Jump to content
ReconScout

MB Autodelting?????

Recommended Posts

I have Windows 10 (argh) and do not have defender turned on.

I have had MB premium for years, and the last few weeks, MB keeps getting deleted without my knowing???

I have totally uninstalled and restarted.

 

I downloaded (I don't remember the mb util name) but it checks your machine (in safe mode), and it found nothing.

Downloaded the latest version. Checked to make sure it's up to date. Reinstalled. Restarted. (AARRGH) added my exclusions. Checked to make sure real time protection is on. MB says "Your good to go."

A day or two later. The app is gone (the folder is still there)??

HELP????!!!!!

 

Share this post


Link to post
Share on other sites

Hello, Welcome to Malwarebytes.
I'm nasdaq and will be helping you.

If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed.
===

Download the Farbar Recovery Scan Tool (FRST).
Choose the 32 or 64 bit version for your system.
and save it to a folder on your computer's Desktop.
Double-click to run it. When the tool opens click Yes to disclaimer.
Press Scan button.
It will make a log (FRST.txt) in the same directory the tool is run. Please copy and paste it to your reply.
The first time the tool is run, it makes also another log (Addition.txt). Please attach it to your reply.

How to attach a file:
In the Reply section in the bottom of the topic Select Click the Choose a File.
Navigate to the location of the File.
Click the file. It will appear in section.
Click the Saving button.

Please post the logs for my review.

Wait for further instructions
====


 

Share this post


Link to post
Share on other sites

I’ve been around computers for a long time so I’m used to debugging them. 
 

but today mb found nothing but I’m getting port 443 outbound warnings and I’ve done all of this. 
reset modem router 

restated computer 

safe boot with network. 
 

checked services for strange things 

checked host file

reset flushed renews dns

tracert getting 9-10 hops the a dropout or 2

all pages all briskets “resolving hist” and forever loads if it does

seems only browser based  

 

just uninstalled chrome took forever  

I’m running out of ideas  

 

Share this post


Link to post
Share on other sites
6 minutes ago, ReconScout said:

I’m running out of ideas  

You posted in the wrong section. You also never finished you case back on Dec 31. I assume this is the same computer?

I will ask for this post to be moved or merged with the other topic.

Edited by Porthos

Share this post


Link to post
Share on other sites

Hello @ReconScout

I have merged your topics. Please follow the directions below and we will try to assist you in cleaning your computer of checking to see if there is an infection or not.

 

 

Please run the following steps and post back the logs as an attachment when ready.

STEP 01

  • If you're already running Malwarebytes then open Malwarebytes and check for updates. Then click on the Scan tab and select Threat Scan and click on Start Scan button.
  • If you don't have Malwarebytes installed yet please download it from here and install it.
  • Once installed then open Malwarebytes and select Scan and let it run.
  • Once the scan is completed click on the View Report button, then the Export button and save the file as a Text file to your desktop or other location you can find and attach that log on your next reply.
  • If Malwarebytes won't run then please skip to the next step and let me know in your next reply.

STEP 02

Please download AdwCleaner by Malwarebytes and save the file to your Desktop.

  • Right-click on the program and select RunAsAdmin.jpg Run as Administrator to start the tool.
  • Accept the Terms of use.
  • Wait until the database is updated.
  • Click Scan Now.
  • When finished, please click Clean & Repair.
  • Your PC should reboot now if any items were found.
  • After reboot, a log file will be opened. Attach or Copy its content into your next reply.

 

RESTART THE COMPUTER Before running Step 3

STEP 03
Please download the Farbar Recovery Scan Tool and save it to your desktop.

Note: You need to run the version compatible with your system. You can check here if you're not sure if your computer is 32-bit or 64-bit

  • Double-click to run it. When the tool opens, click Yes to disclaimer.
  • Press the Scan button.
  • It will make a log (FRST.txt) in the same directory the tool is run. Please attach it to your reply.
  • The first time the tool is run, it also makes another log (Addition.txt). If you've, run the tool before you need to place a checkmark here.
  • Please attach the Additions.txt log to your reply as well.

 

Thanks

 

 

Share this post


Link to post
Share on other sites

Sorry, Your fix did stop it from auto deleting. I apologize I did not close this (which I will now).

Share this post


Link to post
Share on other sites

I thought you merged my typo, not both topics, sorry. The auto delete was fixed with your solution.

Now this is happening. I printed out your solution and I am going to do it now.

Thanks.

Share this post


Link to post
Share on other sites

There is no fix provided. I've simply asked you to run some scans so we can take a look and see what's going on but we will need all of the logs ATTACHED on your next reply so we can check for you

Thanks

 

Share this post


Link to post
Share on other sites

I did all of the steps you asked. It did find a pup and removed it. I am attaching all the reports you asked for.
So far chrome is back to its blazing speed!

 

Thanks.

Let me know if I need to do anything else, and I will close or update this post when I give it a day or two.

Thanks!

FRST.txt Addition.txt MB_Report.txt

Share this post


Link to post
Share on other sites

You have old compromised versions of Java on the computer. Please uninstall all versions of Java and if  you really need Java make sure you keep it updated at all times.  https://java.com

You have a program named LifeChat that is now 10 years old. Nothing wrong with it if you're still using it - just pointing it out in case you're not using it as 10 years is a lifetime in terms of old computer programs.

You also have Paragon Software HFS which is a very old version. Not sure if there is an issue running it on Windows 10 or not but if you do use it you might want to check for updates for it.

Microsoft Xbox 360 Accessories, XboxStat is from 2009
Adobe Switchboard is from 2010
Adobe CS6ServiceManager is from 2012
Gaming Mouse\Monitor is from 2013
RealPlayer, RealDownloader, and DivX Media are not used as much anymore - not saying anything is wrong with them but you may want to review if you still want or need them on the system. I used to use both of them myself but have not used them now for many years
 

Use of programs like uTorrent is not illegal but often times probably 95% of all content shared is illegal and does increase the risk of your computer being infected. Unless you really have a good valid reason for using I would highly recommend you not use uTorrent

CCleaner used to be a very popular program and nothing wrong with it if you think you really need it. Here is some information to help you decide if you still want to use or not
https://helpdeskgeek.com/free-tools-review/why-you-shouldnt-download-ccleaner-for-windows-anymore/

 

 

Please download the attached fixlist.txt file and save it to the Desktop.
NOTE. It's important that both files, FRST or FRST64 and fixlist.txt are in the same location or the fix will not work.

NOTICE: This script was written specifically for this user, for use on this particular machine. Running this on another machine may cause damage to your operating system.

Run FRST or FRST64 and press the Fix button just once and wait.
If the tool needs a restart please make sure you let the system restart normally and let the tool complete its run after restart.
The tool will make a log on the Desktop (Fixlog.txt). Please attach or post it to your next reply.

Note: If the tool warned you about an outdated version please download and run the updated version.

fixlist.txt

Thanks

 

Share this post


Link to post
Share on other sites

Thanks for the help getting rid of apps/services I don't need. From you instructions, I ran the programs and included the logs you requested. I was able to remove most of the programs except whats noted below.

Java (I uninstalled all of them, and reinstalled the version you gave me a link to)

Paragon Software HFS  (I thought this was an HD service or app and never messes with it, but I deleted it). 
Real Player (I did an uninstall, it stopped working after a few minutes, and the uninstaller gave me the option to stop, which I did, and now it's not in the Pr grams and Features list, but I am not sure it's completely gone)
Microsoft Xbox 360 Accessories, XboxStat is from 2009 (I deleted this, I thought I needed it to run the Xbox 360 controller on my computer)
Adobe Switchboard is from 2010 (I uninstalled this)
Adobe CS6ServiceManager is from 2012 (I could not find a way to delete this, not in the Programs and Features list to uninstall. All I could do is disable the service in Task Manager)
Gaming Mouse\Monitor is from 2013  (I did not delete but updated was the Anker Gaming mouse (which I still use).

uTorrent (I uninstalled this)

CCleaner (I used this, I though it was good to cleanup things, but I uninstalled it. I would like to find a newer app that did what this did)

I downloaded the  fixlist.txt file  to the same directory as the apps/logs for this issue.
 
I am attaching all the log file (the original ones before these instructions too).
Like I said I removed all I could except the Adobe CS6ServiceManager.

I really appreciate the help and script. I am glad you were able to find all these issues and give me a way to correct them. Let me know if there is anything else I need to do.
 
Thanks,
Don
 

Addition.txt AdwCleaner[C02].txt AdwCleaner[C03].txt Fixlog.txt FRST.txt FRST_after_uninstalls.txt mb_scan_report.txt

Edited by AdvancedSetup
corrected font issue

Share this post


Link to post
Share on other sites

Yes it''s running great. MB is running great too. I have my daily scans and nothing (except those pups). One thing. With the Chrome settings. Every time I log into chrome, I have to enter the code it text's to me? I only used to do that when I cleared all my data (cookies, cache, etc).
Is there someway to white-list google?

Share this post


Link to post
Share on other sites

It sounds like you have 2FA (Two Factor Authentication) enabled. Which site does it do that on?  Google itself or some other site.

I'm off work so will check back on you on Monday unless I get a free moment on the weekend.

Cheers and have a great weekend @ReconScout

 

Share this post


Link to post
Share on other sites

It’s just google.com. 
 

I tried to add it to the white list under security that the link on why not to use CC has you add .com be blocked. 
I dint have the exact place memorized but I will look it up and let you know. 
 

thanks 

Share this post


Link to post
Share on other sites

Hello @ReconScout

I'm sorry it looks like I missed your reply. There is no way that Google should have any issues. Are you still having any issues? Do you still need further assistance?

Thanks

 

Share this post


Link to post
Share on other sites

Yes,

Each time I log into any Google site, gmail, YouTube, I have to enter the code for the 2 stop login??

Tanks

Share this post


Link to post
Share on other sites

Okay, you may have been asked to run this before but go ahead and run it again please.

 

Then when done please run the following

 

Please run the following steps and post back the logs as an attachment when ready.

STEP 01

  • If you're already running Malwarebytes then open Malwarebytes and check for updates. Then click on the Scan tab and select Threat Scan and click on Start Scan button.
  • If you don't have Malwarebytes installed yet please download it from here and install it.
  • Once installed then open Malwarebytes and select Scan and let it run.
  • Once the scan is completed click on the View Report button, then the Export button and save the file as a Text file to your desktop or other location you can find and attach that log on your next reply.
  • If Malwarebytes won't run then please skip to the next step and let me know in your next reply.

STEP 02

Please download AdwCleaner by Malwarebytes and save the file to your Desktop.

  • Right-click on the program and select RunAsAdmin.jpg Run as Administrator to start the tool.
  • Accept the Terms of use.
  • Wait until the database is updated.
  • Click Scan Now.
  • When finished, please click Clean & Repair.
  • Your PC should reboot now if any items were found.
  • After reboot, a log file will be opened. Attach or Copy its content into your next reply.

 

RESTART THE COMPUTER Before running Step 3

STEP 03
Please download the Farbar Recovery Scan Tool and save it to your desktop.

Note: You need to run the version compatible with your system. You can check here if you're not sure if your computer is 32-bit or 64-bit

  • Double-click to run it. When the tool opens, click Yes to disclaimer.
  • Press the Scan button.
  • It will make a log (FRST.txt) in the same directory the tool is run. Please attach it to your reply.
  • The first time the tool is run, it also makes another log (Addition.txt). If you've, run the tool before you need to place a checkmark here.
  • Please attach the Additions.txt log to your reply as well.

 

Thanks

Share this post


Link to post
Share on other sites

Due to the lack of feedback, this topic is closed to prevent others from posting here.

If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this topic with your request.

This applies only to the originator of this topic. Other members who need assistance please start your own topic in a new thread.

Thanks

 

Share this post


Link to post
Share on other sites
Guest
This topic is now closed to further replies.

  • Recently Browsing   0 members

    No registered users viewing this page.

×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.