Jump to content

Recommended Posts

Hi,

I'm using Malwarebytes Premium 3.0.6. 

Just in the last day, I've been getting an annoying Malwarebytes popup notice that video.leadzu.com is being blocked. 
That's great, but I don't need to know it every 30 seconds.....once a day is adequate. How can I stop the popup? 
I set notifications in system tray to "off", but I still get the popup. :huh:

Based on this thread about lingering malware, followed the link to "I'm infected...", and how to use the FARBAR scan. 
Attached are the 2 files generated by FARBAR. 

Thanks for the help! :)

FRST.txt

Addition.txt

Link to post
Share on other sites

Hello 3dcal and welcome to Malwarebytes,

Continue with the following :-

Please download Zemana AntiMalware and save it to your Desktop.
 
  • Install the program and once the installation is complete it will start automatically.
  • Without changing any options, press Scan to begin.
  • After the short scan is finished, if threats are detected press Next to remove them.
    Note: If restart is required to finish the cleaning process, you should click Reboot. If reboot isn't required, please re-boot your computer manually.
     
  • Open Zemana AntiMalware again.
  • Click on user posted image icon and double click the latest report.
  • Now click File > Save As and choose your Desktop before pressing Save.
  • Attach saved report in your next message.


Next,

Download AdwCleaner by Xplode onto your Desktop.

Or from this Mirror
 
  • Double click on Adwcleaner.exe to run the tool
  • Click on the Scan in the Actions box
  • Please wait fot the scan to finish..
  • When "Waiting for action.Please uncheck elements you want to keep" shows in top line..
  • Click on the Cleaning box.
  • Next click OK on the "Closing Programs" pop up box.
  • Click OK on the Information box & again OK to allow the necessary reboot
  • After restart the AdwCleaner(C*)-Notepad log will appear, please copy/paste it in your next reply. Where * is the number relative to list of scans completed...[/list

    Next,

    Please download Junkware Removal Tool to your desktop.

    • Shut down your protection software now to avoid potential conflicts. (re-enable when done)
    • Run the tool by double-clicking it. If you are using Windows Vista, 7, or 8; instead of double-clicking, right-mouse click JRT.exe and select "Run as Administrator".
    • The tool will open and start scanning your system.
    • Please be patient as this can take a while to complete depending on your system's specifications.
    • On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
    • Post the contents of JRT.txt into your next message.

      Next,

      Run FRST one more time, ensure all boxes are checkmarked under "Whitelist" but only Addition.txt under "Optional scan" Select scan, when done post the new logs. "FRST.txt" and "Addition.txt"

      Next,

      Open Malwarebytes, select > Reports > then checkmark (tick) most recent "Website Block" entry > then select "View Report" > "Export" > Text File (*.txt) name and save that file to Desktop or somewhere of your choice, attach to your reply...

      Let me see those logs, also tell me if there are any remaining issues or concerns...

      Thank you,

      Kevin

 

Link to post
Share on other sites

Kevin, 

thanks, but, that's a bit much to ask, imho.

Malwarebytes should block and remove the offending site as is and notify once. 
If that is not possible without having the user download several apps, run them, etc. 
then it's not doing it's job. 

Is there a way to just stop the popups? I did a Google search and see it's a rather common problem. Not good. 

Edited by 3dcal
Link to post
Share on other sites

  • 2 weeks later...
Guest
This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.