klauwkikker

@exile360 I think that i changed some settings begin 2018. Thank you very much for youre help.

I just look at mrt.exe on my pc and it was from Januari 2018. So i've had these pums since that time. Is it so that Mbam just recently dedect those pums? I have scane done by Hitman pro, Defender , Mbam and online scan from Trendmicro and have no treaths.

I have also these two pum's. but my question is how are the register values changed? I did not run a privacy program or changed anything. My concern is that a virus did this. Is this possible?

Yes fr33tux, the problem is solved. Many thanks

Adwcleaner show once again these two treads. Are these false positeves or not? Please a answer. Malwarebytes premium finds nothing

Fleks717, In youre case i restore the two items and wait for a answer. I advise you to not delete them from quarantaine. I think it is a false positive. Hopefully we get a answer soone.

Fleks717, I did not restarted the pc. i have used the option remove adwcleaner in options and reinstalled it.

Zani and Fleks, I did restore the two items from quarantaine and did a clean install of adwcleaner and now adwcleaner found nothing. So i quess they were false positives. But I like als a answer from the staff.

I have restored this two items from quarantaine and did an new scan and now adwcleaner found nothing. False postive? Kind if I get a answere

What are these? Malwarebytes antimalware didn't flag them. Only adwcleaner did. Adware.Agent HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|WMI-ASYNC-In-TCP Adware.Agent HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|WMI-ASYNC-In-TCP-NoScope

Can I have a answer please?

Today i scanned with the newest version of adwcleaner and suddenly opendns is deleted. Is this a false positive? ------------------------------- # Malwarebytes AdwCleaner 7.1.0.0 # ------------------------------- # Build: 04-12-2018 # Database: 2018-04-11.1 # Support: https://www.malwarebytes.com/support # # ------------------------------- # Mode: Clean # ------------------------------- # Start: 04-14-2018 # Duration: 00:00:03 # OS: Windows 10 Pro # Cleaned: 2 # Failed: 0 ***** [ Services ] ***** No malicious services cleaned. ***** [ Folders ] ***** No malicious folders cleaned. ***** [ Files ] ***** No malicious files cleaned. ***** [ DLL ] ***** No malicious DLLs cleaned. ***** [ WMI ] ***** No malicious WMI cleaned. ***** [ Shortcuts ] ***** No malicious shortcuts cleaned. ***** [ Tasks ] ***** No malicious tasks cleaned. ***** [ Registry ] ***** Deleted HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{763b627d-9b57-463f-88d6-236d16dc8350}|NameServer - "208.67.222.222,208.67.220.220" ***** [ Chromium (and derivatives) ] ***** No malicious Chromium entries cleaned. ***** [ Chromium URLs ] ***** Deleted Ixquick - Nederlands ***** [ Firefox (and derivatives) ] ***** No malicious Firefox entries cleaned. ***** [ Firefox URLs ] ***** No malicious Firefox URLs cleaned. ************************* [+] Delete Tracing Keys [+] Reset Winsock ************************* ########## EOF - C:\AdwCleaner\Logs\AdwCleaner[C00].txt ##########

http: //preview[.]ibb[.]co/

Thanks @dcollins

Is Malwarebytes aware of this zeroday exploit and working on a fix of it? https://cybellum.com/doubleagentzero-day-code-injection-and-persistence-technique/