RTP detection Compromised from SVCHOST.exe

[cyberthegod]

Hi I installed malwarebytes on my RDP VPS from contabo and i keep getting hundreds of alerts for compromised blocked websites even when my browsers are closed. they all are coming from svchost.exe not from an actual browser could someone help me out

[Porthos]

Are these all INCOMING??

Also, you should wait on the conclusion on your other topic before moving on with this one.

[cyberthegod]

Just now, Porthos said:

Are these all INCOMING??

Also, you should wait on the conclusion on your other topic before moving on with this one.

Yes they're all incoming, and I was told to open another topic since I'm having issues on two different computers

[AdvancedSetup]

Please just wait for @Maurice Naggar to finish with your other computer and then he'll assist you with this other one too.

It makes it very difficult to work on two different computers at the same time.

Thank you @cyberthegod

 

[Porthos]

3 minutes ago, cyberthegod said:

Yes they're all incoming

Those blocks are just Malwarebytes doing its job blocking port scans and brute force attacks on your computer.

As was mentioned one computer at a time.

[cyberthegod]

Okay thank you guys i'll wait for him to finish the other topic i'm just gonna upload the file report like he asked me too though.

He can check it this one out when he's done don't mind this message

mbst-grab-results.zip

[Porthos]

Quote

Windows Server 2022 Datacenter

I am sorry to inform you that Malwarebytes Premium (stand alone) is not designed or supported for use on any server OS and is also against the EULA as well.

  Quote

(b) Paid License.

If you purchased a license to the Software from Malwarebytes or from a Malwarebytes authorized reseller, then conditioned upon your compliance with the terms and conditions of this Agreement, Malwarebytes grants you a non-exclusive and non-transferable license to Execute the number of copies of the Software for which you have paid solely in executable form on the corresponding number of Devices owned or used by you. Furthermore, you may not Execute the Software on any Device(s) running a server operating system unless it is a Malwarebytes server product as reflected in its official product name and official release notes. You agree that your purchases are not contingent on the delivery of any future functionality or features (including future availability of any Software beyond the current license term or any new releases), or dependent on any oral or written public comments made by Malwarebytes regarding future functionality or features.

https://www.malwarebytes.com/eula/

The proper version is this. https://www.malwarebytes.com/business/ep-server-security/

[AdvancedSetup]

Due to the lack of feedback, this topic is closed to prevent others from posting here.

If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this topic with your request.

This applies only to the originator of this topic. Other members who need assistance please start your own topic in a new thread.

Tips to help protect from infection

Thanks