Bimq.co pops up before searching something, managed by organization

[zygar]

@AdvancedSetupAddition.txtFRST.txt

[zygar]

10 minutes ago, AdvancedSetup said:

Please make the following change in Malwarebytes if you're using the Premium or Trial version

• Please open Malwarebytes. Click on the small gear icon to open the Settings and go to the General tab.
• Then turn off "Always register Malwarebytes in the Windows Security Center"
• Restart the computer

 

It is highly unlikely that you need to setup exclusions for Windows Defender, however if you experience any issues, please see the following article and setup exclusions
between Malwarebytes and Windows Defender

Malwarebytes for Windows antivirus exclusions list
https://support.malwarebytes.com/hc/en-us/articles/360038522974-Malwarebytes-for-Windows-antivirus-exclusions-list

 

 

Let me know if that corrects the issue

 

@AdvancedSetup Its already turned off because im not using the trial or premium version

[AdvancedSetup]

I don't see any signs of a policy set in the logs.

You can try the following

 

How to Do a Repair Install of Windows 10 with an In-place Upgrade
https://www.tenforums.com/tutorials/16397-repair-install-windows-10-place-upgrade.html

 

 

[zygar]

@AdvancedSetup did not work

[AdvancedSetup]

That's not good. If Windows Defender is not going to allow, enable Tamper Protection that is a difficult one to fix as Microsoft also ties to protect those settings using a kernel level driver

 

Please save the attached FIXLIST.txt to the same folder as the Farbar program.

C:\Users\riyos\Desktop\farbar\

fixlist.txt

 

Then start the computer into SAFE MODE and run Farbar and click the FIX button.

That should try to make some changes to the Registry.  When done, restart the computer into Normal Mode and see if that makes any difference

 

Thanks @zygar

[AdvancedSetup]

Please try the following above fix @zygar

 

[zygar]

15 hours ago, AdvancedSetup said:

Please try the following above fix @zygar

 

@AdvancedSetup Now nothing works, are options are off and i cant turn them on anymore. They just go to on for a second when i click it, then it just slides back to off. 

After a few minutes this just pops up

Translation: The service against threats has stopped. Restart this

If i click it it just says something has went wrong, try again later.

I already restarted my pc again didnt fix anything.


 

[AdvancedSetup]

Okay, please do a System Restore before you ran the fix. That will put things back the way they were before you ran the fix.

 

[zygar]

53 minutes ago, AdvancedSetup said:

Okay, please do a System Restore before you ran the fix. That will put things back the way they were before you ran the fix.

 

@AdvancedSetup Ok everythings good now again, but still got the problem that i cant turn tamper protection on

[AdvancedSetup]

Yes, at this point though it looks like you may need to try to work with Microsoft on this.

Even an upgrade repair was not able to fix it.

The language difference doesn't help either.

Platform: Microsoft Windows 10 Pro Version 22H2 19045.4529 (X64) Language: Nederlands (Nederland)

 

It's up to you, Microsoft support may be able to assist if you can get a hold of an actual support engineer.

The computer does not show in the logs that it's infected anymore but something seems to have damaged Windows Defender that normal fixes are not working.

We can try another PowerShell style reinstall if you like (I doubt it will fix it though) then do a System Restore if it does not work.

 

Beyond that, backing up your personal data and settings to an external USB drive. Then do a Clean install of Windows would be the best option. The Windows install takes less than 30 minutes. In fact I've done it so often I can reinstall Windows in like 15 minutes. The reinstall of your other applications and getting that setup how you like can take a couple of days but then you have a much safer, faster, better working Windows. Spending days after days trying to fix a broken system finally gets to a point where one has to ask if it's time well spent or not.

Let me know how you'd like to proceed. As said we can try a PowerShell script fix but it typically doesn't seem to work for many users

 

[AdvancedSetup]

Clean Install Windows 10 & 11 (2023)
https://answers.microsoft.com/en-us/windows/forum/all/clean-install-windows-10-11-2023/1c426bdf-79b1-4d42-be93-17378d93e587

Also, please review the following topic

Bypass Microsoft Online Account Creation during installation of Windows 11
https://forums.malwarebytes.com/topic/296613-bypass-microsoft-online-account-creation-during-installation-of-windows-11/

 

 

[zygar]

47 minutes ago, AdvancedSetup said:

Clean Install Windows 10 & 11 (2023)
https://answers.microsoft.com/en-us/windows/forum/all/clean-install-windows-10-11-2023/1c426bdf-79b1-4d42-be93-17378d93e587

Also, please review the following topic

Bypass Microsoft Online Account Creation during installation of Windows 11
https://forums.malwarebytes.com/topic/296613-bypass-microsoft-online-account-creation-during-installation-of-windows-11/

 

 

@AdvancedSetup Ok then  i guess the main issue was solved (bimq.co) which i was most worried about anyways 

Thank you

[AdvancedSetup]

I would not recommend leaving Windows Defender running in a hampered, hobbled state too long.

 

Excellent, glad to hear all is well again (aside from the Windows Defender issue). I'll go ahead and close your topic now and wish you well.

Please follow the directions below to remove the logs and tools we've used. If any are still left after that you can manually uninstall or delete them.

Take care and stay safe out there. Try to follow as much of the advise below as you can as well.

 

Let's go ahead and do some clean-up work and remove the tools and logs we've run.

Please download KpRm by kernel-panik and save it to your desktop.

• right-click kprm_(version).exe and select Run as Administrator.
• Read and accept the disclaimer.
• When the tool opens, ensure all boxes under Actions are checked.
• Under Delete Quarantines select Delete Now, then click Run.
• Once complete, click OK.
• A log will open in Notepad titled kprm-(date).txt. You can close it.

 

We're glad that we were able to assist you.

 

The following information will help you to keep your computer and data safer as well as improve your overall privacy

1. Recommend using a Password Manager for all websites, etc. that require a password. Never use the same password on more than one site.
   https://www.howtogeek.com/780233/best-password-manager/
2. Make sure you're backing up your files https://forums.malwarebytes.com/topic/136226-backup-software/
3. Keep all software up to date - PatchMyPC - https://patchmypc.com/home-updater#download     https://patchmypc.com/about-us
4. Keep your Operating System up to date and current at all times - https://support.microsoft.com/en-us/windows/windows-update-faq-8a903416-6f45-0718-f5c7-375e92dddeb2
5. Further tips to help protect your computer data and improve your privacy: https://forums.malwarebytes.com/topic/258363-tips-to-help-protect-from-infection/ 
6. Please consider installing the following Content Blockers for your Web browsers if you haven't done so already. This will help improve overall security

Malwarebytes Browser Guard

•   Google Chrome: https://chrome.google.com/webstore/detail/malwarebytes-browser-guar/ihcjicgdanjaechkgeegckofjjedodee
•   Microsoft Edge: https://support.malwarebytes.com/hc/en-us/articles/4413298736787-Install-Malwarebytes-Browser-Guard-on-Microsoft-Edge-browser
•   Mozilla Firefox: https://addons.mozilla.org/en-US/firefox/addon/malwarebytes/

uBlock Origin

• Google Chrome: https://chrome.google.com/webstore/detail/ublock-origin/cjpalhdlnbpafiamejdnhcphjbkeiagm 
• Microsoft Edge: https://microsoftedge.microsoft.com/addons/detail/ublock-origin/odfafepnkmbhccpbejgmiehpchacaeak 
• Mozilla Firefox: https://addons.mozilla.org/en-US/firefox/addon/ublock-origin

 

Cybersecurity basics & protection
Everything you need to know about cybercrime
https://www.malwarebytes.com/cybersecurity

 

Further reading if you'd like to keep up on the malware threat scene: Malwarebytes Blog  https://blog.malwarebytes.com/

Hopefully, we've been able to assist you with correcting your system issues.

Thank you for using Malwarebytes. Please tell your friends and family if they too need assistance with malware removal