EscCon

Thanks mate, while not thrilled about it, I do understand and appreciate the input.. Dave

Morning.. I'm running Malwarebytes Premium 2.0.2.2004 (we purchased a 50 count for the college) running on a Win 2003 Server on a Dell Power Edge R900, works and has worked like a champ for years, after the upgrade, what was an minor annoyance (grey icon identifying that malicious web protection was disabled) has become an very visual warning... (good feature btw) and thus been moved up on my fix it list. We use Symantec End Point Services (our Antivirus/firewall product) I have rules in the firewall that block all outgoing traffic, outside our internal subnet so it hasn't been a huge concern, but it looks bad and is bothering me... so.... I have run multiple scans with Malwarebytes,SEP, RogueKiller, TDDSKiller, and JRT all of which come up clean, yet when I attempt to engage the Protect from Malicious Websites, it flashes ok.. for a oh lets say 1/8 of a second, than goes back to NOPE... NADA... Any Suggestions, I'm open to anything... Thanks Dave J

I've got the same problem, but on a server, can I join this feed, or would you perfer that i start a new one... I'm up to the point of RougeKiller and the copied report.. RogueKiller V8.8.15 _x64_ [Mar 27 2014] by Adlice Software mail : http://www.adlice.com/contact/ Feedback : http://forum.adlice.com Website : http://www.adlice.com/softwares/roguekiller/ Blog : http://www.adlice.com Operating System : Windows Server 2003 (5.2.3790 Service Pack 2) 64 bits version Started in : Normal mode User : Administrator [Admin rights] Mode : Scan -- Date : 04/17/2014 08:06:03 | ARK || FAK || MBR | ¤¤¤ Bad processes : 0 ¤¤¤ ¤¤¤ Registry Entries : 3 ¤¤¤ [DNS][PUM] HKLM\[...]\CCSet\[...]\{9317AA34-664E-4BB9-A639-081CD6BCBE1D} : NameServer (128.193.15.12,128.193.15.13 [uNITED STATES (US) - UNITED STATES (US)]) -> FOUND [DNS][PUM] HKLM\[...]\CS001\[...]\{9317AA34-664E-4BB9-A639-081CD6BCBE1D} : NameServer (128.193.15.12,128.193.15.13 [uNITED STATES (US) - UNITED STATES (US)]) -> FOUND [DNS][PUM] HKLM\[...]\CS003\[...]\{9317AA34-664E-4BB9-A639-081CD6BCBE1D} : NameServer (128.193.15.12,128.193.15.13 [uNITED STATES (US) - UNITED STATES (US)]) -> FOUND ¤¤¤ Scheduled tasks : 0 ¤¤¤ ¤¤¤ Startup Entries : 0 ¤¤¤ ¤¤¤ Web browsers : 0 ¤¤¤ ¤¤¤ Browser Addons : 0 ¤¤¤ ¤¤¤ Particular Files / Folders: ¤¤¤ ¤¤¤ Driver : [NOT LOADED 0x0] ¤¤¤ ¤¤¤ External Hives: ¤¤¤ ¤¤¤ Infection : ¤¤¤ ¤¤¤ HOSTS File: ¤¤¤ --> %SystemRoot%\System32\drivers\etc\hosts 127.0.0.1 localhost ¤¤¤ MBR Check: ¤¤¤ +++++ PhysicalDrive0: (\\.\PHYSICALDRIVE0 @ SCSI) DELL PERC 6/i SCSI Disk Device +++++ --- User --- [MBR] bca9eb65182f7d860e3f83ea07999510 [bSP] 924c3ccc7cf16975da73c299d9d5d6d2 : Windows XP MBR Code Partition table: 0 - [XXXXXX] DELL-UTIL (0xde) [VISIBLE] Offset (sectors): 63 | Size: 39 MB 1 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 80325 | Size: 50830 MB 2 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 104181525 | Size: 506690 MB User = LL1 ... OK! Error reading LL2 MBR! ([0x1] Incorrect function. ) +++++ PhysicalDrive1: (\\.\PHYSICALDRIVE1 @ USB) JetFlash Transcend 32GB USB Device +++++ --- User --- [MBR] 862c8021a7fefb041ad287aceb45568b [bSP] 33a07a59d299ab4ea9f4ab0156f9d86f : Windows XP MBR Code Partition table: 0 - [XXXXXX] FAT32-LBA (0x0c) [VISIBLE] Offset (sectors): 18160 | Size: 30939 MB User = LL1 ... OK! Error reading LL2 MBR! ([0x32] The request is not supported. ) Finished : << RKreport[0]_S_04172014_080603.txt >> Thanks Dave ITS CVM/OSU