Kathysm Posted May 26, 2017 ID:1130269 Share Posted May 26, 2017 Hi. I'm having a lot of pop blockers for outbound traffic from n65adserv.com. I have Malwarebytes Premium and have done several scans that result in files needing quarantined but the pop up blockers continue. Do you have a recommendation on how to stop the outbound traffic? Thank you. Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted May 26, 2017 Root Admin ID:1130325 Share Posted May 26, 2017 Hello @Kathysm and Please open Malwarebytes and check for updates. Then do a Threat Scan and post back that log for me and we'll see what it says. I'd also like to get the following logs please. Please download Farbar Recovery Scan Tool and save it to your desktop. Note: You need to run the version compatible with your system. You can check here if you're not sure if your computer is 32-bit or 64-bit Double-click to run it. When the tool opens click Yes to disclaimer. Press Scan button. It will make a log (FRST.txt) in the same directory the tool is run. Please attach it to your reply. The first time the tool is run, it also makes another log (Addition.txt). Please attach it to your reply as well. Thank you Ron Link to post Share on other sites More sharing options...
Kathysm Posted May 26, 2017 Author ID:1130444 Share Posted May 26, 2017 Thank you for your quick reply. I checked for Malwarebytes updates and ran the scan and will post the results below. Unfortunately, I can't reach Farbar recovery tool. I tried from the link you posted above as well as searching it through all browsers....IE, Chrome, Firefox, and each time it would close down the browser. Not for any other browsing, only when I tried to go to Farbar. That doesn't sound good. Also, this morning my Norton popped up with something you may want to see. I'm attaching the screenshot of that one for you. Thank you for your help, Kathy www.malwarebytes.com -Log Details- Scan Date: 5/26/17 Scan Time: 8:08 AM Logfile: scanreport.txt Administrator: Yes -Software Information- Version: 3.0.6.1469 Components Version: 1.0.103 Update Package Version: 1.0.2026 License: Premium -System Information- OS: Windows 10 CPU: x64 File System: NTFS User: LAPTOP-K61F1JG5\Kathy -Scan Summary- Scan Type: Threat Scan Result: Completed Objects Scanned: 376375 Time Elapsed: 5 min, 3 sec -Scan Options- Memory: Enabled Startup: Enabled Filesystem: Enabled Archives: Enabled Rootkits: Disabled Heuristics: Enabled PUP: Enabled PUM: Enabled -Scan Details- Process: 0 (No malicious items detected) Module: 0 (No malicious items detected) Registry Key: 1 Rootkit.Fileless.MTGen, HKU\S-1-5-21-3407303249-2685847338-1571932568-1001_Classes\2652363\SHELL\OPEN\COMMAND, No Action By User, [1356], [386625],1.0.2026 Registry Value: 1 Rootkit.Fileless.MTGen, HKU\S-1-5-21-3407303249-2685847338-1571932568-1001_Classes\2652363\SHELL\OPEN\COMMAND|, No Action By User, [1356], [386625],1.0.2026 Registry Data: 0 (No malicious items detected) Data Stream: 0 (No malicious items detected) Folder: 0 (No malicious items detected) File: 3 Rootkit.Fileless.MTGen, C:\USERS\KATHY\START MENU\PROGRAMS\STARTUP\F74E6F0.LNK, No Action By User, [1356], [-1],0.0.0 Rootkit.Fileless.MTGen, C:\Users\Kathy\AppData\Local\f049d5c\9E3DF6E.4D2817CD, No Action By User, [1356], [-1],0.0.0 Rootkit.Fileless.MTGen, C:\USERS\KATHY\APPDATA\ROAMING\MICROSOFT\WINDOWS\START MENU\PROGRAMS\STARTUP\F74E6F0.LNK, No Action By User, [1356], [-1],0.0.0 Physical Sector: 0 (No malicious items detected) (end) Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted May 31, 2017 Root Admin ID:1131545 Share Posted May 31, 2017 (edited) Well it looks like both Kaspersky and Malwarebytes found it but in the case of Malwarebytes you chose not to allow it to be fixed. Let me have you run the following please. Make sure you disable your Norton antivirus while running it. Then after you run it, make sure you re-enable your Norton antivirus. Please download Malwarebytes Anti-Rootkit from http://downloads.malwarebytes.org/file/mbar If needed there is a self help tutorial here: MBAR tutorial Unzip the contents to a folder in a convenient location. Open the folder where the contents were unzipped and run mbar.exe Follow the instructions in the wizard to update and allow the program to scan your computer for threats. Click on the Cleanup button to remove any threats and reboot if prompted to do so. Wait while the system shuts down and the cleanup process is performed. Perform another scan with Malwarebytes Anti-Rootkit to verify that no threats remain. If they do, then click Cleanup once more and repeat the process. When done, please post the two logs produced they will be in the MBAR folder... mbar-log.txt and system-log.txt Thanks Ron Edited May 31, 2017 by AdvancedSetup Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted June 1, 2017 Root Admin ID:1131969 Share Posted June 1, 2017 Due to the lack of feedback this topic is closed to prevent others from posting here. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.Other members who need assistance please start your own topic in a new thread. Thanks! Link to post Share on other sites More sharing options...
Recommended Posts