brandbuffet.in.th blocked website / trojan

[lakelays]

Hi all, sorry for such a late post.

I randomly got a notification from Malwarebytes about the blocked website brandbuffet.in.th. I worried for a bit, then thought nothing of it.

Just to make sure, I tried opening Windows Defender. It still appears in the start screen, but doesn't open. Furthermore, attempting to open it through Windows settings results in the "no application found to open" message. Even trying to use the tool mpcmdrun.exe doesn't work. However, Defender shows up in Task Manager.

Attached is a log of the block, pictures of my malwarebytes and videos to demonstrate my issue with defender.

Scanning manually reports no issues from Malwarebytes.

Im on a bit of a time crunch so if this could be resolved soon that would be amazing.

Thank you so much!

-Lake

report.txt

[lakelays]

1 minute ago, lakelays said:

Hi all, sorry for such a late post.

I randomly got a notification from Malwarebytes about the blocked website brandbuffet.in.th. I worried for a bit, then thought nothing of it.

Just to make sure, I tried opening Windows Defender. It still appears in the start screen, but doesn't open. Furthermore, attempting to open it through Windows settings results in the "no application found to open" message. Even trying to use the tool mpcmdrun.exe doesn't work. However, Defender shows up in Task Manager.

Attached is a log of the block, pictures of my malwarebytes and videos to demonstrate my issue with defender.

Scanning manually reports no issues from Malwarebytes.

Im on a bit of a time crunch so if this could be resolved soon that would be amazing.

Thank you so much!

-Lake

report.txt 730 B · 0 downloads

Almost forgot to mention, i've already uninstalled both Chrome and Opera GX, appdata and all.

Sorry for not adding this before!

[lakelays]

It seems as the Windows Defender issue was a native issue with Windows 11.

Im assuming this means that there was no actual issue, but I just want to 100% make sure about the website.

I used a PowerShell get-appxpackage command to fix the defender issue.

Thanks in advance and sorry for adding so many replies.

[lakelays]

Im pretty sure this issue is 100% solved. I'm going to get off for now. As far as I see, my PC is safe. I will make a new thread if anything else shows up. Thanks!

[AdvancedSetup]

Hello @lakelays

 

Please do the following so that we can get started and see what's going on.

The Farbar Recovery Scan Tool is a free Windows utility designed to create troubleshooting logs for your computer. These logs help our Support team to identify and resolve issues with your computer.

There are two versions of the Farbar Recovery Scan Tool available for download: 32-bit and 64-bit.
To find which operating system is installed on your computer, refer to Microsoft's article: 32-bit and 64-bit Windows: Frequently asked questions

Download and launch Farbar Recovery Scan Tool

1. Download the Farbar Recovery Scan Tool
   Do not click on any Ads.
    
2. Locate the file you downloaded on your computer.
   Downloaded files are often saved to the Downloads folder.
    
3. Double-click the downloaded file to run the Farbar Recovery Scan Tool.
   
   
    
4. A Windows protected your PC notification may appear. This notification is from the Windows Defender SmartScreen Filter which prevents unfamiliar apps from running on your PC.
   Disable smart screen ONLY if it interferes with software we may have to use:  What is SmartScreen and how can it help protect me?
   
        a.  Click More info.
   
   
        b.  Click Run anyway.
   
   
5. When the User Account Control window appears, click Yes.
   
   
   
    
6. To accept the Disclaimer of warranty, click Yes.
   
   
   
    
7. Ensure only the boxes listed below are checked
   
   

   Registry  Services  Drivers
   Processes  Internet  One month
   Addition.txt
   
   
   
    

8. Disable any Antivirus software you have installed ONLY if it stops software we may use from working.
   Please remember to re-enable any Antivirus software when we are finished running scans
   
   Click Scan. The scan may take a few minutes to complete.
   
   
    

9. When the scan completes, Farbar Recovery Scan Tool shows two messages:

• Scan completed. FRST.txt is saved in the same directory FRST is located.
  
  

• Addition.txt is saved in the same directory FRST is located.
  
  
   

• Click OK to close each message window

 

Please attach both of those logs on your next reply, DO NOT copy/paste the contents of the logs directly

 

 

Thanks

 

 

[lakelays]

I am pretty sure this issue has been solved as I made sure that Windows Defender was reinstalled and I am sure that this was an issue of two parts, as I got a popup from a website, and accidentally opened up that website a few more times and had a Windows Defender issue which I automatically ( and accidentally) connected the two. Are you sure I should continue with the scan?

[AdvancedSetup]

It's up to you. You're the one that came here and posted, not many people do that unless they're looking for help.

If you think you're all good, no problem, let me know and I'll go ahead and close your topic.

Thanks

 

[AdvancedSetup]

Since this issue is resolved the topic will now be closed to prevent others from posting here.

If you need assistance please start your own new topic and someone will be happy to assist you.

Thanks