Jump to content

Repeated Restoro PUP warnign.


Go to solution Solved by obieephyhm,

Recommended Posts

Specs:

Microsoft Windows 10 Pro Version 10.0.19043 Build 19043
System Type x64-based PC
Processor Intel(R) Core(TM) i9-9900KF CPU @ 3.60GHz, 3600 Mhz, 8 Core(s), 16 Logical Processor(s)
American Megatrends Inc. 1.D0, 12/31/2020 SMBIOS Version 2.8
BIOS Mode UEFI
MSI MPG Z390 GAMING PLUS (MS-7B51)
Installed Physical Memory (RAM) 128 GB

 

I am in the process of building a DAW.  I use Opera as my principal browser and I don't much like Windows 10 pro (or any of Windows 10 versions) but I'll not get sidetracked on that rant.   I have been removing a lot of the bloatware that comes with Windows 10 that I don't want conflicting with the DAW or robbing it of resources.  For the last week or so, every time I pull up Opera, I get"

 

Malwarebytes
www.malwarebytes.com

-Log Details-
Protection Event Date: 7/21/21
Protection Event Time: 1:53 PM
Log File: e610ac58-ea54-11eb-b0cb-2cf05dd23c20.json

-Software Information-
Version: 4.4.2.123
Components Version: 1.0.1358
Update Package Version: 1.0.43347
License: Premium

-System Information-
OS: Windows 10 (Build 19043.1052)
CPU: x64
File System: NTFS
User: System

-Blocked Website Details-
Malicious Website: 1
, H:\DrpBx\Dropbox\newopera\Opera\77.0.4054.203\opera.exe, Blocked, -1, -1, 0.0.0, , 

-Website Data-
Category: PUP
Domain: restoro.com
IP Address: 50.56.4.238
Port: 443
Type: Outbound
File: H:\DrpBx\Dropbox\newopera\Opera\77.0.4054.203\opera.exe

(end)

 

I have searched the registry and all the drives and cannot find anything in the registry which corresponds to any of the file/folder information published on this site.  I would like to get Malwarebytes to stop this warning if I just knew what I had to get rid up in order to do so.   Suggestions?

Link to post
Share on other sites

  • Staff

***This is an automated reply***

Hi,

Thanks for posting in the Malwarebytes for Windows Help forum.

If you are having technical issues with our Windows product, please do the following:

Malwarebytes Support Tool - Advanced Options

This feature is designed for the following reasons:

  • For use when you are on the forums and need to provide logs for assistance
  • For use when you don't need or want to create a ticket with Malwarebytes
  • For use when you want to perform local troubleshooting on your own

How to use the Advanced Options:

Spoiler
  1. Download Malwarebytes Support Tool
  2. Double-click mb-support-X.X.X.XXXX.exe to run the program
    • You may be prompted by User Account Control (UAC) to allow changes to be made to your computer. Click Yes to consent.
  3. Place a checkmark next to Accept License Agreement and click Next
  4. Navigate to the Advanced tab
  5. The Advanced menu page contains four categories:
    • Gather Logs: Collects troubleshooting information from the computer. As part of this process, Farbar Recovery Scan Tool (FRST) is run to perform a complete diagnosis. The information is saved to a file on the Desktop named mbst-grab-results.zip and can be added as an email attachment or uploaded to a forum post to assist with troubleshooting the issue at hand.
    • Clean: Performs an automated uninstallation of all Malwarebytes products installed to the computer and prompts to install the latest version of Malwarebytes for Windows afterwards. The Premium license key is backed up and reinstated. All user configurations and other data are removed. This process requires a reboot.
    •  Repair System: Includes various system-related repairs in case a Windows service is not functioning correctly that Malwarebytes for Windows is dependent on. It is not recommended to use any Repair System options unless instructed by a Malwarebytes Support agent.
    • Anonymously help the community by providing usage and threat statistics: Unchecking this option will prevent Malwarebytes Support Tool from sending anonymous telemetry data on usage of the program.
  6. To provide logs for review click the Gather Logs button
  7. Upon completion, click OK
  8. A file named mbst-grab-results.zip will be saved to your Desktop
  9. Please attach the file in your next reply.
  10. To uninstall all Malwarebytes Products, click the Clean button.
  11. Click the Yes button to proceed. 
  12. Save all your work and click OK when you are ready to reboot.
  13. After the reboot, you will have the option to re-install the latest version of Malwarebytes for Windows.
  14. Select Yes to install Malwarebytes.
  15. Malwarebytes for Windows will open once the installation completes successfully.

Screenshots:

Spoiler
 
 
 
 
Spoiler

 

 

01.png

02.png

03.png

04.png

05.png

06.png

 

 

If you are having licensing issues, please do the following: 

Spoiler

For any of these issues:

  • Renewals
  • Refunds (including double billing)
  • Cancellations
  • Update Billing Info
  • Multiple Transactions
  • Consumer Purchases
  • Transaction Receipt

Please contact our support team at https://support.malwarebytes.com/hc/en-us/requests/new to get help

If you need help looking up your license details, please head here: Find my premium license key

 

 

Thanks in advance for your patience.

-The Malwarebytes Forum Team

Link to post
Share on other sites

  • Root Admin

Hello @obieephyhm and :welcome:

 

 

Please run the following steps and post back the logs as an attachment when ready.
Temporarily disable your antivirus or other security software first. Make sure to turn it back on once the scans are completed.
Temporarily disable Microsoft SmartScreen to download software below if needed. Make sure to turn it back on once the scans are completed.
If you still have trouble downloading the software please click on Reveal Hidden Contents below for examples of how to allow the download.

 

Spoiler
 
 
 
 

 

Spoiler

 

When downloading with some browsers you may see a different style of screens that may block FRST from downloading. The program is safe and used hundreds of times a week by many users.

Example of Microsoft Edge blocking the download

image.png

image.png

image.png

 

 



STEP 01

  • If you already have Malwarebytes installed then open Malwarebytes and click on the Scan button. It will automatically check for updates and run a Threat Scan.
  • If you don't have Malwarebytes installed yet please download it from here and install it.
  • Once installed then open Malwarebytes and select Scan and let it run.
  • Once the scan is completed make sure you have it quarantine any detections it finds.
  • If no detections were found click on the Save results drop-down, then the Export to TXT  button, and save the file as a Text file to your desktop or other location you can find and attach that log on your next reply.
  • If there were detections then once the quarantine has completed click on the View report button, Then click the Export drop-down, then the Export to TXT  button, and save the file as a Text file to your desktop or other location you can find and attach that log on your next reply.
  • If the computer restarted to quarantine you can access the logs from the Detection History, then the History tab. Highlight the most recent scan and double-click to open it. Then click the Export drop-down, then the Export to TXT  button, and save the file as a Text file to your desktop or other location you can find and attach that log on your next reply.
  • If Malwarebytes won't run then please skip to the next step and let me know in your next reply that the scanner would not run.

STEP 02

Please download AdwCleaner by Malwarebytes and save the file to your Desktop.

  • Double-click to run the program
  • Accept the End User License Agreement.
  • Wait until the database is updated.
  • Click Scan Now.
  • When finished, if items are found please click Quarantine.
  • Your PC should reboot now if any items were found.
  • After reboot, a log file will be opened. Attach or Copy its content into your next reply.

RESTART THE COMPUTER Before running Step 3

STEP 03
Please download the Farbar Recovery Scan Tool and save it to your desktop.

Note: You need to run the version compatible with your system. You can check here if you're not sure if your computer is 32-bit or 64-bit

  • Double-click to run it. When the tool opens, click Yes to disclaimer.
  • Press the Scan button.
  • It will make a log (FRST.txt) in the same directory the tool is run. Please attach it to your reply.
  • The first time the tool is run, it also makes another log (Addition.txt). If you've, run the tool before you need to place a check mark here each time
  • Please attach the Additions.txt log to your reply as well.
  • On your next reply, you should be attaching frst.txt and additions.txt to your post, every time.

 

Thanks

Link to post
Share on other sites

1. I have and have had Malwarebytes installed and operational.

2. I do not believe I have anything installed that comes from Restoro.com.  There is absolutely no evidence for it in the programs directory nor in the registry.  I have already read your other posts about this (to other people) and checked.

3. Were not these logs covered in the attachment I already posted (see above).

4. Malwarebytes is stopping some sort of embedded reach-out that happens when I load up Opera (each time).  I do not know how to find it within Opera and am not sure whether I should reach out to their support for additional help.

5. I do not and will not use Edge unless it is an absolute emergency.

6. I do not currently believe this a problem with Malwarebytes software but it isn't providing me with adequate information on what triggers the message to pop up every time I start Opera.

Link to post
Share on other sites

  • Root Admin
Posted (edited)

In most cases it is often related to a bad, corrupted, or misconfigured extension.

Why would Opera be running out of Dropbox folder?

Please run the scans as requested so that I can verify that both Malwarebytes and AdwCleaner come back clean

Thanks

 

 

Edited by AdvancedSetup
corrected typo
Link to post
Share on other sites

Posted (edited)

I am unsure what extensions are running on that version of Opera (I'm currently on a system that I recently acquired that hasn't got Malwarebytes installed on it, yet.  I'm still in the process of configuring it for my wife's use.  I will be adding it here, shortly.

Your second question is why Opera is running out of Dropbox?  Because in the days of Windows 7 x64 Ultimate -- it provided a way for me to have a single instance of Opera which I could use across several computers in my environment.  It worked pretty well, too -- aside from having to delete 'conflicted copies' every few months or so.  I did the same thing with Thunderbird, which was (and is) even more important to do so I can keep my emails consistent across different devices.   Since being forced into Windows 10 Pro, I'm still working to determine if the same system can still work under the new and less flexible OS.

I do not know if I can get those scans done today as I may not make it out to the studio to work on that computer.  I should be able to get them back to you no later than Friday afternoon after I get back from my morning appointments.  Fair enough?

Edited by AdvancedSetup
removed quote, not necessaary
Link to post
Share on other sites

  • Root Admin

Just trying to track down where, why the Restoro prompt on that system returns. Please run the following when you get time.

 

Create an Autoruns Log:

  • Please download Sysinternals Autoruns from here.
  • Save Autoruns.exe to your desktop and double-click it to run it.
  • Once it starts, please press the Esc key on your keyboard.
  • Now that scanning is stopped, click on the Options button at the top of the program and select Verify Code Signatures and Check VirusTotal.com and Submit Unknown Images
  • Once that's done press the F5 key on your keyboard, this will start the scan again, this time let it finish.
  • When it's finished, please click on the File button at the top of the program and select Save and save the Autoruns.arn file to your desktop and close Autoruns.
  • Right-click on the Autoruns.arn file on your desktop and hover your mouse over Send To and select Compressed (zipped) Folder
  • Attach the Autoruns.zip folder you just created to your next reply

 

image.png

 

Thanks

 

Link to post
Share on other sites

Obviously, my plans changed and I ended up in the studio -- partially to wrap this up.   I did more exploring and came across three things that I have neutered (or, if you prefer, spayed) all of them found in the startup apps/files section of the universe.  1) Opera Browser Assistant, 2) MSASCil and 3) updatechecker.exe; of these 1 or 3 may have been the culprit - research online seems to indicate it's pretty useless and maybe even qualifies as a form of spyware (odd, for a browser that makes the claims to privacy that they do) and everyone pretty much agrees that it can be removed or rendered useless.  The second relates to operating system security but, again, strictly speaking it isn't necessary in the startup folder so I have (at least temporarily) disabled it.  The third candidate shouldn't be there from what I can tell and it doesn't seem to be a legitimate part of the Minitools Disk Partitioner 12 so I disabled it then renamed it to see if anything happens.  I will point out that none of my antimalware programs registered its existence in prior scans.  But, for the sake of completeness, I reinstalled Malwarebytes and removed then reinstalled (the updated version) of Minitools DP 12.   So far, I have not seen the pop-up again but I need to reboot my system after these changes then see what happens.

Just so you know what I've done so far.....

Link to post
Share on other sites

  • Root Admin

Let me check all your logs when I get back. I'm heading out for lunch now.

Just for your own reference. I do not endorse any of these items, I'm simply providing links for you to possibly review for your ideas of de-bloating Windows.

 


O&O AppBuster
https://www.oo-software.com/en/ooappbuster

BloatBox
https://github.com/builtbybel/bloatbox


Windows10Debloater
https://github.com/Sycnex/Windows10Debloater


There is also another customization from Chris Titus Tech

https://christitus.com/debloat-windows-10-2020/

https://github.com/ChrisTitusTech/win10script

 

  • Like 1
Link to post
Share on other sites

  • Root Admin

You're using an Ad blocker that is woefully outdated and compared to current Content Blockers is not in the same category

Task: {4CC7CAD7-C9EE-4302-82B1-54D1B4807E40} - System32\Tasks\SUPERAntiSpyware Scheduled Task 65b7220b-7441-4d83-992c-dd376cc11a85 => C:\Program Files\SUPERAntiSpyware\SASTask.exe [49944 2013-11-07] (SUPERAntiSpyware.com -> SUPERAdBlocker.com) -> "C:\Program Files\SUPERAntiSpyware\SUPERANTISPYWARE.EXE" /TASK:65b7220b-7441-4d83-992c-dd376cc11a85

Task: {E0D23CC7-2F40-4EFD-A3A6-97F083C54C95} - System32\Tasks\SUPERAntiSpyware Scheduled Task 2d967fb3-a86f-4172-a3e5-908ddea592b8 => C:\Program Files\SUPERAntiSpyware\SASTask.exe [49944 2013-11-07] (SUPERAntiSpyware.com -> SUPERAdBlocker.com) -> "C:\Program Files\SUPERAntiSpyware\SUPERANTISPYWARE.EXE" /TASK:2d967fb3-a86f-4172-a3e5-908ddea592b8

Task: C:\Windows\Tasks\SUPERAntiSpyware Scheduled Task 2d967fb3-a86f-4172-a3e5-908ddea592b8.job => C:\Program Files\SUPERAntiSpyware\SASTask.exe C:\Program Files\SUPERAntiSpyware\SUPERANTISPYWARE.EXE
Task: C:\Windows\Tasks\SUPERAntiSpyware Scheduled Task 65b7220b-7441-4d83-992c-dd376cc11a85.job => C:\Program Files\SUPERAntiSpyware\SASTask.exe C:\Program Files\SUPERAntiSpyware\SUPERANTISPYWARE.EXE

Personally see no need to keep running an update checking tool like this. CODECS rarely change
Task: {9039CF4D-DC49-401F-9E4C-C9C8716182D8} - System32\Tasks\klcp_update => C:\Program Files (x86)\K-Lite Codec Pack\Tools\CodecTweakTool.exe [1907712 2021-06-23] () [File not signed]

I think you said you already removed, but agree. Don't need a specific task for updates unless you're the type that never checks on updates on your own.
Task: {CD76593B-85B4-4F3A-B3E4-77446467B7D2} - System32\Tasks\Opera scheduled assistant Autoupdate 1625688756 => X:\Dropbox\Opera\launcher.exe [1727184 2021-07-14] (Opera Software AS -> Opera Software) -> --scheduledautoupdate --component-name=assistant --component-path="X:\Dropbox\Opera\assistant" $(Arg0)

Task: {DE848E38-95CA-4DD2-A54C-8BBE9F46B996} - System32\Tasks\Opera scheduled Autoupdate 1625688754 => X:\Dropbox\Opera\launcher.exe [1727184 2021-07-14] (Opera Software AS -> Opera Software)

If you're not using Microsoft OneDrive you might want to consider uninstalling it
Task: {FC2B7456-A8E1-4EDA-A809-A533FEFF368A} - System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-1047274952-2270361687-1301715936-500 => H:\Users\obiee\AppData\Local\Microsoft\OneDrive\OneDriveStandaloneUpdater.exe

 

Most of these looks to be related to audio. Not sure if there is any issue or not. There are entries for them but the FRST program is not able to actually detect the file. There may not be an issue but I would suggest you look a bit deeper into it and make sure there is no issue for you.

S4 COMMONFX; \SystemRoot\system32\drivers\COMMONFX.SYS [X]
S3 COMMONFX.SYS; \SystemRoot\System32\drivers\COMMONFX.SYS [X]
S4 CT20XUT; \SystemRoot\system32\drivers\CT20XUT.SYS [X]
S3 CT20XUT.SYS; \SystemRoot\System32\drivers\CT20XUT.SYS [X]
S4 ctac32k; \SystemRoot\system32\drivers\ctac32k.sys [X]
S4 ctaud2k; \SystemRoot\system32\drivers\ctaud2k.sys [X]
S4 CTAUDFX; \SystemRoot\system32\drivers\CTAUDFX.SYS [X]
S3 CTAUDFX.SYS; \SystemRoot\System32\drivers\CTAUDFX.SYS [X]
S4 CTEAPSFX; \SystemRoot\system32\drivers\CTEAPSFX.SYS [X]
S3 CTEAPSFX.SYS; \SystemRoot\System32\drivers\CTEAPSFX.SYS [X]
S4 CTEDSPFX; \SystemRoot\system32\drivers\CTEDSPFX.SYS [X]
S3 CTEDSPFX.SYS; \SystemRoot\System32\drivers\CTEDSPFX.SYS [X]
S4 CTEDSPIO; \SystemRoot\system32\drivers\CTEDSPIO.SYS [X]
S3 CTEDSPIO.SYS; \SystemRoot\System32\drivers\CTEDSPIO.SYS [X]
S4 CTEDSPSY; \SystemRoot\system32\drivers\CTEDSPSY.SYS [X]
S3 CTEDSPSY.SYS; \SystemRoot\System32\drivers\CTEDSPSY.SYS [X]
S4 CTERFXFX; \SystemRoot\system32\drivers\CTERFXFX.SYS [X]
S3 CTERFXFX.SYS; \SystemRoot\System32\drivers\CTERFXFX.SYS [X]
S4 CTEXFIFX; \SystemRoot\system32\drivers\CTEXFIFX.SYS [X]
S3 CTEXFIFX.SYS; \SystemRoot\System32\drivers\CTEXFIFX.SYS [X]
S4 CTHWIUT; \SystemRoot\system32\drivers\CTHWIUT.SYS [X]
S3 CTHWIUT.SYS; \SystemRoot\System32\drivers\CTHWIUT.SYS [X]
S4 ctprxy2k; \SystemRoot\system32\drivers\ctprxy2k.sys [X]
S4 CTSBLFX; \SystemRoot\system32\drivers\CTSBLFX.SYS [X]
S3 CTSBLFX.SYS; \SystemRoot\System32\drivers\CTSBLFX.SYS [X]
S4 ctsfm2k; \SystemRoot\system32\drivers\ctsfm2k.sys [X]
S4 emupia; \SystemRoot\system32\drivers\emupia2k.sys [X]
S4 ha10kx2k; \SystemRoot\system32\drivers\ha10kx2k.sys [X]
S4 ossrv; \SystemRoot\system32\drivers\ctoss2k.sys [X]

 

It looks like you probably need to reinstall the Dropbox desktop application if you're still using it.

Error: (07/22/2021 03:35:37 PM) (Source: DbxSvc) (EventID: 281) (User: )
Description: CertFindCertificateInStore failed with: (-2146885628) Cannot find object or property.

 

Windows Defender antivirus does not like this program. I would highly recommend you remove it if you still have it on the system

Severity: High
Category: Potentially Unwanted Software
Path: file:_H:\DldsnFiles\System\driver scanners free\driverhivetrialsetup.exe

It also does not like this one

Name: Trojan:Win32/Ludacxo
Severity: Severe
Category: Trojan
Path: file:_H:\games\Cheatengine\witcher 3\The Witcher 2 Assassins of Kings Steam Trainer +8 MrAntiFun\The Witcher 2 Assassins of Kings Steam Trainer +8 MrAntiFun.EXE

Name: VirTool:Win32/Obfuscator.XZ
Severity: Severe
Category: Tool
Path: file:_G:\games\Cheatengine\prototype\PROTOTYPE.2.PLUS15TRN.LINGON\Prototype2+15TR-LNG.exe

 

 

 

Please go ahead and run the following fix

 

Please download the attached fixlist.txt file and save it to the Desktop or location where you ran FRST from.
NOTE. It's important that both files, FRST or FRST64, and fixlist.txt are in the same location or the fix will not work.

Please make sure you disable any real time antivirus or security software before running this script. Once completed make sure you re-enable it.

NOTICE: This script was written specifically for this user, for use on this particular machine. Running this on another machine may cause damage to your operating system that cannot be undone.

Run FRST or FRST64 and press the Fix button just once and wait.
If the tool needs a restart please make sure you let the system restart normally and let the tool complete its run after restart.
The tool will make a log on the Desktop (Fixlog.txt) or wherever you ran FRST from. Please attach or post it to your next reply.

Note: If the tool warned you about an outdated version please download and run the updated version.

NOTE-1:  This fix will run a scan to check that all Microsoft operating system files are valid and not corrupt and attempt to correct any invalid files. It will also run a disk check on the restart to ensure disk integrity. Depending on the speed of your computer this fix may take 30 minutes or more.

NOTE-2: As part of this fix all temporary files will be removed. If you have any open web pages that have not been bookmarked please make sure you bookmark them now as all open applications will be automatically closed. Also, make sure you know the passwords for all websites as cookies will also be removed. The use of an external password manager is highly recommended instead of using your browser to store passwords.

The following directories are emptied:

  • Windows Temp
  • Users Temp folders
  • Edge, IE, FF, Chrome and Opera caches, HTML5 storages, Cookies and History
  • Recently opened files cache
  • Flash Player cache
  • Java cache
  • Steam HTML cache
  • Explorer thumbnail and icon cache
  • BITS transfer queue (qmgr*.dat files)
  • Recycle Bin

Important: items are permanently deleted. They are not moved to quarantine. If you have any questions or concerns please ask before running this fix.

The system will be rebooted after the fix has run.

fixlist.txt

Thanks

 

Link to post
Share on other sites

Okay, first - thanks for the referrals to the anti-bloatware tools; there were two there I hadn't come across before so I will look at them also.

Second, the machine we're talking about is my new DAW where I have already copied over backups of legacy studio apps for potential reinstall (some dating back to as early as 2001).  Most won't get reinstalled but the backup files/folders have been copied to it just in case.  I have a lot of leg work to do to get this all functioning again.  There are a lot of legacy programs that involve sound, sound cards, midi, audio I/O, etc.  so I will have to sort through all that you've highlighted.

Third, the gaming 'cheats' frequently generate false positives.  Clearly, I have made a mistake in copying those files to a place that seems associated with the DAW -- and it shouldn't be -- as the DAW will not be a gaming machine -- I have another device (a laptop) for gaming to whatever extent I might do any gaming at all.  So I can remove those references to increase security.

Superantispyware is a product I've had a license to for many years and have used on occasion.  Are you recommending that this product no longer offers sufficient security to continue it's use?  I have to admit that it is installed more from habit than any particular conviction as to its worth.  It is also true that I don't quite understand how you derived your information but I'm curious to hear your recommendations for alternatives (if any).  Also, is there a danger to continue using it (e.g. I'm I lulled into a false sense of security that is not justified by the product?)

As for the rest of your detailed information, I will need to reread it when I've had more than four hours sleep - so forgive me if it is a few days before I return with more information.  

I deeply appreciate your time, effort and the trouble you've taken to assist me.

Link to post
Share on other sites

  • Root Admin

It's not that SuperAntispyware is dangerous. Just that it looks like it's being used for Content blocking and today there are much better tools.

Please see the following for ideas on helping to protect the computer and privacy better.

No rush, we'll be here when you're ready

Cheers and have a great weekend

 

Link to post
Share on other sites

I greatly appreciate the information you have referenced and will be looking at it more closely (I did spend about two hours reading through it, today) as it is complex and I want to make sure I understand before I pursue individual solutions.  I'll be back with this thread either late in the weekend or on Monday.  Have to do other things now . . . have a great weekend!

Link to post
Share on other sites

I have, I think, finally figured this out having first gone through the process of approaching it as malware on my pc then, when that didn't fit the symptoms and the periodic (apparent) reappearance -- moving on to what I then thought was a problem with either Malwarebytes or Opera since the recurrence happened only when Opera was open then onto what I now believe is the problem: a particular web page I had 'pinned' in Opera (since I was working on the same problem across multiple computers) seems to be the culprit.  Specifically, the page contained within the website 'thewindowsclub.com' https://www.thewindowsclub.com/windows-10-bloatware- windows10debloater triggers the Malwarebytes bytes Restoro pop-up consistently.   It is my belief that there is an embedded link within their (Windows Club) page that is there either by mistake or perhaps is a false positive.

In any case, once I de-pinned the page from Opera, it ceases to appear unless/until I browse directly to the page again (even after clearing the cache).

If no one else has anything to add, I will drop back here in a day or three and mark this issue closed.

Link to post
Share on other sites

Hello.  Thanks for the information & remarks.  Just so you know, when trying to go to that link, I get a 404 exception  ( page not found ).

By the way, on my own systems, I do not have startup pages set to a specific "site" ( except for browsers that simply have a basic search engine).

Link to post
Share on other sites

  • Solution

https://www.thewindowsclub.com/windows-10-bloatware-windows10debloater

 

You're right, for whatever reason, that link goes all 404.  Perhaps it is because it got split between two lines in my reply.  AAR, I tested the one above (after I pasted it in this message) and it goes to the correct page and, at least for me, generates the MB pop-up.   If it doesn't work for you, try going to the windows club site and search on the word 'bloatware'.  For me it was the first link that was listed.

To clarify, I only have one start-up page: to Duckduckgo.  I sometimes 'pin' a website to the browser when I am doing something that causes me to return to the site frequent but temporary basis.  To me, in my tiny little world, there is a difference between a startup page and a pinned page.  I've no idea why I think this but I do.  

Link to post
Share on other sites

Points well taken on your last paragraph.

"IF"  you are wanting to report a False positive message ( from Malwarebytes for Windows) about that page or any good website page, then make a new post on this link for the sub-section of forum on website False positives

https://forums.malwarebytes.com/forum/123-website-blocking/

Make a new post and provide them all appropriate detail.  The internal staff that handles web protection for Malwarebytes monitors that section.

Link to post
Share on other sites

On 7/30/2021 at 3:18 PM, Maurice Naggar said:

Points well taken on your last paragraph.

"IF"  you are wanting to report a False positive message ( from Malwarebytes for Windows) about that page or any good website page, then make a new post on this link for the sub-section of forum on website False positives

https://forums.malwarebytes.com/forum/123-website-blocking/

Make a new post and provide them all appropriate detail.  The internal staff that handles web protection for Malwarebytes monitors that section.

That's a very good suggestion.  I'll see to it during the first part of week. It seems that both sites are reputable (Malwarebyte of course and also TheWindowsClub which I've been getting help from on and off for years; they should both be informed).

Otherwise, I consider this thread closed as far as my original problem goes.  I thank everyone for their help, comments and encouragement.  Be well.

Link to post
Share on other sites

You can proceed with cleanup of tools we used.

To remove the FRST tool & its work files, do this. Go to your Downloads folder. Do a RIGHT-click on FRSTENGLISH.exe & select RENAME & then change it to UNINSTALL.exe.
Then run that ( double click on it) to begin the cleanup process.


Any other download file we had you download, you may delete. I wish you all the best. Stay safe.

Sincerely.
 

Link to post
Share on other sites

Guest
This topic is now closed to further replies.
 Share

  • Recently Browsing   0 members

    No registered users viewing this page.

Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.