louanna27

Apologies again, the post was not finished. The nightly MB scan noted the following and I quarantined it: Trojan.ServStart, C:\WINDOWS\SYSTEM32\WERFAULT.EXE. I thought virustotal said it wasn't suspicious, but I left it in quarantine. This morning I received a "rundll32.exe - Application error". Should this be left in quarantine or restored? Thanks for your assistance.

My apologies for lack of technical knowledge in advance. The nightly MB scan noted the following and I quarantined it:

I did not know this; I have added a check mark in "Scan for Rootkits" in Advanced Options. Thank you, Porthos.

I'm no technie of any kind so not sure what to tell you, but I do know that scanning for rootkits will not stay at "Enabled" setting; it goes back to disabled. I've attached another mb-check if you want to look at it. Also, even though I use Chrome and occasionally IE11, I uninstalled Firefox some time ago as it just wouldn't work well, but I notice there are Firefox extensions and plugins listed on FRST.txt and Addition.txt. Can you advise how to delete these Firefox files? Thank you. mb-check-results.zip

The Malwarebytes Tray Application is still continuously running in Task Manager. Is there nothing that can be done? It may not be hampering the anti malware software, but something is amiss. Thanks.

The Malwarebytes Tray Application is still continuously running. Also, the daily scan results from last night showed that rootkit detection is disabled when in fact it is enabled. Malwarebytes www.malwarebytes.com -Log Details- Scan Date: 11/15/17 Scan Time: 7:30 PM Log File: 47ab9374-ca65-11e7-9e13-642737bdf5f0.json Administrator: Yes -Software Information- Version: 3.3.1.2183 Components Version: 1.0.236 Update Package Version: 1.0.3266 License: Premium -System Information- OS: Windows 7 Service Pack 1 CPU: x64 File System: NTFS User: System -Scan Summary- Scan Type: Threat Scan Result: Completed Objects Scanned: 345349 Threats Detected: 0 (No malicious items detected) Threats Quarantined: 0 (No malicious items detected) Time Elapsed: 10 min, 5 sec -Scan Options- Memory: Enabled Startup: Enabled Filesystem: Enabled Archives: Enabled Rootkits: Disabled Heuristics: Enabled PUP: Detect PUM: Detect -Scan Details- Process: 0 (No malicious items detected) Module: 0 (No malicious items detected) Registry Key: 0 (No malicious items detected) Registry Value: 0 (No malicious items detected) Registry Data: 0 (No malicious items detected) Data Stream: 0 (No malicious items detected) Folder: 0 (No malicious items detected) File: 0 (No malicious items detected) Physical Sector: 0 (No malicious items detected) (end)

FYI: After I restarted following Windows Updates, the Ransomware Protection was disabled; I had to turn it on.

Thank you; I look forward to hearing from you because I'm using CPU and memory more so than usual.

I truly apologize but I'm moving to another city in a few days and MUST leave for several hours. I will come right back to this when I return. Thank you.

Yep, it's still running...

At one point during the Farbar scan, the blue circle came up and Farbar was "not responding". It did continue after a bit, but then later Emsisoft AM popup said "FRST.exe was attempting to modify the firewall" - I clicked to allow it. Farbar didn't really modify the firewall did it? mb-check-results.zip

Thank you Porthos; give me just a few minutes....I downloaded the WU from the catalog that didn't get installed and am in the process of trying to install them.

This laptop has been slower for a day or so and today when Windows Updates was taking a very long time to download and install, I noticed Malware Tray Application is continuous running according to Task Manager...this has not been the case in the past. I noticed that this was an issue in September but supposed to have been fixed. I had to stop installation of the Windows Updates as it was taking way too long. How can I stop the Tray Application from continuously running in Task Manager? Thank you.

That was painless enough...thank you.