LesterH Posted October 28, 2019 ID:1341859 Share Posted October 28, 2019 After installing Malwarebytes to remove malware, I get two of these popups during startup. I don't know if they are from malware or from malwarebytes. There is no text in the popup, only an "OK" button and an Info icon. I close these without clicking on the "OK" button, but how do I get rid of these? Link to post Share on other sites More sharing options...
Staff Malwarebytes Posted October 28, 2019 Staff ID:1341860 Share Posted October 28, 2019 ***This is an automated reply*** Hi, Thanks for posting in the Malwarebytes 3 Help forum. If you are having technical issues with our Windows product, please do the following: Spoiler If you haven’t already done so, please run the Malwarebytes Support Tool and then attach the logs in your next reply: NOTE: The tools and the information obtained is safe and not harmful to your privacy or your computer, please allow the programs to run if blocked by your system. Download Malwarebytes Support Tool Once the file is downloaded, open your Downloads folder/location of the downloaded file Double-click mb-support-X.X.X.XXXX.exe to run the program You may be prompted by User Account Control (UAC) to allow changes to be made to your computer. Click Yes to consent. Place a checkmark next to Accept License Agreement and click Next You will be presented with a page stating, "Get Started!" Click the Advanced tab on the left column Click the Gather Logs button A progress bar will appear and the program will proceed with getting logs from your computer Upon completion, a file named mbst-grab-results.zip will be found on your Desktop. Click OK Please attach the file in your next reply. Before submitting your reply, be sure to enable "Notify me of replies" like so: Click "Reveal Hidden Contents" below for details on how to attach a file: Spoiler To save attachments, please click the link as shown below. You can click and drag the files to this bar or you can click the choose files, then browse to where your files are located, select them and click the Open button. One of our experts will be able to assist you shortly. If you are having licensing issues, please do the following: Spoiler For any of these issues: Renewals Refunds (including double billing) Cancellations Update Billing Info Multiple Transactions Consumer Purchases Transaction Receipt Please contact our support team at https://support.malwarebytes.com/community/consumer/pages/contact-us to get help If you need help looking up your license details, please head here: https://support.malwarebytes.com/docs/DOC-1264 Thanks in advance for your patience. -The Malwarebytes Forum Team Link to post Share on other sites More sharing options...
nukecad Posted October 28, 2019 ID:1341898 Share Posted October 28, 2019 (edited) I saw a similar popup recently when launching MB v4.0.2 beta version (in free mode), small blank window in the middle of the desktop which disappeared after a few seconds. I eventually guessed/decided that it was supposed to be a 'New version Available' notification that had no text for some reason. I had both 'Notify me when a new version becomes available' and 'Close notifications after 5 seconds' selected. I have since updated to v4.0.3 beta and no longer get that popup at launch. That is a beta version so you expect the odd glitch, but maybe it's more than that and the version update notification may be glitched for v3 as well?. Try checking to see if your version of MB3 is up to date. Edited October 28, 2019 by nukecad Link to post Share on other sites More sharing options...
LesterH Posted October 28, 2019 Author ID:1341907 Share Posted October 28, 2019 Thanks for the reply. So is it safe to click on the "OK" button? It looks like I have version 3.8.3, but it says there are no program updates. How do you upgrade to version 4? Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted October 28, 2019 Root Admin ID:1341910 Share Posted October 28, 2019 Hello @LesterH Let's go ahead and scan the system for any possible malware Please run the following steps and post back the logs as an attachment when ready.STEP 01 If you're already running Malwarebytes 3 then open Malwarebytes and check for updates. Then click on the Scan tab and select Threat Scan and click on Start Scan button. If you don't have Malwarebytes 3 installed yet please download it from here and install it. Once installed then open Malwarebytes and check for updates. Then click on the Scan tab and select Threat Scan and click on Start Scan button. Once the scan is completed click on the Export Summary button and save the file as a Text file to your desktop or other location you can find, and attach that log on your next reply. If Malwarebytes won't run then please skip to the next step and let me know on your next reply. STEP 02 Please download AdwCleaner by Malwarebytes and save the file to your Desktop. Right-click on the program and select Run as Administrator to start the tool. Accept the Terms of use. Wait until the database is updated. Click Scan Now. When finished, please click Clean & Repair. Your PC should reboot now if any items were found. After reboot, a log file will be opened. Copy its content into your next reply. RESTART THE COMPUTER Before running Step 3 STEP 03 Please download the Farbar Recovery Scan Tool and save it to your desktop.Note: You need to run the version compatible with your system. You can check here if you're not sure if your computer is 32-bit or 64-bit Double-click to run it. When the tool opens, click Yes to disclaimer. Press the Scan button. It will make a log (FRST.txt) in the same directory the tool is run. Please attach it to your reply. The first time the tool is run, it also makes another log (Addition.txt). If you've, run the tool before you need to place a checkmark here. Please attach the Additions.txt log to your reply as well. Thanks Ron Link to post Share on other sites More sharing options...
LesterH Posted October 28, 2019 Author ID:1341922 Share Posted October 28, 2019 Thank you for yscan report.txtour help. I am attaching the three text files. FRST.txt Addition.txt Link to post Share on other sites More sharing options...
LesterH Posted October 28, 2019 Author ID:1341923 Share Posted October 28, 2019 Malware scan report scan report.txt Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted October 28, 2019 Root Admin ID:1341925 Share Posted October 28, 2019 Where is the AdwCleaner log? Link to post Share on other sites More sharing options...
LesterH Posted October 28, 2019 Author ID:1341927 Share Posted October 28, 2019 I didn't run it, because your instructions said to run it if Malwarebytes didn't run. Because Malwarebytes was working, I didn't run it. Should I run it anyway? Link to post Share on other sites More sharing options...
LesterH Posted October 28, 2019 Author ID:1341929 Share Posted October 28, 2019 I misunderstood the instructions. I ran Adwcleaner, restarted the computer and reran FRST. Files attached. AdwCleaner[C00].txt AdwCleaner[S00].txt AdwCleaner_Debug.log FRST.txt Addition.txt Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted October 28, 2019 Root Admin ID:1341933 Share Posted October 28, 2019 Please follow the directions from the following topic. The following program does not look like a valid link. Did you create it? Startup: C:\Users\leste\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Owmzwvxmybddiyh.lnk Points to: Owmzwvxmybddiyh.lnk -> C:\Users\leste\AppData\Roaming\NoQh\isoburn.exe Please find that file and upload it to https://virustotal.com and have them scan it Link to post Share on other sites More sharing options...
LesterH Posted October 28, 2019 Author ID:1341938 Share Posted October 28, 2019 No I did not create that program. I will follow the instructions for the second topic and upload the file to the virustotal site. I think the original malware had something to do with Chrome. It hacked into my Amazon account and placed an unauthorized order, and I wonder if it somehow found my Amazon password in Chrome's saved passwords. Thank you for your help. Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted October 28, 2019 Root Admin ID:1341941 Share Posted October 28, 2019 After you've done the clean up I'll go ahead and give you some advice to help better protect your privacy and data Also, check ALL of your extensions. It looks like one of them may be unwanted Link to post Share on other sites More sharing options...
LesterH Posted October 28, 2019 Author ID:1341985 Share Posted October 28, 2019 Ok. I did the cleanup. My computer is still searching for the .lnk file, but I uploaded the isoburn.exe file to virustotal. I'm not sure what you mean by "checking extensions". What do I need to do for that? Thanks. Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted October 28, 2019 Root Admin ID:1341988 Share Posted October 28, 2019 Please see the following https://www.computerhope.com/issues/ch001411.htm Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted October 28, 2019 Root Admin ID:1341989 Share Posted October 28, 2019 I'll check back on you a bit later today. Let me know how the computer is running now and if there are still any issues Link to post Share on other sites More sharing options...
LesterH Posted October 28, 2019 Author ID:1341993 Share Posted October 28, 2019 The popup no longer shows up after I deleted the isoburn.exe file. The computer ran fine after I first installed malwarebytes to get rid of the malware. I was just annoyed by the popup at startup. Thank you for your help! Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted October 28, 2019 Root Admin ID:1342011 Share Posted October 28, 2019 Great, glad to hear all is good now. I'll go ahead and close your topic soon and leave you with the following to help better protect your privacy and data. If you're not backing up your data and you're still using Google Chrome then you're just not serious about Privacy, Safety, and protecting your data. Malwarebytes is a fantastic program but you still need to back up your data and you still need to block scripts and Ads in your browser. If you're still using Google Chrome I would highly suggest you consider using Firefox instead. For more advanced users you might consider installing NoScript as well (it does have a higher learning curve though) Help Secure your browsers You may be interested in using our new Malwarebytes Browser Guard to help protect your browser from items that uBlock or others don't target. Please install uBlock Origin for your browsers to better protect your system. FireFox, Chrome, Opera , Safari, Microsoft EdgeAdBlock Plus for Internet ExplorerHow to use uBlock Origin to protect your online privacy and security | uBlock Origin tutorial 2018This video tutorial above explains how to use uBlock Origin in advanced user mode and all the advanced settings to protect your online privacy and help prevent unwanted sites from changing your browser settings Delete Cookies Automatically Cookie AutoDelete pluginChrome | Firefox Browser push notifications: a feature asking to be abusedHTTPS EverywhereNOTHING TO HIDE documentary Review your email and Office choices Quit Gmail for free encrypted email - TutanotaWhy ProtonMail Is More Secure Than GmailLibreOffice - Free and open source office suite Use Password Management software BitwardenKeePass Password Safe Make sure you use a strong master password Then set the key transformation settings (the link below helps provide information on how to choose good settings)https://pthree.org/2016/06/29/further-investigation-into-scrypt-and-argon2-password-hashingKeePass Password Manager: Full Detailed Setup (good YouTube video on setup and using Keepass but choose the Argon2 method for Key transformation) Encrypted Instant Messenger and Voice Calls RiotSignalWireWickr Me Follow-up Reading Everything you need to know about cybercrime 10 easy ways to prevent malware infection Keep your data backed up Thank you for choosing Malwarebytes as your preferred security protection software and tell your friends and family too. We're here to help. Ron Link to post Share on other sites More sharing options...
LesterH Posted October 29, 2019 Author ID:1342052 Share Posted October 29, 2019 Thank you so much for your help! I will look into these tips. Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted October 30, 2019 Root Admin ID:1342305 Share Posted October 30, 2019 Glad we could help. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this topic with your request. This applies only to the originator of this thread. Other members who need assistance please start your own topic in a new thread. Thanks Link to post Share on other sites More sharing options...
Recommended Posts