Suspicious bloatware ?!

[ahmedzarhan]

Hello everyone

I noticed  a couple of days ago my pc keyboard and mouse were frozen for couple of minutes  then pc restarted by it self,  after some security check I found those 2 entries in my firewall ( pic attached ) now  Iam using  the windows 11 home N version that usually dose not come with apps, I re-install windows from usb and these 2 entries keep showing up every time i reinstall windows,  no I dont use any of these apps  but now once i connect to the internet i get the same  thing (freeze  then those 2 would show in my firewall)

[AdvancedSetup]

Hello  and       @ahmedzarhan

 

My screen name is AdvancedSetup and I will assist you with your system issues.
 

Let's keep these principles as we proceed. Make sure to read the entire post below first.

• Please follow all steps in the provided order and post back all requested logs
• Please attach all log files to your post, unless otherwise requested
• Temporarily disable your antivirus or other security software first. Make sure to turn it back on once the scans have been completed.
• Temporarily disable Microsoft SmartScreen to download the software below if needed. Make sure to turn it back on once the scans are completed.
• Searching, detecting, and removing malware isn't instantaneous and there is no guarantee to repair every system.
• Before we start, please make sure that you have an external backup, not connected to this system, of all private data.
• Do not run online games while the case is ongoing. Do not do any free-wheeling or risky web-surfing.
• Only run the tools I guide you to use. Please don't run any other scans, download, install or uninstall any programs while I'm working with you.
• Cracked, Hacked, or Pirated programs are not only illegal but also can make a computer a malware victim. Having such programs installed is the easiest way to get infected. It is the leading cause of ransomware encryption. It is at times also a big source of current Trojan infections. If there are any on the system you should uninstall them before we proceed.
• Please be patient and stick with me until I give you the "all clear". We don't want to waste your time, please don't waste ours.
• If your system is running Discord, please be sure to Exit it while this case is ongoing.

 

To begin, please do the following so that we may take a closer look at your installation for troubleshooting. This is a report only.

NOTE: The tools and the information obtained are safe and not harmful to your privacy or your computer, please allow the programs to run if blocked by your system.

• Download the Malwarebytes Support Tool
• In your Downloads folder, open the mb-support-x.x.x.xxx.exe file
• In the User Account Control pop-up window, click Yes to continue the installation
• Run the MBST Support Tool
• In the left navigation pane of the Malwarebytes Support Tool, click Advanced
• In the Advanced Options, click Gather Logs. A status diagram displays the tool is Getting logs from your machine
• A zip file named mbst-grab-results.zip will be saved to the Public desktop, please upload that file on your next reply

Thank you

 

 

[ahmedzarhan]

mbst-grab-results.zip

[AdvancedSetup]

Well, that didn't work out too well. Missing logs I was hoping to get. Please try the following

 

Please download Farbar Recovery Scan Tool and save it to your desktop.

Note: You need to run the version compatible with your system.
You can check here if you're not sure if your computer is 32-bit or 64-bit

• Double-click to run it. When the tool opens click Yes to disclaimer.
• Press the Scan button.
• It will make a log (FRST.txt) in the same directory the tool is run. Please attach it to your reply.
• The first time the tool is run, it also makes another log (Addition.txt). Please attach it to your reply as well.

Thank you

 

 

[ahmedzarhan]

Sure but to clear things up do i have to turn off av every time We do a scan or use one of the tools you provide ?

[AdvancedSetup]

Most AV won't stop the Farbar scanner from running. You only need to disable real-time protection if it blocks Farbar

There are many means and methods to fix the computer as long as it's still running and accessible

 

[ahmedzarhan]

FRST.txt Addition.txt

[AdvancedSetup]

Are you using the following software?

AVG Secure VPN
 

You're using Controlled Folder Access from Windows Defender and it is blocking AVG

You have a recently new computer it looks like. Did you set it up? It is missing a LOT if not all of the drivers that make the computer run well.

Normally you can install the Asus Crate utility and then go in and have it install and update all the drivers for you almost automatically

BIOS: American Megatrends Inc. 1601 05/07/2022
Motherboard: ASUSTeK COMPUTER INC. PRIME Z590-P

 

You can do a Factory Reset on the Firewall if you like.

 

Click on the Start button and type in or copy and paste the following

Firewall & network protection

Click to open the app.

On the bottom left should be a link to Restore firewalls to default

 

Restart the computer and let me know if still having any issues.

I'd also get the hardware drivers installed so that they system can work better

 

[ahmedzarhan]

no its a full reset for my pc

Iam using ssd so i tried the secure erase feature and installed new win 11 from usb

i didnt do any thing to the system I just reinstalled multiple time to check of this strange firewall entries and yes i tried resetting it and it keeps getting back !!!

 

[AdvancedSetup]

If that is all you're concerned with, please see the following

https://www.minitool.com/news/alljoyn-router.html

 

[ahmedzarhan]

not the Alljoyn one srry the strange GUID above it

Iam just using the n version of windows as i dont want  apps consuming my SSD as its my only storage now and its just 250 GB  (170 with windows installed)

[AdvancedSetup]

Please see the following

https://msft.today/how-did-78e1cd88-49e3-476e-b926-580e596ad309-get-through-my-firewall/

 

[AdvancedSetup]

You can click on Start and type in PowerShell and run that with Admin rights. Then copy and paste the following and it should provide a log of installed Applications and their full details.

Get-AppxPackage | sort-object -Property Name -Unique | Out-File "$([environment]::GetFolderPath('Desktop'))\AppxPackageList.txt"

 

That should help you to decide better what things are and if you want to remove them or not. Some cannot easily be removed or are only pinned and not actually installed which requires a different removal method.

 

[ahmedzarhan]

i dont know why both of these apps again running on win N version needs any sort of RC but if you have method of removing them plz let me know

[ahmedzarhan]

OK i made a terrible mistake

I was copying all time the logs from another windows where iam contacting u from not the one  with the strange firewall entries plz accept my apology here is the logs  i just made (while av is off )

mbst-grab-results.zip FRST.txt Addition.txt AppxPackageList.txt

[AdvancedSetup]

I'm sorry but I don't know what it is you're wanting or expecting. We do malware detection and removal on this section of the forums.

Those entries are not malware. If you want to tweak Windows then please make a post in the General PC section and see if someone wants to assist you in tweaking Windows.

Thank you

 

 

[ahmedzarhan]

no really iam not aware oof they are the come every time after installing new windows even mine dosent support apps  ,better safe than sorry

[AdvancedSetup]

Since this issue is resolved the topic will now be closed to prevent others from posting here.

If you need assistance please start your own new topic and someone will be happy to assist you.

Thanks