MrTaco Posted October 5, 2022 ID:1536628 Share Posted October 5, 2022 Why i'm getting this popup, what is the cause? Link to post Share on other sites More sharing options...
David H. Lipman Posted October 5, 2022 ID:1536632 Share Posted October 5, 2022 https://www.abuseipdb.com/check/114.114.114.114 https://www.ipqualityscore.com/free-ip-lookup-proxy-vpn-test/lookup/114.114.114.114 There are malicious indicators so I have moved your post to the Malware removal section where a Forum Helper can help find the cause and remove it. Link to post Share on other sites More sharing options...
MrTaco Posted October 5, 2022 Author ID:1536633 Share Posted October 5, 2022 23 minutes ago, David H. Lipman said: There are malicious indicators so I have moved your post to the Malware removal section where a Forum Helper can help find the cause and remove it. Thanks, it's been all the day, and i keep getting the popups Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted October 6, 2022 Root Admin ID:1536663 Share Posted October 6, 2022 Hello and @MrTaco My screen name is AdvancedSetup and I will assist you with your system issues. Let's keep these principles as we proceed. Make sure to read the entire post below first. Please follow all steps in the provided order and post back all requested logs Please attach all log files to your post, unless otherwise requested Temporarily disable your antivirus or other security software first. Make sure to turn it back on once the scans have been completed. Temporarily disable Microsoft SmartScreen to download the software below if needed. Make sure to turn it back on once the scans are completed. Searching, detecting, and removing malware isn't instantaneous and there is no guarantee to repair every system. Before we start, please make sure that you have an external backup, not connected to this system, of all private data. Do not run online games while the case is ongoing. Do not do any free-wheeling or risky web-surfing. Only run the tools I guide you to use. Please don't run any other scans, download, install or uninstall any programs while I'm working with you. Cracked, Hacked, or Pirated programs are not only illegal but also can make a computer a malware victim. Having such programs installed is the easiest way to get infected. It is the leading cause of ransomware encryption. It is at times also a big source of current Trojan infections. If there are any on the system you should uninstall them before we proceed. Please be patient and stick with me until I give you the "all clear". We don't want to waste your time, please don't waste ours. If your system is running Discord, please be sure to Exit it while this case is ongoing. To begin, please do the following so that we may take a closer look at your installation for troubleshooting. This is a report only. NOTE: The tools and the information obtained are safe and not harmful to your privacy or your computer, please allow the programs to run if blocked by your system. Download the Malwarebytes Support Tool In your Downloads folder, open the mb-support-x.x.x.xxx.exe file In the User Account Control pop-up window, click Yes to continue the installation Run the MBST Support Tool In the left navigation pane of the Malwarebytes Support Tool, click Advanced In the Advanced Options, click Gather Logs. A status diagram displays the tool is Getting logs from your machine A zip file named mbst-grab-results.zip will be saved to your desktop, please upload that file on your next reply Thank you Link to post Share on other sites More sharing options...
MrTaco Posted October 6, 2022 Author ID:1536687 Share Posted October 6, 2022 Sorry if I reply late, but it was it was late and I went to sleep. Now I'm still at school, but for sending the log do i need to deactivate the web protection too? Link to post Share on other sites More sharing options...
MrTaco Posted October 6, 2022 Author ID:1536713 Share Posted October 6, 2022 13 hours ago, AdvancedSetup said: Hello and @MrTaco Here's the results mbst-grab-results.zip Link to post Share on other sites More sharing options...
MrTaco Posted October 6, 2022 Author ID:1536742 Share Posted October 6, 2022 oops, i had still win defender on during the scan. here's the log mbst-grab-results.zip Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted October 6, 2022 Root Admin ID:1536750 Share Posted October 6, 2022 Thank you for the logs @MrTaco These are Inbound IP blocks. Malwarebytes is doing it's job blocking them. Your computer does not show signs of an infection. Normally these type of inbound probes go away on their own within a few days. We can have you run another antivirus scanner to double-check your system, but the inbound is a remote probe. Microsoft Safety Scanner Please make sure you Exit out of any other program you might have open so that the sole task is to run the following scan. That goes especially for web browsers, make sure all are fully exited out of and messenger programs are exited and closed as well STEP 1 Please set File Explorer to SHOW ALL folders, all files, including hidden ones. Use OPTION ONE or TWO of this article https://www.tenforums.com/tutorials/7078-turn-off-show-all-folders-windows-10-navigation-pane.html STEP 2 I suggest a new scan for viruses & other malware. This may take several hours, depending on the number of files on the system and the speed of the computer. The Microsoft Safety Scanner is a free Microsoft stand-alone virus scanner that can be used to scan for & remove malware or potentially unwanted software from a system. The download links & the how-to-run-the tool are at this link at Microsoft https://docs.microsoft.com/en-us/windows/security/threat-protection/intelligence/safety-scanner-download Look on the Scan Options & select the FULL scan. Then start the scan. Have lots of patience. It may take several hours. Once you see it has started, take a long long break; walk away. Do not pay credence if you see some intermediate early flash messages on the screen display. The only things that count are the End result at the end of the run. The scan will take several hours. Leave it alone. It will remove any other remaining threats as it goes along. Take a very long break, do your normal personal errands .....just do not use the computer during this scan. This is likely to run for many hours as previously mentioned ( depending on the number of files on your machine & the speed of the hardware.) The log is named MSERT.log and the log will be at C:\Windows\debug\msert.log Please attach that log with your next reply. It is normal for the Microsoft Safety Scanner to show detections during the scan process. It is scanning for basically all bread crumbs or traces of files and registry entries that "might" be or have been part of some infection or previous infection. That DOES NOT mean the computer is infected. Once the scan has been completed it uploads the log to their Cloud service which then uses Artificial Intelligence to determine if in fact any of the traces are an infection or not. Then it writes into the log on your computer what it found. Link to post Share on other sites More sharing options...
MrTaco Posted October 7, 2022 Author ID:1536816 Share Posted October 7, 2022 Here's the log. Damn it took a lot msert.log Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted October 7, 2022 Root Admin ID:1536818 Share Posted October 7, 2022 Thank you for the log @MrTaco The scan actually found more than I thought it would. Let me have you run the following and we'll see if these scans find anything as well. Please run the following steps and post back the logs as an attachment when ready. Temporarily disable your antivirus or other security software first. Make sure to turn it back on once the scans are completed. Temporarily disable Microsoft SmartScreen to download software below if needed. Make sure to turn it back on once the scans are completed. If you still have trouble downloading the software please click on Reveal Hidden Contents below for examples of how to allow the download. Spoiler Spoiler When downloading with some browsers you may see a different style of screens that may block FRST from downloading. The program is safe and used hundreds of times a week by many users. Example of Microsoft Edge blocking the download STEP 01 If you already have Malwarebytes installed then open Malwarebytes and click on the Scan button. It will automatically check for updates and run a Threat Scan. If you don't have Malwarebytes installed yet please download it from here and install it. Once installed then open Malwarebytes and select Scan and let it run. Once the scan is completed make sure you have it quarantine any detections it finds. If no detections were found click on the Save results drop-down, then the Export to TXT button, and save the file as a Text file to your desktop or other location you can find and attach that log on your next reply. If there were detections then once the quarantine has completed click on the View report button, Then click the Export drop-down, then the Export to TXT button, and save the file as a Text file to your desktop or other location you can find and attach that log on your next reply. If the computer restarted to quarantine you can access the logs from the Detection History, then the History tab. Highlight the most recent scan and double-click to open it. Then click the Export drop-down, then the Export to TXT button, and save the file as a Text file to your desktop or other location you can find and attach that log on your next reply. If Malwarebytes won't run then please skip to the next step and let me know in your next reply that the scanner would not run. STEP 02 Please download AdwCleaner by Malwarebytes and save the file to your Desktop. Double-click to run the program Accept the End User License Agreement. Wait until the database is updated. Click Scan Now. When finished, if items are found please click Quarantine. Your PC should reboot now if any items were found. After reboot, a log file will be opened. Attach or Copy its content into your next reply. RESTART THE COMPUTER Before running Step 3 STEP 03 Please download the Farbar Recovery Scan Tool and save it to your desktop.Note: You need to run the version compatible with your system. You can check here if you're not sure if your computer is 32-bit or 64-bit Double-click to run it. When the tool opens, click Yes to disclaimer. Press the Scan button. It will make a log (FRST.txt) in the same directory the tool is run. Please attach it to your reply. The first time the tool is run, it also makes another log (Addition.txt). If you've, run the tool before you need to place a check mark here each time Please attach the Additions.txt log to your reply as well. On your next reply, you should be attaching frst.txt and additions.txt to your post, every time. Thanks Link to post Share on other sites More sharing options...
MrTaco Posted October 7, 2022 Author ID:1536866 Share Posted October 7, 2022 here's all the logs malwarebytes_scan.txt AdwCleaner[C00].txt AdwCleaner[S00].txt Addition.txt FRST.txt Link to post Share on other sites More sharing options...
Root Admin Solution AdvancedSetup Posted October 7, 2022 Root Admin Solution ID:1536933 Share Posted October 7, 2022 Thanks for the logs Overall nothing that should be too serious. Since all of these are inbound blocks, they should go away on their own within a few day. Link to post Share on other sites More sharing options...
David H. Lipman Posted October 7, 2022 ID:1536934 Share Posted October 7, 2022 2 minutes ago, AdvancedSetup said: Thanks for the logs Overall nothing that should be too serious. Since all of these are inbound blocks, they should go away on their own within a few day. Or block 114.114.114.114 [China] on Router or Firewall. Link to post Share on other sites More sharing options...
MrTaco Posted October 8, 2022 Author ID:1536980 Share Posted October 8, 2022 Ok guys, thanks for the help 1 Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted October 9, 2022 Root Admin ID:1537164 Share Posted October 9, 2022 Let's go ahead and do some clean-up work and remove the tools and logs we've run. Please download KpRm by kernel-panik and save it to your desktop. right-click kprm_(version).exe and select Run as Administrator. Read and accept the disclaimer. When the tool opens, ensure all boxes under Actions are checked. Under Delete Quarantines select Delete Now, then click Run. Once complete, click OK. A log will open in Notepad titled kprm-(date).txt. Please attach that file to your next reply. (not compulsory) Recommend using a Password Manager for all websites, etc. that require a password. Never use the same password on more than one site.https://www.howtogeek.com/240255/password-managers-compared-lastpass-vs-keepass-vs-dashlane-vs-1password/ Make sure you're backing up your files https://forums.malwarebytes.com/topic/136226-backup-software/ Keep all software up to date - PatchMyPC - https://patchmypc.com/home-updater#download Keep your Operating System up to date and current at all times - https://support.microsoft.com/en-us/windows/windows-update-faq-8a903416-6f45-0718-f5c7-375e92dddeb2 Further tips to help protect your computer data and improve your privacy: https://forums.malwarebytes.com/topic/258363-tips-to-help-protect-from-infection/ Please consider installing the following Content Blockers for your Web browsers if you haven't done so already. This will help improve overall security Malwarebytes Browser Guard Google Chrome: https://chrome.google.com/webstore/detail/malwarebytes-browser-guar/ihcjicgdanjaechkgeegckofjjedodee Microsoft Edge: https://support.malwarebytes.com/hc/en-us/articles/4413298736787-Install-Malwarebytes-Browser-Guard-on-Microsoft-Edge-browser Mozilla Firefox: https://addons.mozilla.org/en-US/firefox/addon/malwarebytes/ uBlock Origin Google Chrome: https://chrome.google.com/webstore/detail/ublock-origin/cjpalhdlnbpafiamejdnhcphjbkeiagm Microsoft Edge: https://microsoftedge.microsoft.com/addons/detail/ublock-origin/odfafepnkmbhccpbejgmiehpchacaeak Mozilla Firefox: https://addons.mozilla.org/en-US/firefox/addon/ublock-origin Further reading if you like to keep up on the malware threat scene: Malwarebytes Blog https://blog.malwarebytes.com/ Hopefully, we've been able to assist you with correcting your system issues. Thank you for using Malwarebytes Link to post Share on other sites More sharing options...
MrTaco Posted October 10, 2022 Author ID:1537210 Share Posted October 10, 2022 i run that tool, all done. Thanks a lot for 13 hours ago, AdvancedSetup said: Recommend using a Password Manager for all websites, etc. that require a password. Never use the same password on more than one site.https://www.howtogeek.com/240255/password-managers-compared-lastpass-vs-keepass-vs-dashlane-vs-1password/ Make sure you're backing up your files https://forums.malwarebytes.com/topic/136226-backup-software/ Keep all software up to date - PatchMyPC - https://patchmypc.com/home-updater#download Keep your Operating System up to date and current at all times - https://support.microsoft.com/en-us/windows/windows-update-faq-8a903416-6f45-0718-f5c7-375e92dddeb2 Further tips to help protect your computer data and improve your privacy: https://forums.malwarebytes.com/topic/258363-tips-to-help-protect-from-infection/ Please consider installing the following Content Blockers for your Web browsers if you haven't done so already. This will help improve overall security Thanks a lot for these tips too 1 Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted October 10, 2022 Root Admin ID:1537246 Share Posted October 10, 2022 You're quite welcome. Take care and stay safe out there. I'll go ahead and close your topic now Cheers Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted October 10, 2022 Root Admin ID:1537247 Share Posted October 10, 2022 Glad we could help. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this topic with your request. This applies only to the originator of this thread. Other members who need assistance please start your own topic in a new thread. Please review the following to help you better protect your computer and privacy Tips to help protect from infection Thank you Link to post Share on other sites More sharing options...
Recommended Posts