Nick254 Posted December 27, 2018 ID:1289243 Share Posted December 27, 2018 I hope I included the right stuff Malwarebytes.txt Addition.txt FRST.txt Link to post Share on other sites More sharing options...
nasdaq Posted December 27, 2018 ID:1289246 Share Posted December 27, 2018 Hello, Welcome to Malwarebytes. I'm nasdaq and will be helping you. If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed. === Please run MBAM and delete all the entries that are listed. === Please download the attached Fixlist.txt file to the same folder where the Farbar tool is running from. The location is listed in the 3rd line of the FRST.txt log you have submitted. Run FRST and click Fix only once and wait. The tool will create a log (Fixlog.txt) please post it to your reply. === Let me know what problem persists. fixlist.txt Link to post Share on other sites More sharing options...
Nick254 Posted December 27, 2018 Author ID:1289256 Share Posted December 27, 2018 Hello nasdaq! I quarantined all the entries and then deleted them. When I run the fix with the fixlist I got this error shown in the jpeg file. If my computer were to restart it did not. The problem I face is that a malware disguised as a movie file was a shortcut to powershell. After I opened it powershell was on and then the command program was on and did some stuff. Internet explorer opened on its own and I closed it immediately. After that I got the message that my Windows defender is turned off and that I should take action immediately. I recently updated to 1809 and now the security center looks safer with less notifications about not being safe, BUT I am concerned that I cannot modify the security settings and I get the message that they are managed by the administrator (and I have administrator priviledges). Before I made the topic I had already run a series of MB, FRST scan and Roguekiller. And before all that I had deleted a reg entry named disable antispyware using regedit. Fixlog.txt Link to post Share on other sites More sharing options...
nasdaq Posted December 27, 2018 ID:1289274 Share Posted December 27, 2018 Hi, Farbar is running from C:\Users\Νίκος Αντωνίου\Desktop\Files Was the Fix list placed in the Files folder near the Farbar program? Link to post Share on other sites More sharing options...
Nick254 Posted December 27, 2018 Author ID:1289278 Share Posted December 27, 2018 Hi, Yes Farbar is running in the same folder the fixlist is.http://prntscr.com/m0b7vx Link to post Share on other sites More sharing options...
nasdaq Posted December 28, 2018 ID:1289379 Share Posted December 28, 2018 Hi, BUT I am concerned that I cannot modify the security settings and I get the message that they are managed by the administrator What exactly are you trying to do? p.s. The error received on the Farbar program has been submitted to the owner. Link to post Share on other sites More sharing options...
nasdaq Posted January 5, 2019 ID:1290802 Share Posted January 5, 2019 Are you still with me? Link to post Share on other sites More sharing options...
Nick254 Posted January 5, 2019 Author ID:1290851 Share Posted January 5, 2019 Yes I am but I am away from the computer. I tried to send you some print screens here which were thought to be spam. What I am trying to do is modify the setting of my windows defender. When I go there it says that these settings are managed by the administrator and they appear to be turned off. I worry that my computer's built in protection is down. I will be back with my pc in two days or so. Link to post Share on other sites More sharing options...
nasdaq Posted January 6, 2019 ID:1290936 Share Posted January 6, 2019 Hi, Please download the attached Fixlist.txt file to the same folder where the Farbar tool is running from. The location is listed in the 3rd line of the FRST.txt log you have submitted. Run FRST and click Fix only once and wait. The tool will create a log (Fixlog.txt) please post it to your reply. === Let me know if the problem persists. fixlist.txt Link to post Share on other sites More sharing options...
Nick254 Posted January 10, 2019 Author ID:1291743 Share Posted January 10, 2019 Hello, Yes At last my problem is fixed. Windows Defender is under my control again. Fixlog.txt Link to post Share on other sites More sharing options...
nasdaq Posted January 10, 2019 ID:1291775 Share Posted January 10, 2019 Glad we could help. Link to post Share on other sites More sharing options...
Nick254 Posted January 10, 2019 Author ID:1291783 Share Posted January 10, 2019 Hello there is only 1 locked setting visible though. I do not know if there are any more that are locked. Link to post Share on other sites More sharing options...
nasdaq Posted January 10, 2019 ID:1291823 Share Posted January 10, 2019 Hi, No fix is available with the Farbar program for this. Navigate to this page you will find the instructions to set in ON Turn the Smartscreen ON.https://support.microsoft.com/en-ca/help/17443/windows-internet-explorer-smartscreen-filter-faq Link to post Share on other sites More sharing options...
nasdaq Posted January 15, 2019 ID:1292636 Share Posted January 15, 2019 Is the problem solved? Link to post Share on other sites More sharing options...
Nick254 Posted January 21, 2019 Author ID:1293692 Share Posted January 21, 2019 No I could not figure it out. But I guess it is just a minor problem. My pc is working fine. Thanks again! Link to post Share on other sites More sharing options...
nasdaq Posted January 21, 2019 ID:1293743 Share Posted January 21, 2019 Hi, You must be using Internet Explorer. Try again. In Internet Explorer, select the Tools button (see the icon), then select Safety. Select Turn off SmartScreen Filter, and then choose either Turn off SmartScreen Filter or Turn on SmartScreen Filter. In the Microsoft SmartScreen Filter dialog box, select OK. Link to post Share on other sites More sharing options...
nasdaq Posted January 25, 2019 ID:1294584 Share Posted January 25, 2019 Are you still with me? Link to post Share on other sites More sharing options...
Nick254 Posted January 29, 2019 Author ID:1295369 Share Posted January 29, 2019 Yes of course! Such option is not available in my Internet explorer. I did find the Windows Defender Smart Screen setting and I turned it off then back on but no dialog box appeared. Still the windows defender shows as before. This has stopped being my main problem. Now I have a problem with my Sound. When I turn on my computer some times media does not play through my speakers. System sounds work fine . Windows media player does not play sound, nor does youtube, spotify etc. When I get that problem I sign off the second user to the pc, which is allways automatically signed in even when he has not used the pc, and then restart my device. Sometimes the problem is fixed with this method. My connections are fine since everything works fine with the system sounds. Link to post Share on other sites More sharing options...
nasdaq Posted January 29, 2019 ID:1295387 Share Posted January 29, 2019 (edited) Hi, Which user is the sound not working? Which user to you then use to get the sound.? Available Users.Administrator (S-1-5-21-3387370297-3527517202-122197582-500 - Administrator - Disabled)en0ts (S-1-5-21-3387370297-3527517202-122197582-1010 - Administrator - Enabled) => C:\Users\en0tsGuest (S-1-5-21-3387370297-3527517202-122197582-501 - Limited - Disabled)HomeGroupUser$ (S-1-5-21-3387370297-3527517202-122197582-1009 - Limited - Enabled)WDAGUtilityAccount (S-1-5-21-3387370297-3527517202-122197582-504 - Limited - Disabled)Νίκος Αντωνίου (S-1-5-21-3387370297-3527517202-122197582-1004 - Administrator - Enabled) => C:\Users\Νίκος ΑντωνίουΠροεπιλεγμένος λογαριασμός (S-1-5-21-3387370297-3527517202-122197582-503 - Limited - Disabled) Edited January 29, 2019 by nasdaq Link to post Share on other sites More sharing options...
Nick254 Posted January 29, 2019 Author ID:1295394 Share Posted January 29, 2019 Hello Νικος Αντωνίου sound not working. (now after the restart/troubleshooting wizard etc works fine) en0ts is the user that issigned in although he turns off the pc normally Link to post Share on other sites More sharing options...
nasdaq Posted January 29, 2019 ID:1295412 Share Posted January 29, 2019 Hi, It's possible that the profile hardware is compromised in that User profile. I suggest you create a new profile (user Account) name it Νίκος new or something similar. Check the sound in the account when completed. Or you can ask in the Windows 10 if it's possible to fix the Audio in a profile alone.https://www.bleepingcomputer.com/forums/f/229/windows-10-support/ This is not malware and not my forte. Link to post Share on other sites More sharing options...
Nick254 Posted January 30, 2019 Author ID:1295474 Share Posted January 30, 2019 Hello , does the fact that the problem is solved or not existent some times mean that there may not be a problem? what does compromised profile hardware mean? Link to post Share on other sites More sharing options...
nasdaq Posted January 30, 2019 ID:1295579 Share Posted January 30, 2019 Hi, Instead of compromised I could have used damaged. If when you restart the computer the issue is solved that that is just a glitch what is causing it is unknown to me. It's not caused by malware. If the problem gets worst the check with the Windows 10 experts. Link to post Share on other sites More sharing options...
Nick254 Posted January 30, 2019 Author ID:1295583 Share Posted January 30, 2019 Ok thanks a lot Link to post Share on other sites More sharing options...
nasdaq Posted January 30, 2019 ID:1295602 Share Posted January 30, 2019 Glad we could help. Link to post Share on other sites More sharing options...
Recommended Posts