ahmedzarhan Posted December 19, 2022 ID:1546163 Share Posted December 19, 2022 Hello everyone I noticed a couple of days ago my pc keyboard and mouse were frozen for couple of minutes then pc restarted by it self, after some security check I found those 2 entries in my firewall ( pic attached ) now Iam using the windows 11 home N version that usually dose not come with apps, I re-install windows from usb and these 2 entries keep showing up every time i reinstall windows, no I dont use any of these apps but now once i connect to the internet i get the same thing (freeze then those 2 would show in my firewall) Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted December 20, 2022 Root Admin ID:1546298 Share Posted December 20, 2022 Hello and @ahmedzarhan My screen name is AdvancedSetup and I will assist you with your system issues. Let's keep these principles as we proceed. Make sure to read the entire post below first. Please follow all steps in the provided order and post back all requested logs Please attach all log files to your post, unless otherwise requested Temporarily disable your antivirus or other security software first. Make sure to turn it back on once the scans have been completed. Temporarily disable Microsoft SmartScreen to download the software below if needed. Make sure to turn it back on once the scans are completed. Searching, detecting, and removing malware isn't instantaneous and there is no guarantee to repair every system. Before we start, please make sure that you have an external backup, not connected to this system, of all private data. Do not run online games while the case is ongoing. Do not do any free-wheeling or risky web-surfing. Only run the tools I guide you to use. Please don't run any other scans, download, install or uninstall any programs while I'm working with you. Cracked, Hacked, or Pirated programs are not only illegal but also can make a computer a malware victim. Having such programs installed is the easiest way to get infected. It is the leading cause of ransomware encryption. It is at times also a big source of current Trojan infections. If there are any on the system you should uninstall them before we proceed. Please be patient and stick with me until I give you the "all clear". We don't want to waste your time, please don't waste ours. If your system is running Discord, please be sure to Exit it while this case is ongoing. To begin, please do the following so that we may take a closer look at your installation for troubleshooting. This is a report only. NOTE: The tools and the information obtained are safe and not harmful to your privacy or your computer, please allow the programs to run if blocked by your system. Download the Malwarebytes Support Tool In your Downloads folder, open the mb-support-x.x.x.xxx.exe file In the User Account Control pop-up window, click Yes to continue the installation Run the MBST Support Tool In the left navigation pane of the Malwarebytes Support Tool, click Advanced In the Advanced Options, click Gather Logs. A status diagram displays the tool is Getting logs from your machine A zip file named mbst-grab-results.zip will be saved to the Public desktop, please upload that file on your next reply Thank you Link to post Share on other sites More sharing options...
ahmedzarhan Posted December 21, 2022 Author ID:1546371 Share Posted December 21, 2022 mbst-grab-results.zip Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted December 21, 2022 Root Admin ID:1546378 Share Posted December 21, 2022 Well, that didn't work out too well. Missing logs I was hoping to get. Please try the following Please download Farbar Recovery Scan Tool and save it to your desktop. Note: You need to run the version compatible with your system. You can check here if you're not sure if your computer is 32-bit or 64-bit Double-click to run it. When the tool opens click Yes to disclaimer. Press the Scan button. It will make a log (FRST.txt) in the same directory the tool is run. Please attach it to your reply. The first time the tool is run, it also makes another log (Addition.txt). Please attach it to your reply as well. Thank you Link to post Share on other sites More sharing options...
ahmedzarhan Posted December 21, 2022 Author ID:1546393 Share Posted December 21, 2022 Sure but to clear things up do i have to turn off av every time We do a scan or use one of the tools you provide ? Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted December 21, 2022 Root Admin ID:1546397 Share Posted December 21, 2022 Most AV won't stop the Farbar scanner from running. You only need to disable real-time protection if it blocks Farbar There are many means and methods to fix the computer as long as it's still running and accessible Link to post Share on other sites More sharing options...
ahmedzarhan Posted December 21, 2022 Author ID:1546411 Share Posted December 21, 2022 FRST.txt Addition.txt Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted December 21, 2022 Root Admin ID:1546417 Share Posted December 21, 2022 Are you using the following software? AVG Secure VPN You're using Controlled Folder Access from Windows Defender and it is blocking AVG You have a recently new computer it looks like. Did you set it up? It is missing a LOT if not all of the drivers that make the computer run well. Normally you can install the Asus Crate utility and then go in and have it install and update all the drivers for you almost automatically BIOS: American Megatrends Inc. 1601 05/07/2022 Motherboard: ASUSTeK COMPUTER INC. PRIME Z590-P You can do a Factory Reset on the Firewall if you like. Click on the Start button and type in or copy and paste the following Firewall & network protection Click to open the app. On the bottom left should be a link to Restore firewalls to default Restart the computer and let me know if still having any issues. I'd also get the hardware drivers installed so that they system can work better Link to post Share on other sites More sharing options...
ahmedzarhan Posted December 21, 2022 Author ID:1546418 Share Posted December 21, 2022 no its a full reset for my pc Iam using ssd so i tried the secure erase feature and installed new win 11 from usb i didnt do any thing to the system I just reinstalled multiple time to check of this strange firewall entries and yes i tried resetting it and it keeps getting back !!! Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted December 21, 2022 Root Admin ID:1546422 Share Posted December 21, 2022 If that is all you're concerned with, please see the following https://www.minitool.com/news/alljoyn-router.html Link to post Share on other sites More sharing options...
ahmedzarhan Posted December 21, 2022 Author ID:1546423 Share Posted December 21, 2022 not the Alljoyn one srry the strange GUID above it Iam just using the n version of windows as i dont want apps consuming my SSD as its my only storage now and its just 250 GB (170 with windows installed) Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted December 21, 2022 Root Admin ID:1546441 Share Posted December 21, 2022 Please see the following https://msft.today/how-did-78e1cd88-49e3-476e-b926-580e596ad309-get-through-my-firewall/ Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted December 21, 2022 Root Admin ID:1546448 Share Posted December 21, 2022 You can click on Start and type in PowerShell and run that with Admin rights. Then copy and paste the following and it should provide a log of installed Applications and their full details. Get-AppxPackage | sort-object -Property Name -Unique | Out-File "$([environment]::GetFolderPath('Desktop'))\AppxPackageList.txt" That should help you to decide better what things are and if you want to remove them or not. Some cannot easily be removed or are only pinned and not actually installed which requires a different removal method. Link to post Share on other sites More sharing options...
ahmedzarhan Posted December 21, 2022 Author ID:1546471 Share Posted December 21, 2022 i dont know why both of these apps again running on win N version needs any sort of RC but if you have method of removing them plz let me know Link to post Share on other sites More sharing options...
ahmedzarhan Posted December 21, 2022 Author ID:1546474 Share Posted December 21, 2022 OK i made a terrible mistake I was copying all time the logs from another windows where iam contacting u from not the one with the strange firewall entries plz accept my apology here is the logs i just made (while av is off ) mbst-grab-results.zip FRST.txt Addition.txt AppxPackageList.txt Link to post Share on other sites More sharing options...
Root Admin Solution AdvancedSetup Posted December 22, 2022 Root Admin Solution ID:1546491 Share Posted December 22, 2022 I'm sorry but I don't know what it is you're wanting or expecting. We do malware detection and removal on this section of the forums. Those entries are not malware. If you want to tweak Windows then please make a post in the General PC section and see if someone wants to assist you in tweaking Windows. Thank you Link to post Share on other sites More sharing options...
ahmedzarhan Posted December 22, 2022 Author ID:1546536 Share Posted December 22, 2022 no really iam not aware oof they are the come every time after installing new windows even mine dosent support apps ,better safe than sorry Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted December 23, 2022 Root Admin ID:1546640 Share Posted December 23, 2022 Since this issue is resolved the topic will now be closed to prevent others from posting here. If you need assistance please start your own new topic and someone will be happy to assist you. Thanks Link to post Share on other sites More sharing options...
Recommended Posts