ianburns5 Posted May 12 ID:1567104 Share Posted May 12 First of all i am going to say i am a novice , so bear with me I am unsure if my Microsoft account is hacked through my laptop....i might be adding 2 + 2 and getting 6, however i have my suspicions so is better to ask/ I recently installed TCPview because i wanted to check what connections were being made on my laptop.... the reason i did download it was i saw some strange things in skype and then again when i viewed my Microsoft account history, after changing my password a few times. I got locked out of my account and could no longer see my account history/ I contact Microsoft support who advised it was a bug and would reset it's self in a couple of days..... I investigated more to find out it may because I accessed my account more that twice in 1 24hr period.... this made me more suspicious,, as i know i had only looked at my account history only once..... and all my account activity showed coming from my Ip address.... Today I did notice something strange in TCPview.... when logging out of Microsoft account in google and shutting down google... i saw these connections coming out of port 53,,, this was strange and stood out. screenshot 1 from TCP view. I investigated in Google on this port 53 and saw indications could be vunerable to attack.....making me more nervous I looked to it is linked to my isp 194.168.4.100 as i see in my network wifi settings what i noted was these connections only appeared when i was logged in my microsoft account and logged out and shut down Google now it get a lil more concerning for me... i typed into Google "Microsoft account login" took me to this page (this is not my usual route was by accident i clicked onto sign in once clicked in it took me to the microsoft account login, only to find it already did have a log in but was not my own! as soon as i saw the login name it was familar as a friend of mine, on the other side of the world.... not a close friend but someone i have seen on Video chat room , skype and facebook i noted also that the link had the following in the address bar I also this this account is a school or work connection as it said "Taking you to your Organisation home page!" . I am not part or have i joined any such Group or Organisation i then decided to check Google on my phone which was connected to my Wifi... when i checked .. I also see Jamon@microsoft.com I am really unsure if someone can be hacking me.. and how are they doing it if they are... i really can't explain why I am now linked to this account both on my laptop and again on my phone I have also noted recently my system Advanced Options had been accessed , i cannot remember doing this . also that the allow remote access was enabled, again this is something i am positive i did not do. This is a brand new laptop and I only have access to it can anyone help... as i said maybe i am putting 2 and 2 together and coming up with the wrong answers, but as a novice is a bit concerning Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted May 12 Root Admin ID:1567105 Share Posted May 12 Hello @ianburns5 My screen name is AdvancedSetup and I will assist you with your system issues. We do not do forensic work such as tracking down networks but we will help you to scan and clean your computer as needed. Let's keep these principles as we proceed. Make sure to read the entire post below first. Please follow all steps in the provided order and post back all requested logs Please attach all log files to your post, unless otherwise requested Temporarily disable your antivirus or other security software first. Make sure to turn it back on once the scans have been completed. Temporarily disable Microsoft SmartScreen to download the software below if needed. Make sure to turn it back on once the scans are completed. Searching, detecting, and removing malware isn't instantaneous and there is no guarantee to repair every system. Before we start, please make sure that you have an external backup, not connected to this system, of all private data. Do not run online games while the case is ongoing. Do not do any free-wheeling or risky web-surfing. Only run the tools I guide you to use. Please don't run any other scans, download, install or uninstall any programs while I'm working with you. Cracked, Hacked, or Pirated programs are not only illegal but also can make a computer a malware victim. Having such programs installed is the easiest way to get infected. It is the leading cause of ransomware encryption. It is at times also a big source of current Trojan infections. If there are any on the system you should uninstall them before we proceed. Please be patient and stick with me until I give you the "all clear". We don't want to waste your time, please don't waste ours. If your system is running Discord, please be sure to Exit it while this case is ongoing. To begin, please do the following so that we may take a closer look at your installation for troubleshooting. This is a report only. NOTE: The tools and the information obtained are safe and not harmful to your privacy or your computer, please allow the programs to run if blocked by your system. Download the Malwarebytes Support Tool In your Downloads folder, open the mb-support-x.x.x.xxx.exe file In the User Account Control pop-up window, click Yes to continue the installation Run the MBST Support Tool In the left navigation pane of the Malwarebytes Support Tool, click Advanced In the Advanced Options, click Gather Logs. A status diagram displays the tool is Getting logs from your machine A zip file named mbst-grab-results.zip will be saved to the Public desktop, please upload that file on your next reply Thank you Link to post Share on other sites More sharing options...
ianburns5 Posted May 13 Author ID:1567173 Share Posted May 13 Hi Advanced please see attched as requested mbst-grab-results.zip Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted May 13 Root Admin ID:1567191 Share Posted May 13 Your current DNS Servers: 194.168.4.100 - 194.168.8.100 Please consider changing your default DNS server settings. Please choose one provider only DNS is what lets users connect to websites using domain names instead of IP addresses Pick just one of these 4 providers. And be aware that you need to modify 1 time for IPv4 & a 2nd pass for IPv6 Google Public DNS: IPv4 8.8.8.8 and 8.8.4.4 IPv6 2001:4860:4860::8888 and 2001:4860:4860::8844 Cloudflare: IPv4 1.1.1.1 and 1.0.0.1 IPv6 2606:4700:4700::1111 and 2606:4700:4700::1001 OpenDNS: IPv4 208.67.222.222 and 208.67.220.220 IPv6 2620:119:35::35 and 2620:119:53::53 DNSWATCH: IPv4 84.200.69.80 and 84.200.70.40 IPv6 2001:1608:10:25::1c04:b12f and 2001:1608:10:25::9249:d69b The Ultimate Guide to Changing Your DNS Serverhttps://www.howtogeek.com/167533/the-ultimate-guide-to-changing-your-dns-server/ Here is a YouTube video on Changing DNS settings if needed Please run the following fix NOTE: Please read all of the information below before running this fix. NOTICE: This script was written specifically for this user, for use on this particular machine. Running this on another machine may cause damage to your operating system that cannot be undone. Once the fix has been completed, please attach the file FIXLOG.TXT to your next reply Farbar program: FRSTEnglish.exe Save the attached file: FIXLIST.TXT to this folder C:\Users\ianbu\Downloads\ NOTE. It's important that both files, FRSTEnglish.exe, and fixlist.txt are in the same location or the fix will not work. Please make sure you disable any real-time antivirus or security software before running this script. Once completed, make sure you re-enable it. Run the Farbar program with Admin rights and press the Fix button just once and wait. The fix may possibly take up to 60 minutes to complete If the tool needs a restart please make sure you let the system restart normally and let the tool complete its run after restart. The tool will make a log named Fixlog.txt in the same folder you ran the Farbar program from. Please attach that log on your next reply. NOTE: This fix will run a scan to check that all Microsoft operating system files are valid and not corrupt and attempt to correct any invalid files. It will also run a disk check on the restart to ensure disk integrity. NOTE: As part of this fix all temporary files will be removed. If you have any open web pages that have not been bookmarked please make sure you bookmark them now as all open applications may be automatically closed. Also, make sure you know the passwords for all websites as cookies will also be removed in most, but not all cases. NOTE: As part of this fix, it will also reset the network to default settings including the firewall. If you have custom firewall rules you need to save please export or save them first before running this fix. The following directories are emptied: Windows Temp Users Temp folders Edge, IE, FF, Chrome, and Opera caches, HTML5 storages, Cookies and History Recently opened files cache Discord cache Java cache Steam HTML cache Explorer thumbnail and icon cache BITS transfer queue (qmgr*.dat files) Recycle Bin Important: items are permanently deleted. They are not moved to quarantine. If you have any questions or concerns please ask before running this fix. The system will be rebooted after the fix has run. fixlist.txt Thanks Link to post Share on other sites More sharing options...
ianburns5 Posted May 13 Author ID:1567198 Share Posted May 13 Hi Advanced please see attached file Fixlog.txt Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted May 13 Root Admin ID:1567241 Share Posted May 13 Great, that log looks good. It found and fixed some issues. Please run the following ESET Online Scanner and perform a Full Scan Click the following link to save the installer for ESET Online Scanner https://download.eset.com/com/eset/tools/online_scanner/latest/esetonlinescanner.exe It will start a download of "esetonlinescanner.exe" Save the file to your system, such as the Downloads folder, or else to the Desktop. Go to the saved file, and double click it to get started. When presented with the initial ESET screen, click on "Get Started". Read and accept the Terms of use On the "Before we start..." screen chose if you want to send anonymous data and if you want to provide feedback or not, then click Continue When prompted for scan type, Click on the Full Scan button Enable ( select ) the radio selection "Enable ESET to detect and quarantine potentially unwanted applications" and click the Start scan button. Have patience. The entire process may take a few hours or more. When the scan is completed, if something was found, it will show a screen with the number of detected items. If so, click the button marked “View detected results”. Click The blue “Save scan log” to save the log and give it a name and location you remember. If something was removed and you know it is a false postive, you may click on the blue ”Restore cleaned files” ( in blue, at the bottom). Press Continue when all done. You should click to turn off the offer for “periodic scanning”. Enable "Delete application data on closing" - You do not need to submit feedback unless you want to. Simply ignore and close the program. Note: If you do need to do a File Restore from ESET please follow the directions below [KB2915] Restore files quarantined by the ESET Online Scanner version 3 https://support.eset.com/en/kb2915-restore-files-quarantined-by-the-eset-online-scanner Please attach the ESET scan log you saved at the end to your next reply Link to post Share on other sites More sharing options...
ianburns5 Posted May 13 Author ID:1567269 Share Posted May 13 Hi Advanced said no threats found , i also had many of these pop ups, during the scan, not sure of the significance eset scan log.txt Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted May 13 Root Admin ID:1567271 Share Posted May 13 Yes, unfortunately ESET antivirus was unable to install it's driver. You can ignore that error. Go into Control Panel, Programs and uninstall the ESET scanner Let's try another AV scanner. Please download and run the following Kaspersky Virus Removal Tool 2020 and save it to your Desktop. (Kaspersky Virus Removal Tool version 20.0.10.0 was released on November 9, 2021) Download: Kaspersky Virus Removal Tool How to run a scan with Kaspersky Virus Removal Tool 2020https://support.kaspersky.com/15674 How to run Kaspersky Virus Removal Tool 2020 in the advanced modehttps://support.kaspersky.com/15680 How to restore a file removed during Kaspersky Virus Removal Tool 2020 scanhttps://support.kaspersky.com/15681 Select the Windows Key and R Key together, the "Run" box should open. Drag and Drop KVRT.exe into the Run Box. C:\Users\{your user name}\DESKTOP\KVRT.exe will now show in the run box. add -dontencrypt Note the space between KVRT.exe and -dontencryptC:\Users\{your user name}\DESKTOP\KVRT.exe -dontencrypt should now show in the Run box. That addendum to the run command is very important, when the scan does eventually complete the resultant report is normally encrypted, with the extra command it is saved as a readable file. Reports are saved here C:\KVRT2020_Data\Reports and look similar to this report_20210123_113021.klr Right-click direct onto that report, select > open with > Notepad. Save that file and attach it to your reply. To start the scan select OK in the "Run" box. A EULA window will open, tick all confirmation boxes then select "Accept" In the new window select "Change Parameters" In the new window ensure all selection boxes are ticked, then select "OK" The scan should now start... When complete if entries are found there will be options, if "Cure" is offered leave as is. For any other options change to "Delete" then select "Continue" When complete, or if nothing was found select "Close" Attach the report information as previously instructed... Thank you Link to post Share on other sites More sharing options...
ianburns5 Posted May 14 Author ID:1567311 Share Posted May 14 Hi Advanced Can I ask 2 questions first 1/ I went to uninstall ESET , but it already is not showing as a programme , but i see it still on my Desktop as a short cut...in the set up .. does it uninstall after it ran? 2/ When you applied the fixes... does that make my Laptop name show Unkown to my router ? Yesterday I could see my laptop name , but now i see unknown Unknown , would like to clarify this, as i would like too see what devices are connected to my router and what to ensure this unknow is actully this laptop i will download and follow the steps as you have laid out above Link to post Share on other sites More sharing options...
ianburns5 Posted May 14 Author ID:1567321 Share Posted May 14 Hi Advanced i hope you can help on this. relates to Question 2 above. when I view my Wifi properties when it's not connected to the Internet... The Physical Address (Mac) shows XX-6C-EB-2A-B4-XX, Note have replaced the first 2 and last 2 characters with XX when I then enable my Wifi it changes to this XX-0E-A8-95-EA-XX. please help if you can, I am unsure why it is doing this , should in not always be the same? also when connect it say connect to the internet and / unknown network? Sorry if i am ask to many questions, but really want to understand this and ensure i have no one else accessing this laptop or my net work. I have attached the file from kaspersky . nothing was found report_2023.05.14_07.48.03.txt Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted May 14 Root Admin ID:1567369 Share Posted May 14 Good day @ianburns5 It could be from us doing a full reset of your network stack and it needs to populate again. Try shutting down the computer and power off. Then unplug the power from your router for a couple minutes. Then plug the power to the router back in and wait about two minutes and plug the PC back in and power it on. If you own your own router and are not renting it from your Internet Service Provider Please ensure that you have the user manual for your router. Then perform a factory reset. How To Reset Your Routerhttps://setuprouter.com/networking/how-to-reset-your-router/ Depending on one's preferences and the Router's capabilities please consider the following. Disable acceptance of ICMP Pings Change the Default Router password using a Strong Password Use a Strong WiFi password on WPA2 using AES encryption or Enable WPA3 if it is an option. Disable Remote Management Create separate WiFi networks for groups of devices with similar purposes to prevent an entire network of devices from being compromised if a malicious actor is able to gain unauthorized access to one device or network.Example: Keep IoT devices on one network and mobile devices on another. Change the network name (SSID). Do not use your; Name, Postal address or other personal information. Make it unique or whimsical and known to your family/group. Is the Router Firmware up-to-date ? Updating the firmware mitigates exploitable vulnerabilities. Specifically set Firewall rules to BLOCK; TCP and UDP ports 135 ~ 139, 445, 1234, 3389, 5555 and 9034 Document passwords created and store them in a safe but accessible location. Please run the Farbar scanner again with admin rights and click on the SCAN button. Get me new logs FRST.TXT ADDITION.TXT Thank you Link to post Share on other sites More sharing options...
ianburns5 Posted May 15 Author ID:1567390 Share Posted May 15 Hi @AdvancedSetup i found what the problem was on Physical address change... I didn't know there are 2 places Change Random Hardware address could be changed. why do they make it so complicated!! attched as requested Addition.txt FRST.txt Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted May 15 Root Admin ID:1567399 Share Posted May 15 (edited) Please make the following change in Malwarebytes if you're using the Premium or Trial version Please open Malwarebytes. Click on the small gear icon to open the Settings and go to the Security tab. Then turn off "Always register Malwarebytes in the Windows Security Center" Restart the computer It is highly unlikely that you need to setup exclusions for Windows Defender, however if you experience any issues, please see the following article. Malwarebytes for Windows antivirus exclusions listhttps://support.malwarebytes.com/hc/en-us/articles/360038522974-Malwarebytes-for-Windows-antivirus-exclusions-list We are not aware of any currently known issues between Windows Defender and Malwarebytes Premium Edited May 15 by AdvancedSetup Updated information Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted May 15 Root Admin ID:1567400 Share Posted May 15 The logs indicate that you did not make the change to your DNS settings. I would highly recommend that you watch the video and read the article on how to make the changes and complete that. @ianburns5 Your current DNS Servers: 194.168.4.100 - 194.168.8.100 Please consider changing your default DNS server settings. Please choose one provider only DNS is what lets users connect to websites using domain names instead of IP addresses Pick just one of these 4 providers. And be aware that you need to modify 1 time for IPv4 & a 2nd pass for IPv6 Google Public DNS: IPv4 8.8.8.8 and 8.8.4.4 IPv6 2001:4860:4860::8888 and 2001:4860:4860::8844 Cloudflare: IPv4 1.1.1.1 and 1.0.0.1 IPv6 2606:4700:4700::1111 and 2606:4700:4700::1001 OpenDNS: IPv4 208.67.222.222 and 208.67.220.220 IPv6 2620:119:35::35 and 2620:119:53::53 DNSWATCH: IPv4 84.200.69.80 and 84.200.70.40 IPv6 2001:1608:10:25::1c04:b12f and 2001:1608:10:25::9249:d69b The Ultimate Guide to Changing Your DNS Serverhttps://www.howtogeek.com/167533/the-ultimate-guide-to-changing-your-dns-server/ Here is a YouTube video on Changing DNS settings if needed Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted May 15 Root Admin ID:1567403 Share Posted May 15 (edited) Please address the two posts above @ianburns5 Then when those have been completed, please run the following fix. You should already have the Farbar program on the computer. You can use either one. C:\Users\ianbu\Downloads\FRSTEnglish.exe or C:\Users\ianbu\Downloads\FRST64.exe NOTE: Please read all of the information below before running this fix. NOTICE: This script was written specifically for this user, for use on this particular machine. Running this on another machine may cause damage to your operating system that cannot be undone. Once the fix has been completed, please attach the file FIXLOG.TXT to your next reply Farbar program: FRSTEnglish.exe Save the attached file: FIXLIST.TXT to this folder C:\Users\ianbu\Downloads\ NOTE. It's important that both files, FRSTEnglish.exe, and fixlist.txt are in the same location or the fix will not work. Please make sure you disable any real-time antivirus or security software before running this script. Once completed, make sure you re-enable it. Run the Farbar program with Admin rights and press the Fix button just once and wait. The fix may possibly take up to 60 minutes to complete If the tool needs a restart please make sure you let the system restart normally and let the tool complete its run after restart. The tool will make a log named Fixlog.txt in the same folder you ran the Farbar program from. Please attach that log on your next reply. NOTE: This fix will run a scan to check that all Microsoft operating system files are valid and not corrupt and attempt to correct any invalid files. It will also run a disk check on the restart to ensure disk integrity. NOTE: As part of this fix all temporary files will be removed. If you have any open web pages that have not been bookmarked please make sure you bookmark them now as all open applications may be automatically closed. Also, make sure you know the passwords for all websites as cookies will also be removed in most, but not all cases. NOTE: As part of this fix, it will also reset the network to default settings including the firewall. If you have custom firewall rules you need to save please export or save them first before running this fix. The following directories are emptied: Windows Temp Users Temp folders Edge, IE, FF, Chrome, and Opera caches, HTML5 storages, Cookies and History Recently opened files cache Discord cache Java cache Steam HTML cache Explorer thumbnail and icon cache BITS transfer queue (qmgr*.dat files) Recycle Bin Important: items are permanently deleted. They are not moved to quarantine. If you have any questions or concerns please ask before running this fix. The system will be rebooted after the fix has run. fixlist.txt Thanks Edited May 15 by AdvancedSetup Updated information Link to post Share on other sites More sharing options...
ianburns5 Posted May 15 Author ID:1567524 Share Posted May 15 @AdvancedSetup HI I did as requested on Malwarebytes and change default DNS server as suggested ran fix on farbar and attached Fixlog Fixlog.txt Link to post Share on other sites More sharing options...
ianburns5 Posted May 15 Author ID:1567530 Share Posted May 15 @AdvancedSetup Can I clarify something with regards to Windows Defender... When i click on it.. it wants me to subscribe to 365.. which i do not want.. Is it still protecting me? or is Malwarebytes/ both Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted May 15 Root Admin ID:1567541 Share Posted May 15 The fix log looks good @ianburns5 We're not done yet, we have more to go. This is a HOME computer correct? Not a Business computer. Please run the following Please download the following tool Farbar Service Scanner and run it on the computer with the issuehttp://www.bleepingcomputer.com/download/farbar-service-scanner/dl/62/ Make sure the following options are checked: Internet Services Windows Firewall System Restore Security Center/Action Center Windows Update Windows Defender Click "Scan" It will create a log (FSS.txt) in the same directory the tool is run. Please attach the log to your next reply. Let me get a new MBST Log as well If you still have the program no need to download again, just run it. To begin, please do the following so that we may take a closer look at your installation for troubleshooting: NOTE: The tools and the information obtained are safe and not harmful to your privacy or your computer, please allow the programs to run if blocked by your system. Download the Malwarebytes Support Tool In your Downloads folder, open the mb-support-x.x.x.xxx.exe file In the User Account Control pop-up window, click Yes to continue the installation Run the MBST Support Tool In the left navigation pane of the Malwarebytes Support Tool, click Advanced In the Advanced Options, click Gather Logs. A status diagram displays the tool is Getting logs from your machine A zip file named mbst-grab-results.zip will be saved to the Public desktop, please upload that file on your next reply Thank you Link to post Share on other sites More sharing options...
ianburns5 Posted May 16 Author ID:1567594 Share Posted May 16 Hi @AdvancedSetup Yes is home only as requested see attached logs FSS.txt mbst-grab-results.zip Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted May 16 Root Admin ID:1567599 Share Posted May 16 So it looks like Firefox was redirected to this site yesterday, but Malwarebytes blocked it. redirection-to-the-offer.info I would recommend adding the uBlock Origin content blocker to help prevent redirects https://ublockorigin.com/ Let me have you run another FIX as before to remove and clean up some other items missed. NOTE: Please read all of the information below before running this fix. NOTICE: This script was written specifically for this user, for use on this particular machine. Running this on another machine may cause damage to your operating system that cannot be undone. Once the fix has been completed, please attach the file FIXLOG.TXT to your next reply Farbar program: FRSTEnglish.exe Save the attached file: FIXLIST.TXT to this folder C:\Users\ianbu\Downloads\ NOTE. It's important that both files, FRSTEnglish.exe, and fixlist.txt are in the same location or the fix will not work. Please make sure you disable any real-time antivirus or security software before running this script. Once completed, make sure you re-enable it. Run the Farbar program with Admin rights and press the Fix button just once and wait. The fix may possibly take up to 60 minutes to complete If the tool needs a restart please make sure you let the system restart normally and let the tool complete its run after restart. The tool will make a log named Fixlog.txt in the same folder you ran the Farbar program from. Please attach that log on your next reply. NOTE: This fix will run a scan to check that all Microsoft operating system files are valid and not corrupt and attempt to correct any invalid files. It will also run a disk check on the restart to ensure disk integrity. NOTE: As part of this fix all temporary files will be removed. If you have any open web pages that have not been bookmarked please make sure you bookmark them now as all open applications may be automatically closed. Also, make sure you know the passwords for all websites as cookies will also be removed in most, but not all cases. NOTE: As part of this fix, it will also reset the network to default settings including the firewall. If you have custom firewall rules you need to save please export or save them first before running this fix. The following directories are emptied: Windows Temp Users Temp folders Edge, IE, FF, Chrome, and Opera caches, HTML5 storages, Cookies and History Recently opened files cache Discord cache Java cache Steam HTML cache Explorer thumbnail and icon cache BITS transfer queue (qmgr*.dat files) Recycle Bin Important: items are permanently deleted. They are not moved to quarantine. If you have any questions or concerns please ask before running this fix. The system will be rebooted after the fix has run. fixlist.txt Thanks Link to post Share on other sites More sharing options...
ianburns5 Posted May 16 Author ID:1567601 Share Posted May 16 @AdvancedSetup will do on the Ublockorigin attached log Fixlog.txt Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted May 16 Root Admin ID:1567603 Share Posted May 16 Thank you for the log. It removed the items it was supposed to remove. Please run the following now SecurityCheck by glax24 I would like you to run a tool named SecurityCheck to inquire about the current security update status of some applications. Download SecurityCheck by glax24: https://tools.safezone.cc/glax24/SecurityCheck/SecurityCheck.exe If Microsoft SmartScreen blocks the download, click through to save the file This tool is safe. Smartscreen is overly sensitive. If SmartScreen blocks the file from running click on More info and Run anyway Right-click with your mouse on the Securitycheck.exe and select "Run as administrator" and reply YES to allow to run & go forward Wait for the scan to finish. It will open a text file named SecurityCheck.txt Close the file. Attach it with your next reply. You can find this file in a folder called SecurityCheck, C:\SecurityCheck\SecurityCheck.txt Thank you Link to post Share on other sites More sharing options...
ianburns5 Posted May 16 Author ID:1567605 Share Posted May 16 @AdvancedSetup see attached as requested SecurityCheck.txt Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted May 16 Root Admin ID:1567606 Share Posted May 16 Please open Microsoft Edge and click the three dots, Help and Feedback -> About Microsoft Edge and let it update Then check for Windows Updates and install any found. How is the computer running now? Are there still any signs of an infection? Link to post Share on other sites More sharing options...
ianburns5 Posted May 16 Author ID:1567607 Share Posted May 16 I have updated Edge seems to be running ok and nothing strange is happening did you find anything i should be concerened about? Link to post Share on other sites More sharing options...
Recommended Posts