IgorCasoni Posted September 16 ID:1661238 Share Posted September 16 Hello, I often get this.... "Unexpected error while waiting for connections from a second instance." Please help (support tools files are joined). Krgds mbst-grab-results.zip Link to post Share on other sites More sharing options...
Porthos Posted September 16 ID:1661239 Share Posted September 16 @IgorCasoni I do see you are being hammered by inbound blocks. Inbound blocks can be stopped by having a router between your internet provider's modem and your computer. The blocks are on addresses that are attempting to do a forced attempt to exploit remote-desktop-protocol. The Real-Time Protection of Malwarebytes for Windows is actively doing its job to protect the system. It also looks like you tried to clean install or repair Malwarebytes. You can't do that with the optional Tamper Protection is active. Link to post Share on other sites More sharing options...
IgorCasoni Posted September 16 Author ID:1661365 Share Posted September 16 Thanks for the quick response, however, I'm using a VM, so I can't install anything additional besides my firewall, which is already active. Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted September 17 Root Admin ID:1661387 Share Posted September 17 Please try setting up Malwarebytes as allowed in your other security applications https://support.malwarebytes.com/hc/en-us/articles/360038522974-Add-Malwarebytes-to-the-allow-list-on-other-apps Then restart the computer Link to post Share on other sites More sharing options...
IgorCasoni Posted September 17 Author ID:1661410 Share Posted September 17 Thanks for trying to help me... But These files are NOT inside my c: disk. I UNhide all folders/file and make a search from c: Windows don't find them. Add the following files: C:\Windows\System32\drivers\mwac.sys C:\Windows\System32\drivers\mbamswissarmy.sys C:\Windows\System32\drivers\mbamchameleon.sys C:\Windows\System32\drivers\farflt.sys C:\Windows\System32\drivers\mbae64.sys C:\Windows\System32\drivers\mbae.sys C:\Windows\System32\drivers\farflt11.sys My MBM is a Premium Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted September 17 Root Admin ID:1661426 Share Posted September 17 Please do the following Disable-Fast-Startup https://forums.malwarebytes.com/topic/299350-disable-fast-startup/ Show-Hidden-Folders-Files-Extensions https://forums.malwarebytes.com/topic/299345-show-hidden-folders-files-extensions/ Then open an elevated admin command prompt. Then copy and paste the following into the command prompt console and press the Enter key DIR /A C:\Windows\System32\drivers\MB*.SYS You should get something similar C:\Windows\System32>DIR /A C:\Windows\System32\drivers\MB*.SYS Directory of C:\Windows\System32\drivers 09/16/2024 12:30 PM 158,640 mbae64.sys 09/16/2024 12:30 PM 21,480 MbamElam.sys 09/16/2024 12:31 PM 239,568 mbamswissarmy.sys 08/27/2024 10:22 AM 462,848 MbbCx.sys 4 File(s) 882,536 bytes I'd have to double-check on the far*.sys files to see if they're still being used Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted Monday at 05:21 AM Root Admin ID:1664002 Share Posted Monday at 05:21 AM Due to the lack of feedback, this topic is closed to prevent others from posting here. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this topic with your request. This applies only to the originator of this topic. Other members who need assistance please start your own topic in a new thread. Tips to help protect from infection Thanks Link to post Share on other sites More sharing options...
Recommended Posts