doing what is required to get the job done.  Not attempting to brag just telling the truth.  Just one point that is NOT understood about MBAM, why did it STOP the only feature that was to monitor this type of activity?  Then NEVER give a warning that this was found AND NOT deal with it as is selected to as if it were "Malware" DELETE from my system?  Just do not comprehend this PEST was ble to circumvent what was supposed to be done and do IT's own thingy.

NOT really an issue with me as it is solved and gone for now.

OH!  One last point if I may?  All of your posts to this thread have been very helpful, but; there NEVER was a message sent to my mailbox about your posts, just came in here and found them.  Do they NOT send email about replies to poster's messages?

Link to post
Share on other sites

Malwarebytes' settings doesn't change automatically, you need to change them manually. So far, we haven't seen any malware tempering with Malwarebytes' settings as well. Perhaps a misclick or manipulation occured at one point when you were going through the settings?

And yes, if you follow a thread on Malwarebytes' Forums, an email will be sent to your address everytime someone's post in it. However, you need to follow that thread. By default, you follow every thread you post in. Take a look in the top right-corner, I guess it says "Follow" for you, since I seem to be the only one following this thread.

O5ikyPZ.png

If you had been following this thread, you would have gotten an email everytime someone had replied in it.

Link to post
Share on other sites

Greetings from the Great Country of TEXAS,

MBAM "Settings/Detection and Protection/PUP protection / PUM protection set to "Treat detections as malware" are NOT being handled as per my selection.  Below is what is recorded in logs:

"Folders: 1
PUP.Optional.TweakBit, C:\ProgramData\BSD\DriverHive, No Action By User, [36fea6ef67331125d7c7f50d41c45ca4],"

"Files: 1
PUP.Optional.DriverSupport, C:\Windows\System32\Tasks\Driver Support, No Action By User, [a64816811a8095a1114235d637ce26da], "

With-out even the identified as "No Action by User" which is not true, there was not any selectable options on said warning nor my selection for handling the detection as shown above.  I believe these are being installed by Microsoft's Community Forums.  I have removed them myself, no thanks to MBAM Premium (Pd) version 2.2.1.1043.

Link to post
Share on other sites

  • Staff

Hello NTxLS,

I'd like to begin by getting a look at the Malwarebytes Anti-Malware internal installation and settings details. Please download our diagnostic tool, mbam-check.exe to your desktop from this link.

https://downloads.malwarebytes.org/file/mbam_check

Double-click it to run it. The log which opens will be saved to your desktop as CheckResults.txt.

Please attach this log to your next reply.

Link to post
Share on other sites

Ried STAFF,

Most all forums I hold membership, approximately 60, the "Follow" the thread where I post is automatically set, did not know nor realize your's is different.  Have followed AURA's instructions.  It is becoming obvious to me that MBAM is the culprit that keeps installing these "Non-Threats" when the removal of said, "Non-Threat" causes a need to "ReBoot" so it may read the Registry Files so this is reinserted.  As long as I do not follow that one instruction the "Non-Threats" remain off of my system, only returning when there is a requirement of a 'ReBoot' by some other feature installed, like updates from Microsoft.

I am not a "Dumb" user have been using computers since before the World Wide Web (www) was ever developed working in DOS plus using Unix software to surf the Network before the WWW or even Windows were ever developed.  My knowledge is 'self taught' and many have attempted to pull the proverbial 'wool over my eyes' and are UNSUCCESSFUL.

Your request is in process and have noticed it does not require Admin Level to run said program

Link to post
Share on other sites

Ried,

Here is the file you requested, there are some data within that file that is INCORRECT plus some data that does NOT pertain to my issues.  I did review it prior to sending said file.  When may I receive information on your evaluation?

Excuse me please?  For some unknown reason that file is not uploadable to your forums, keep getting an ERROR message and failure to upload.  The file is only 160KB and now this reply is not being accepted by your forums.

Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
 Share

  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.