boombastik Posted February 1, 2019 ID:1296127 Share Posted February 1, 2019 Hallo, i don't have any problem with malware but i have a strange value in frst. I created the logs from mbam tool to report a bug, and i found in the FRST/Troubleshooting folder in the frst.txt this: GroupPolicy: Restriction ? <==== ATTENTION is this a problem? How i can fix it? mbst-grab-results.zip Link to post Share on other sites More sharing options...
boombastik Posted February 1, 2019 Author ID:1296218 Share Posted February 1, 2019 GroupPolicy: Restriction ? <==== ATTENTION frst.txt i uploaded them here: Addition.txt FRST.txt Link to post Share on other sites More sharing options...
boombastik Posted February 2, 2019 Author ID:1296253 Share Posted February 2, 2019 Because i have macrium backups and i like to learn i created a frst.fix alone: fixlist content: ***************** Start GroupPolicy: Restriction ? <==== ATTENTION Reboot: End ***************** C:\WINDOWS\system32\GroupPolicy\Machine => moved successfully C:\WINDOWS\system32\GroupPolicy\GPT.ini => moved successfully C:\WINDOWS\SysWOW64\GroupPolicy\GPT.ini => moved successfully The system needed a reboot. My machine restarted and i checked again and now i don't have this problem. My new files are: Addition.txt FRST.txt Link to post Share on other sites More sharing options...
nasdaq Posted February 2, 2019 ID:1296357 Share Posted February 2, 2019 Hello, Welcome to Malwarebytes. I'm nasdaq and will be helping you. If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed. === Your logs are clean of malware. This was found and should be taken care off.ATTENTION: System Restore is disabled Turn System Restore ON for Drives in Windows 10 - Immediately.https://www.tenforums.com/tutorials/4533-system-protection-turn-off-drives-windows-10-a.html === p.s. I do not know what problems you had to remove the restriction. All went well. Next time I suggest you ask before removing any registry entries. Without knowledge you may cause more problems and will be sorry. Link to post Share on other sites More sharing options...
boombastik Posted February 2, 2019 Author ID:1296412 Share Posted February 2, 2019 Thanks you! I dont have problems but i checked 4 pc that i have with similar software and not have this restriction so i thought that it is a registry restriction leftover. Can u tell me wht is the porpuse of this driver : S3 pmxdrv; C:\Windows\system32\drivers\pmxdrv.sys [31152 2018-08-19] () Ps. Thanks very match for your help and for confirmation tha my machine is clean. If u dont have the time to answer the question about the above driver u can close the thread as i understand that this section is only for malware cleaning. Link to post Share on other sites More sharing options...
nasdaq Posted February 3, 2019 ID:1296490 Share Posted February 3, 2019 Hi, This should answer your question. https://www.file.net/process/pmxdrv.sys.html Regards. Stay safe. Link to post Share on other sites More sharing options...
boombastik Posted February 3, 2019 Author ID:1296522 Share Posted February 3, 2019 thanks you can lock it. regards. Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted February 7, 2019 Root Admin ID:1297228 Share Posted February 7, 2019 Glad we could help. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this topic with your request. This applies only to the originator of this thread. Other members who need assistance please start your own topic in a new thread. Thanks Link to post Share on other sites More sharing options...
Recommended Posts