DvyWht Posted November 23, 2023 ID:1601376 Share Posted November 23, 2023 Hi, I keep getting notifications of blocked websites: I've run full scans with malwarebytes and it can't find anything. It's been ongoing for a little while with the Compromised ones, but the Event Details seem to have got a bit more serious so I'm a bit more concerned now. Please can someone help? I've attached the log from the support tool, please let me know what else you need. Thanks mbst-grab-results.zip Link to post Share on other sites More sharing options...
JSntgRvr Posted November 23, 2023 ID:1601407 Share Posted November 23, 2023 Download the enclosed file Fixlist.txt Save it in the same location FRST64.exe is saved. Start FRST (FRST64) with Administrator privileges This time around Press the Fix button and wait When finished, a log file (Fixlog.txt) will pop up and saved in the same location the tool was ran from. You can rename FRST64.exe to its original name Please attach this file in your next reply. Download AdwCleaner and save it to your desktop. Double click AdwCleaner.exe to run it. When AdwCleaner starts, on the left side of the window, click on “Settings” and then enable these repair actions on that tab-window by clicking their button to the far-right for ON status Delete IFEO keys Delete tracing keys Delete Prefetch files Reset Proxy Reset IE Policies Reset Chrome policies Reset Winsock Reset HOSTS file Click Scan Now ... When the scan has finished a Scan Results window will open. Click Cancel (at this point do not attempt to Quarantine anything that is found) Now click the Log Files tab ... Double click on the latest scan log (Scan logs have a [S0*] suffix, where * is replaced by a number, the latest scan will have the largest number) A Notepad file will open containing the results of the scan. Please attach the file in your next reply. Link to post Share on other sites More sharing options...
DvyWht Posted November 23, 2023 Author ID:1601416 Share Posted November 23, 2023 Thanks for your help so far. Log files attached. Fixlog.txt AdwCleaner[S01].txt Link to post Share on other sites More sharing options...
JSntgRvr Posted November 23, 2023 ID:1601418 Share Posted November 23, 2023 The script ran well. How is it doing? Link to post Share on other sites More sharing options...
DvyWht Posted November 23, 2023 Author ID:1601420 Share Posted November 23, 2023 The notifications only seem to happen every few hours so it's difficult to say at this point really. Previously the compromised outgoing connections were while browsing the web so I assumed ad related as I'd not found anything by scanning the system, but then I've had three new ones today at 15:44, 16:23, and 19:37 that show Riskware/Malware so thought I'd better not ignore them! I've had nothing since running the scripts, but it's possibly too early to tell. Is that all the action that I should hopefully need to take and it's a case of now monitoring over the next few days to see how I get on? If so then thank you very much for your help, I appreciate the assistance. Link to post Share on other sites More sharing options...
Solution JSntgRvr Posted November 23, 2023 Solution ID:1601423 Share Posted November 23, 2023 Windows Resource Protection found corrupt files and successfully repaired them. Test for a few days and keep me posted. Link to post Share on other sites More sharing options...
DvyWht Posted November 23, 2023 Author ID:1601424 Share Posted November 23, 2023 I will do, thanks again. Link to post Share on other sites More sharing options...
JSntgRvr Posted November 27, 2023 ID:1601970 Share Posted November 27, 2023 Congratulations. Use this application to remove tools used and their quarantined items: Please download KpRm by Kernel-panik and save to your Desktop. Click on KpRm.exe to run the tool. Vista/Windows 7/8/10 users right-click and select Run As Administrator. Put a check mark next to these items: - Delete tools - Create Restore Point - Delete now Click the "Run" button. When the tool has finished, it will create and open a log report and delete itself. A few final recommendations: Recommend using a Password Manager for all websites, etc. that require a password. Never use the same password on more than one site. Make sure you're backing up your files Keep all software up to date - PatchMyPC - Keep your Operating System up to date and current at all times - Further tips to help protect your computer data and improve your privacy: Please consider installing the following Content Blockers for your Web browsers if you haven't done so already. This will help improve overall security Malwarebytes Browser Guard Google Chrome: Microsoft Edge: Mozilla Firefox: uBlock Origin Google Chrome: Microsoft Edge: Mozilla Firefox: Further reading if you like to keep up on the malware threat scene: Malwarebytes Bleepingcomputer Hopefully, we've been able to assist you with correcting your system issues. Thank you for contacting Malwarebytes. Regards. Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted November 27, 2023 Root Admin ID:1601984 Share Posted November 27, 2023 Glad we could help. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this topic with your request. This applies only to the originator of this thread. Other members who need assistance please start your own topic in a new thread. Please review the following to help you better protect your computer and privacy Tips to help protect from infection Thank you Link to post Share on other sites More sharing options...
Recommended Posts