WisconsinGuy Posted September 10 ID:1660237 Share Posted September 10 I keep getting RTP detections targeting a specific file. Is this something to be concerned about? Malwarebytes Website Blocked Report 2024-09-10 221634.txt Link to post Share on other sites More sharing options...
Porthos Posted September 10 ID:1660238 Share Posted September 10 @WisconsinGuy Could it be that you are torrenting with your Nord VPN on? Do the following and we can take a closer look. Although I will not be directly assisting you, a malware removal expert will be along to assist after you do the following. Let's get the info to get the process started. Be aware it will take many steps and scans to fully remove malware. Please respond to all future instructions from your helper in a timely manner. Let's go ahead and run a couple of scans and get some updated logs from your system. Please read the entire post below before starting so that you're more familiar with the process Then follow each step in the order provided. Unless otherwise asked, please attach all logs Please make the following system changes: Please pay close attention the the instructions in all of the following links. If you have not done so already - Enable System Protection and create a NEW System Restore Point <<<<< Important. Temporarily disable your antivirus real-time protection or other security software first only if it blocks or interferes with the scans or downloads.. Make sure to turn it back on once the scans are completed Temporarily disable Microsoft SmartScreen to download software below only if needed. Make sure to turn it back on once the downloads are completed Disable-Fast-Startup Windows 8 and newer only <<<<< Important. Show-Hidden-Folders-Files-Extensions Please run the following scans: Please pay close attention the the instructions in all of the following links. Click the following link and run a Scan with AdwCleaner Click the following link and run a Scan with Malwarebytes RESTART the computer <<<<< Important. Click the following link and run a Scan with Farbar Recovery Scan Tool Example image of where to click to attach files when posting your reply Then be patient for the next expert to take your case. <<<<< Important. Thank you Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted September 11 Root Admin ID:1660240 Share Posted September 11 This is an Inbound block. Type: Inbound Malwarebytes is doing it's job. We can check the logs to see if something else is happening but an Inbound needs to have a physical firewall between your ISP and your PC in order to block it. These are typically probes looking for exploits and go away on their own within a week or so Link to post Share on other sites More sharing options...
WisconsinGuy Posted September 11 Author ID:1660246 Share Posted September 11 55 minutes ago, AdvancedSetup said: This is an Inbound block. Type: Inbound Malwarebytes is doing it's job. We can check the logs to see if something else is happening but an Inbound needs to have a physical firewall between your ISP and your PC in order to block it. These are typically probes looking for exploits and go away on their own within a week or so I've attached half the files. Is there a way I can send the FRST files privately, as those seem to have some pretty sensitive information on them. Malwarebytes Scan Report 2024-09-11 001910.txt AdwCleaner[C01].txt Link to post Share on other sites More sharing options...
WisconsinGuy Posted September 11 Author ID:1660268 Share Posted September 11 Oh, and since I missed it on the first post, no I don't torrent at all. Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted September 11 Root Admin ID:1660273 Share Posted September 11 Thank you for the logs, but please get us the other following logs. RESTART the computer and run the following scanners and get us NEW fresh logs @WisconsinGuy Scan with Farbar Recovery Scan Tool https://forums.malwarebytes.com/topic/306601-scan-with-farbar-recovery-scan-tool/ Scan with FSS Farbar Service Scanner https://forums.malwarebytes.com/topic/306736-scan-with-fss-farbar-service-scanner/ Scan with SecurityCheck by glax24 https://forums.malwarebytes.com/topic/307301-scan-with-securitycheck-by-glax24/ Link to post Share on other sites More sharing options...
WisconsinGuy Posted September 12 Author ID:1660440 Share Posted September 12 I'll run the scans shortly, however is there a way to submit the files privately rather than posting them? I only ask due to the fact they appear rather sensitive, and this is a public forum. Link to post Share on other sites More sharing options...
Root Admin Solution AdvancedSetup Posted September 12 Root Admin Solution ID:1660601 Share Posted September 12 You can send me a private message with the logs, however, if you have names or items you feel is or should be private that's a good indicator to review your computer habits and when or where possible perhaps use generic names, etc. Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted September 15 Root Admin ID:1661153 Share Posted September 15 Excellent, glad to hear all is well again. I'll go ahead and close your topic now and wish you well. Please follow the directions below to remove the logs and tools we've used. If any are still left after that you can manually uninstall or delete them. Take care and stay safe out there. Try to follow as much of the advise below as you can as well. Let's go ahead and do some clean-up work and remove the tools and logs we've run. Please download KpRm by kernel-panik and save it to your desktop. right-click kprm_(version).exe and select Run as Administrator. Read and accept the disclaimer. When the tool opens, ensure all boxes under Actions are checked. Under Delete Quarantines select Delete Now, then click Run. Once complete, click OK. A log will open in Notepad titled kprm-(date).txt. You can close it. We're glad that we were able to assist you. The following information will help you to keep your computer and data safer as well as improve your overall privacy Recommend using a Password Manager for all websites, etc. that require a password. Never use the same password on more than one site. https://www.howtogeek.com/780233/best-password-manager/ Make sure you're backing up your files https://forums.malwarebytes.com/topic/136226-backup-software/ Keep all software up to date - PatchMyPC - https://patchmypc.com/home-updater#download https://patchmypc.com/about-us Keep your Operating System up to date and current at all times - https://support.microsoft.com/en-us/windows/windows-update-faq-8a903416-6f45-0718-f5c7-375e92dddeb2 Further tips to help protect your computer data and improve your privacy: https://forums.malwarebytes.com/topic/258363-tips-to-help-protect-from-infection/ Please consider installing the following Content Blockers for your Web browsers if you haven't done so already. This will help improve overall security Malwarebytes Browser Guard Google Chrome: https://chrome.google.com/webstore/detail/malwarebytes-browser-guar/ihcjicgdanjaechkgeegckofjjedodee Microsoft Edge: https://support.malwarebytes.com/hc/en-us/articles/4413298736787-Install-Malwarebytes-Browser-Guard-on-Microsoft-Edge-browser Mozilla Firefox: https://addons.mozilla.org/en-US/firefox/addon/malwarebytes/ uBlock Origin Google Chrome: https://chrome.google.com/webstore/detail/ublock-origin/cjpalhdlnbpafiamejdnhcphjbkeiagm Microsoft Edge: https://microsoftedge.microsoft.com/addons/detail/ublock-origin/odfafepnkmbhccpbejgmiehpchacaeak Mozilla Firefox: https://addons.mozilla.org/en-US/firefox/addon/ublock-origin Cybersecurity basics & protection Everything you need to know about cybercrime https://www.malwarebytes.com/cybersecurity Further reading if you'd like to keep up on the malware threat scene: Malwarebytes Blog https://blog.malwarebytes.com/ Hopefully, we've been able to assist you with correcting your system issues. Thank you for using Malwarebytes. Please tell your friends and family if they too need assistance with malware removal Link to post Share on other sites More sharing options...
Recommended Posts