Malwarebytes program takes forever to load and System tray Icon gone.

[pedrommm]

Malwarebytes installed on a Windows 10 Pro machine, that I use predominately as a print server. I generally Just RDP into the machine when i want to use it. 

The problem is that when the Malwarebytes Icon in the system tray disappears,  and when I try an open Malwarebytes program it takes a very long time open (like 10 minutes or more) sometimes it just does not open at all !

I would note however during this .. task manager lists Malwarebytes Tray Application as a running app 

and Malwarebytes running as a  background processes 

 

 

Once open the program tends to be slow and unresponsive for some time, before eventually going back to normal.  Once it has opened the icon in the system Tray comes back  ?

I have uninstalled and reinstalled the program several times over the past few months and it always behaves perfectly after a reinstall for a couple of days . But ultimately the same problem comes back after a few days. 

I have tried reboots to no avail..   

I am concerned mainly because when the program is up and running, I get a continuous stream of Brute force attacks stopped by Malwarebytes (various IP address from Russia ) they are continuous every few seconds.  So i keep thinking someone is getting in and doing something to the Malwarebytes program... 

I have downloaded the Malwarebytes support tool and tried to repair .. which seems to do nothing .. I have also clean installed from that tool and that also failed to have any significant effect. 

Can anybody Help ???

I have attached the Malwarebytes support tool FRST log's etc... Any insight would be greatly appreciated. 

 

 

mbst-grab-results.zipmbst-grab-results.zip

mbst-grab-results.zip

[AdvancedSetup]

Hello @pedrommm

Please go to Control Panel, Programs, Programs and Features and uninstall the following programs

 

CCleaner (computer experts no longer recommend the use of this program)

Is this a work computer that you've taken home? The reason I ask is that it's having multiple issues due to not being able to contact a Domain Controller. Normal home computers don't connect to a Domain Controller.

 

 

Error: (11/12/2021 11:02:22 AM) (Source: NETLOGON) (EventID: 5719) (User: )
Description: This computer was not able to set up a secure session with a domain
controller in domain MM due to the following:
We can't sign you in with this credential because your domain isn't available. Make sure your device is connected to your organization's network and try again. If you previously signed in on this device with another credential, you can sign in with that credential.

This may lead to authentication problems. Make sure that this
computer is connected to the network. If the problem persists,
please contact your domain administrator.

 

ADDITIONAL INFO

If this computer is a domain controller for the specified domain, it
sets up the secure session to the primary domain controller emulator in the specified
domain. Otherwise, this computer sets up the secure session to any domain controller
in the specified domain.

Error: (11/12/2021 10:31:30 AM) (Source: Microsoft-Windows-GroupPolicy) (EventID: 1054) (User: MM)
Description: The processing of Group Policy failed. Windows could not obtain the name of a domain controller. This could be caused by a name resolution failure. Verify your Domain Name System (DNS) is configured and working correctly.

 

 

 

Windows Defender is also having issues.

 

Windows Defender:
================
Date: 2021-11-05 07:41:50
Description:
Microsoft Defender Antivirus scan has been stopped before completion.
Scan Type: Antimalware
Scan Parameters: Quick Scan

Date: 2021-10-08 12:23:41
Description:
Microsoft Defender Antivirus has encountered an error trying to load security intelligence and will attempt reverting back to a known-good version.
Security intelligence Attempted: Backup
Error Code: 0x80004004
Error description: Operation aborted
Security intelligence version: 1.349.1466.0;1.349.1466.0
Engine version: 1.1.18500.10

Date: 2021-07-20 10:46:38
Description:
Microsoft Defender Antivirus has encountered an error trying to update security intelligence.
New security intelligence Version:
Previous security intelligence Version: 1.343.647.0
Update Source: Microsoft Malware Protection Center
Security intelligence Type: AntiVirus
Update Type: Full
Current Engine Version:
Previous Engine Version: 1.1.18300.4
Error code: 0x80090305
Error description: The requested security package does not exist

 

 

 

Please run the following fix, but exit out of any real-time security software. Malwarebytes can be exited by the Tray icon right-click

 

 

Please download the attached fixlist.txt file and save it to the Desktop or location where you ran FRST from.
NOTE. It's important that both files, FRST or FRST64, and fixlist.txt are in the same location or the fix will not work.

Please make sure you disable any real-time antivirus or security software before running this script. Once completed, make sure you re-enable it.

NOTICE: This script was written specifically for this user, for use on this particular machine. Running this on another machine may cause damage to your operating system that cannot be undone.

Run FRST or FRST64 and press the Fix button just once and wait.
If the tool needs a restart please make sure you let the system restart normally and let the tool complete its run after restart.
The tool will make a log on the Desktop (Fixlog.txt) or wherever you ran FRST from. Please attach or post it to your next reply.

Note: If the tool warned you about an outdated version please download and run the updated version.

NOTE-1:  This fix will run a scan to check that all Microsoft operating system files are valid and not corrupt and attempt to correct any invalid files. It will also run a disk check on the restart to ensure disk integrity. Depending on the speed of your computer this fix may take 30 minutes or more.

NOTE-2: As part of this fix all temporary files will be removed. If you have any open web pages that have not been bookmarked please make sure you bookmark them now as all open applications will be automatically closed. Also, make sure you know the passwords for all websites as cookies will also be removed. The use of an external password manager is highly recommended instead of using your browser to store passwords.

NOTE-3: As part of this fix it will also reset the network to default settings including the firewall. If you have custom firewall rules you need to save please export or save them first before running this fix.

The following directories are emptied:

• Windows Temp
• Users Temp folders
• Edge, IE, FF, Chrome, and Opera caches, HTML5 storages, Cookies and History
• Recently opened files cache
• Flash Player cache
• Java cache
• Steam HTML cache
• Explorer thumbnail and icon cache
• BITS transfer queue (qmgr*.dat files)
• Recycle Bin

Important: items are permanently deleted. They are not moved to quarantine. If you have any questions or concerns please ask before running this fix.

The system will be rebooted after the fix has run.

fixlist.txt

Thanks

 

[pedrommm]

Hello,  Thanks for the reply...

Yes this machine does connect to a domain controller.. 

It was my home computer which now just serves as  print server..

I am not particularly computer savvy so bear with my dumb questions..

I do on occasion get an error logging due to domain issues but not often.. When I do a reboot normally sorts that out

now, The FRST64 program you refer to.. i don't seem to have that installed, (i ran the MB Support tool to get the logs to attach)

Should i download that program ? and continue with the fix as recommended. 

Also if this fix breaks something, can it be reversed ?

 

[AdvancedSetup]

Sorry, yes you have the Farbar program. It is located here:   C:\Users\pacha\Downloads\FRSTEnglish.exe 

Please save the FIXLIST.TXT file to that folder   C:\Users\pacha\Downloads\

Then run C:\Users\pacha\Downloads\FRSTEnglish.exe and click on the FiX button

It does have a restore if we do need to run it except for any temporary files it removes, but temp files are not needed.

Thanks @pedrommm

 

 

[pedrommm]

Fixlog.txtOk i have followed the instructions and attached the Fixlog file as requested 

At this stage the Malwarebytes program still seems to not open ?

 

[AdvancedSetup]

Thanks @pedrommm

We're not done yet.

The system reported the following which is  good.

Windows Resource Protection found corrupt files and successfully repaired them.

 

However, it also reported the following

Fixing is terminated due to reaching maximum fixing time of 60 minutes. <==== ATTENTION

Please go ahead and run the following NEW, updated FIXLIST.TXT file which should run faster this time so that it can complete.

 

 

 

Please download the attached fixlist.txt file and save it to the Desktop or location where you ran FRST from.
NOTE. It's important that both files, FRST or FRST64, and fixlist.txt are in the same location or the fix will not work.

Please make sure you disable any real-time antivirus or security software before running this script. Once completed, make sure you re-enable it.

NOTICE: This script was written specifically for this user, for use on this particular machine. Running this on another machine may cause damage to your operating system that cannot be undone.

Run FRST or FRST64 and press the Fix button just once and wait.
If the tool needs a restart please make sure you let the system restart normally and let the tool complete its run after restart.
The tool will make a log on the Desktop (Fixlog.txt) or wherever you ran FRST from. Please attach or post it to your next reply.

Note: If the tool warned you about an outdated version please download and run the updated version.

NOTE-1:  This fix will run a scan to check that all Microsoft operating system files are valid and not corrupt and attempt to correct any invalid files. It will also run a disk check on the restart to ensure disk integrity. Depending on the speed of your computer this fix may take 30 minutes or more.

NOTE-2: As part of this fix all temporary files will be removed. If you have any open web pages that have not been bookmarked please make sure you bookmark them now as all open applications will be automatically closed. Also, make sure you know the passwords for all websites as cookies will also be removed. The use of an external password manager is highly recommended instead of using your browser to store passwords.

NOTE-3: As part of this fix it will also reset the network to default settings including the firewall. If you have custom firewall rules you need to save please export or save them first before running this fix.

The following directories are emptied:

• Windows Temp
• Users Temp folders
• Edge, IE, FF, Chrome, and Opera caches, HTML5 storages, Cookies and History
• Recently opened files cache
• Flash Player cache
• Java cache
• Steam HTML cache
• Explorer thumbnail and icon cache
• BITS transfer queue (qmgr*.dat files)
• Recycle Bin

Important: items are permanently deleted. They are not moved to quarantine. If you have any questions or concerns please ask before running this fix.

The system will be rebooted after the fix has run.

fixlist.txt

 

 

After that FIX completes please restart the computer one more time. Then run the following for me.

 

Can you please do the following?

• Download the Malwarebytes Support Tool
• In your Downloads folder, open the mb-support-x.x.x.xxx.exe file
• In the User Account Control pop-up window, click Yes to continue the installation
• Run the MBST Support Tool
• In the left navigation pane of the Malwarebytes Support Tool, click Advanced
• In the Advanced Options, click the CLEAN button and follow the onscreen instructions to reinstall Malwarebytes
• NOTE: Please have patience as it can take a while to remove and reinstall. The computer will restart to complete

After the restart please do the following

• Run the MBST Support Tool
• In the left navigation pane of the Malwarebytes Support Tool, click Advanced
• In the Advanced Options, click Gather Logs. A status diagram displays the tool is Getting logs from your machine
• A zip file named mbst-grab-results.zip will be saved to your desktop, please upload that file on your next reply

Thank you

 

[pedrommm]

mbst-grab-results.zipFollowed all instructions and have attached the files as requested. 

At this stage Malwarebytes is running fine..  Though it always does following a reinstall.. 

I am getting continuous notifications of RDP Bruce force attacks though  Is this something to be concerned about ?

If not i probably need to turn off notifications as the popup notification  happens continuously ?

 

[AdvancedSetup]

Thank you for the logs @pedrommm

The RDP blocks are there for a reason. Let me have you run a scan from Microsoft and see what they find.

Ignore the "Filess Infected" on the scan screen and just wait for the final log. The screen indicator is often inaccurate due to the ongoing nature of the scan.

 

 

Microsoft Safety Scanner

Please make sure you Exit out of any other program you might have open so that the sole task is to run the following scan.   
That goes especially for web browsers, make sure all are fully exited out of and messenger programs are exited and closed as well
 

STEP 1

Please set File Explorer to SHOW ALL folders, all files, including hidden ones.  Use OPTION ONE or TWO of this article

https://www.tenforums.com/tutorials/7078-turn-off-show-all-folders-windows-10-navigation-pane.html

STEP 2

I suggest a new scan for viruses & other malware. This may take several hours, depending on the number of files on the system and the speed of the computer.

The Microsoft Safety Scanner is a free Microsoft stand-alone virus scanner that can be used to scan for & remove malware or potentially unwanted software from a system. 

The download links & the how-to-run-the tool are at this link at Microsoft 

https://docs.microsoft.com/en-us/windows/security/threat-protection/intelligence/safety-scanner-download

 

Look on the Scan Options & select the FULL scan.

Then start the scan. Have lots of patience. It may take several hours.

• Once you see it has started, take a long long break;  walk away.  Do not pay credence if you see some intermediate early flash messages on the screen display.  The only things that count are the End result at the end of the run.
• The scan will take several hours.  Leave it alone. It will remove any other remaining threats as it goes along.  Take a very long break, do your normal personal errands .....just do not use the computer during this scan.

This is likely to run for many hours as previously mentioned  ( depending on the number of files on your machine & the speed of the hardware.)

The log is named MSERT.log  and the log will be at C:\Windows\debug\msert.log

Please attach that log with your next reply.

Thank you

 

[pedrommm]

Scan run as requested, log Attached. 

Also given the large number of intrusions i was getting from the open RDP port.  I have been able to close that port to the outside world at my router level so RDP connections from within my domain are still possible which is all i needed anyway. 

RDP Brute force attacks have stopped. 

At this stage Malwarebytes seems to behaving correctly. 

msert.log

[AdvancedSetup]

That's a good way to stop them, but still curious what is/was behind the alert and block.

If you have time please run the following again. @pedrommm

 

 

 

Please run the following steps and post back the logs as an attachment when ready.
Temporarily disable your antivirus or other security software first. Make sure to turn it back on once the scans are completed.
Temporarily disable Microsoft SmartScreen to download software below if needed. Make sure to turn it back on once the scans are completed.
If you still have trouble downloading the software please click on Reveal Hidden Contents below for examples of how to allow the download.
 

Spoiler

 

 

 

 

Spoiler

When downloading with some browsers you may see a different style of screens that may block FRST from downloading. The program is safe and used hundreds of times a week by many users.

Example of Microsoft Edge blocking the download

 

STEP 01

• If you already have Malwarebytes installed then open Malwarebytes and click on the Scan button. It will automatically check for updates and run a Threat Scan.
• If you don't have Malwarebytes installed yet please download it from here and install it.
• Once installed then open Malwarebytes and select Scan and let it run.
• Once the scan is completed make sure you have it quarantine any detections it finds.
• If no detections were found click on the Save results drop-down, then the Export to TXT  button, and save the file as a Text file to your desktop or other location you can find and attach that log on your next reply.
• If there were detections then once the quarantine has completed click on the View report button, Then click the Export drop-down, then the Export to TXT  button, and save the file as a Text file to your desktop or other location you can find and attach that log on your next reply.
• If the computer restarted to quarantine you can access the logs from the Detection History, then the History tab. Highlight the most recent scan and double-click to open it. Then click the Export drop-down, then the Export to TXT  button, and save the file as a Text file to your desktop or other location you can find and attach that log on your next reply.
• If Malwarebytes won't run then please skip to the next step and let me know in your next reply that the scanner would not run.

STEP 02

Please download AdwCleaner by Malwarebytes and save the file to your Desktop.

• Double-click to run the program
• Accept the End User License Agreement.
• Wait until the database is updated.
• Click Scan Now.
• When finished, if items are found please click Quarantine.
• Your PC should reboot now if any items were found.
• After reboot, a log file will be opened. Attach or Copy its content into your next reply.

RESTART THE COMPUTER Before running Step 3

STEP 03
Please download the Farbar Recovery Scan Tool and save it to your desktop.

Note: You need to run the version compatible with your system. You can check here if you're not sure if your computer is 32-bit or 64-bit

• Double-click to run it. When the tool opens, click Yes to disclaimer.
• Press the Scan button.
• It will make a log (FRST.txt) in the same directory the tool is run. Please attach it to your reply.
• The first time the tool is run, it also makes another log (Addition.txt). If you've, run the tool before you need to place a check mark here each time
• Please attach the Additions.txt log to your reply as well.
• On your next reply, you should be attaching frst.txt and additions.txt to your post, every time.

 

Thanks

[pedrommm]

I think i have done all as requested and the Log files are attached 

Addition.txt FRST.txt AdwCleaner[C00].txt malwarebytes scan log.txt

[AdvancedSetup]

Thank you for the logs @pedrommm

Why did you restore to before running one of the FIX I had you run?

13-11-2021 09:16:24 restore prior ro FRST FIX

 

 

Please go to Control Panel, Programs, Programs and Features and uninstall the Following

CCleaner
 

 

 

Are you still using the following?

ScreenConnect Client (651e45d845fb48e3) (HKLM-x32\...\{890469FF-A48A-4B4D-92DB-E969BAFE3EFE}) (Version: 19.2.29494.7513 - ScreenConnect Software)
ScreenConnect Client (9c627210f2739768) (HKLM-x32\...\{3EA04E81-7EA1-4ADF-977F-381551F040F2}) (Version: 21.6.3172.7787 - ScreenConnect Software)

 

Let me have you run the following updated fix.

 

Please download the attached fixlist.txt file and save it to the Desktop or location where you ran FRST from.
NOTE. It's important that both files, FRST or FRST64, and fixlist.txt are in the same location or the fix will not work.

Please make sure you disable any real-time antivirus or security software before running this script. Once completed, make sure you re-enable it.

NOTICE: This script was written specifically for this user, for use on this particular machine. Running this on another machine may cause damage to your operating system that cannot be undone.

Run FRST or FRST64 and press the Fix button just once and wait.
If the tool needs a restart please make sure you let the system restart normally and let the tool complete its run after restart.
The tool will make a log on the Desktop (Fixlog.txt) or wherever you ran FRST from. Please attach or post it to your next reply.

Note: If the tool warned you about an outdated version please download and run the updated version.

NOTE-1:  This fix will run a scan to check that all Microsoft operating system files are valid and not corrupt and attempt to correct any invalid files. It will also run a disk check on the restart to ensure disk integrity. Depending on the speed of your computer this fix may take 30 minutes or more.

NOTE-2: As part of this fix all temporary files will be removed. If you have any open web pages that have not been bookmarked please make sure you bookmark them now as all open applications will be automatically closed. Also, make sure you know the passwords for all websites as cookies will also be removed. The use of an external password manager is highly recommended instead of using your browser to store passwords.

NOTE-3: As part of this fix it will also reset the network to default settings including the firewall. If you have custom firewall rules you need to save please export or save them first before running this fix.

The following directories are emptied:

• Windows Temp
• Users Temp folders
• Edge, IE, FF, Chrome, and Opera caches, HTML5 storages, Cookies and History
• Recently opened files cache
• Flash Player cache
• Java cache
• Steam HTML cache
• Explorer thumbnail and icon cache
• BITS transfer queue (qmgr*.dat files)
• Recycle Bin

Important: items are permanently deleted. They are not moved to quarantine. If you have any questions or concerns please ask before running this fix.

The system will be rebooted after the fix has run.

fixlist.txt

Thanks

 

[pedrommm]

Hello, 

I definitely did not do a restore manually,  but i would note that on the 13th .. the first fix log you sent and I ran , timed out  ?? would this have restored because of the time out ?

You subsequently sent me a new fix log that went through ok . 

CCleaner  has been uninstalled now . 

Yes i still need the Screen connect software. 

ScreenConnect Client (651e45d845fb48e3) (HKLM-x32\...\{890469FF-A48A-4B4D-92DB-E969BAFE3EFE}) (Version: 19.2.29494.7513 - ScreenConnect Software)
ScreenConnect Client (9c627210f2739768) (HKLM-x32\...\{3EA04E81-7EA1-4ADF-977F-381551F040F2}) (Version: 21.6.3172.7787 - ScreenConnect Software)

 

I have also had a network guy investigate the the issues this had with connecting to the domain which now seem to be sorted out. 

Apparently he removed the machine from the domain and then reset it to the domain again ( all gobly gook to me).  Also disabled IPv6 Internet protocol service which was causing intermittent issues with joining the domain correctly. 

We also had to  open a couple of ports in the firewall to get my print server to work correctly. 

Everything is running smooth as at the moment ?

 

Having said all this should i run this latest fixtlist.txt  you sent ?    I am concerned it will reset the firewall again and i would need to recalibrate the settings again ??

 

 

 

 

[AdvancedSetup]

Okay, based on your follow up post and you saying all is working well we won't do any network resets.

Please download and run this new updated FIXLIST.TXT file which will simply remove a few older, left over entries from previous security software.

 

fixlist.txt

When done please post back the new FIXLOG.TXT file.

Thanks @pedrommm

 

[pedrommm]

OK well, as it turned out i stuffed up I saved the last file and it named it fixlist(2)  as the last one was already their. so when i ran the fix it used the prior fixlist.  

Log attached 

Anyway after it ran, i was able to restore the firewall settings and checked a couple of other things and all seems ok.  No hopefully no harm no fowl. 

Having said that it seems that the fixlist process creates a restore point somewhere.??  So is the process reversible (just in case ) 

 

 

Fixlog.txt

[AdvancedSetup]

For settings yes, for removed temporary files, no.

The log overall looks good.

How is the computer running now?

Is Malwarebytes installed now and working well?

 

[pedrommm]

Yes at this stage all is running well and Malwarebytes is good.  was just wondering how to restore if any settings problems arose.  But it all looks good now. 

You have been absolutely great getting all this done for me..  reinforced my confidence in Malwarebytes as the right choice. 

Many Thanks 

 

[AdvancedSetup]

Excellent, glad to hear the system is working well again, and thank you for the kind words. @pedrommm

 

Let's go ahead and do some clean-up work and remove the tools and logs we've run.

Please download KpRm by kernel-panik and save it to your desktop.

• right-click kprm_(version).exe and select Run as Administrator.
• Read and accept the disclaimer.
• When the tool opens, ensure all boxes under Actions are checked.
• Under Delete Quarantines select Delete Now, then click Run.
• Once complete, click OK.
• A log will open in Notepad titled kprm-(date).txt.
• Please attach that file to your next reply. (not compulsory)

 

1. Recommend using a Password Manager for all websites, etc. that require a password. Never use the same password on more than one site.
   https://www.howtogeek.com/240255/password-managers-compared-lastpass-vs-keepass-vs-dashlane-vs-1password/
2. Keep all software up to date - PatchMyPC - https://patchmypc.com/home-updater#download
3. Keep your Operating System up to date and current at all times - https://support.microsoft.com/en-us/windows/windows-update-faq-8a903416-6f45-0718-f5c7-375e92dddeb2
4. Install a content blocker for your browser. Malwarebytes Browser Guard (Free)
   Firefox: https://addons.mozilla.org/en-GB/firefox/addon/malwarebytes/  
   Chrome: https://chrome.google.com/webstore/detail/malwarebytes-browser-guar/ihcjicgdanjaechkgeegckofjjedodee 
5. Further tips to help protect your computer data and improve your privacy: https://forums.malwarebytes.com/topic/258363-tips-to-help-protect-from-infection/ 

 

Further reading if you like to keep up on the malware threat scene: Malwarebytes Blog  https://blog.malwarebytes.com/

Hopefully, we've been able to assist you with correcting your system issues.

Thank you for using Malwarebytes

 

[pedrommm]

Program did not work ?

[AdvancedSetup]

Interesting. Okay, let me have you run the following and get me some new logs.

 

There was a new version released today of our MBST tool

 

To begin, please do the following so that we may take a closer look at your installation for troubleshooting:

NOTE: The tools and the information obtained are safe and not harmful to your privacy or your computer, please allow the programs to run if blocked by your system.

• Download the Malwarebytes Support Tool
• In your Downloads folder, open the mb-support-x.x.x.xxx.exe file
• In the User Account Control pop-up window, click Yes to continue the installation
• Run the MBST Support Tool
• In the left navigation pane of the Malwarebytes Support Tool, click Advanced
• In the Advanced Options, click Gather Logs. A status diagram displays the tool is Getting logs from your machine
• A zip file named mbst-grab-results.zip will be saved to your desktop, please upload that file on your next reply

Thank you

 

[pedrommm]

Log as requested

 

mbst-grab-results.zip

[AdvancedSetup]

Let me have you download the following updated FIXLIST.TXT file and run as before with Farbar and click the FIX button.

fixlist.txt

 

Next,

Take a look at the following. The Event Logs are showing an issue with VSS which may be related to a backup issue.

 

Please download and run the following  Volume Shadow Copy Service (VSS), Diagnostic Tool, from Acronis

Acronis VSS Doctor

Free tool for diagnosing and repairing Volume Shadow Copy Service issues. Download link on the bottom of the page.
Download - Acronis VSS Doctor

In many cases, it can correct the issues on its own. If not, then it will give details on what may be causing the issues. Please save the report in text format and post back that log on your next reply.

You can also try the tool from Macrium Reflect if the Acronis tool did not work.

Macrium Reflect Volume Shadow Copy Service (VSS) Repair Tool

• VSSfix 32bit - download
• VSSfix 64bit - download

Once you've run the repair tool you need to restart your computer.

 

Post back the FIXLOG.txt as well as any logs or information about VSS repairs.

 

 

[pedrommm]

Ran Farbar and here is the log

 

Fixlog.txt

[AdvancedSetup]

Thank you for the log. Looks good.

Please do the following.

Exit out of Malwarebytes and disable any other real-time protection and visit the following Microsoft link.

https://www.microsoft.com/en-us/software-download/windows10

Click on the Update Now button and follow any online instructions and let this update run

 

Let me know once that has completed.

Thank you @pedrommm

 

[pedrommm]

Updated windows as requested