New, abnormal detections after switching ISPs

[Nope]

Hey there! A little over a month ago I switched internet service providers and about a day or two later I started getting a lot of "compromised" detections popping up seemingly randomly. Some days I can get up to three, other days I get none, all from different IP addresses, connected to System32 files. They show up when I'm playing games, using a browser or just idle on my desktop with nothing other than background processes and I guess Steam and Discord open. On top of that it's also started flagging games I've played before as riskware and trojans despite them being fresh installs, which I'm assuming are false positives but I'm not sure why now, after 2-3 years of using Malwarebytes it's started doing it after I switched ISPs. I was worried at first but after some searching I determined it wasn't serious if it was being blocked, but frankly it's kind of annoying seeing it pop up so often (the system32 "website compromised" ones).

I've run multiple scans but always come up with zero issues, so I guess I'm just trying to figure out why it's happening as soon as I switched ISPs, what it's doing, whether or not I should be concerned and to see if I can fix it if something's broken. The ISP provided a new modem and router and I'm wondering if there's a privacy setting in the router that's causing issues, but I really have no idea. Thanks!

[Porthos]

While you are waiting for the next qualified/approved malware removal expert helper to weigh in on your topic, and even though you may have run the following Malwarebytes utility, or its subsets, please carefully follow these instructions:

1. Download the Malwarebytes Support Tool.
2. In your Downloads folder, open the mb-support-x.x.x.xxx.exe file.
3. In the User Account Control (UAC) pop-up window, click Yes to continue the installation.
4. Run the MBST Support Tool.
5. In the left navigation pane of the Malwarebytes Support Tool, click Advanced.
6. In the Advanced Options, click only Gather Logs. A status diagram displays the tool is Getting logs from your computer.
7. A zip file named mbst-grab-results.zip will be saved to the Public desktop, please attach that file in your next reply to this topic. Please do NOT copy and paste.

For the short time between when you post the diagnostic logs, and when your helper weighs in, please take no further self-directed remedial actions that will invalidate the diagnostic logs you will have sent.

Thank you.

[Nope]

Nevermind, feel free to close the topic.

[Porthos]

3 minutes ago, Nope said:

Nevermind, feel free to close the topic.

Nevermind. Are you directly connected to your new ISP modem

Edited May 31, 2023 by Porthos

[Porthos]

The blocks are on addresses that are attempting to do a forced  attempt to exploit remote-desktop-protocol. 

The Real Time Protection of Malwarebytes for Windows  is actively doing it's job to protect the system.

In most cases the attempted probes will automatically stop on their own.