Trusted Advisors
  • Content count

  • Joined

  • Last visited


About Firefox

Profile Information

  • Location

Recent Profile Visitors

96,818 profile views
  1. Your welcome, I can't say much as far as Norton throwing up the notification. They should both get along nicely. If you see the message again you can let us know, or you can try the exceptions I mentioned above. If you like you can provide the logs requested below and we can review them for you to see if we can find anything out of the ordinary. We would need more info on the system.... Please read the following and in your next reply ATTACH the 3 requested logs - Diagnostic Logs (the three files should be CheckResults.txt, FRST.txt and Addition.txt) Thank You, Firefox
  2. Hello and Welcome to Malwarebytes. It is a common practice from Antivirus software's to mention MBAM or other security products to first uninstall them before installing their product, in your case Norton. Not sure what version of Norton your running, but I have several computers that run both Norton (Symantec Endpoint Protection in my case) and MBAM without any issues. You could always add exceptions if you like to help just in case. See below. Please exclude the following files from your Antivirus Software (not sure what version you are using): Note: If using a software firewall besides the built in Windows Firewall you'll need to exclude them from it as well For 32 bit versions of Windows XP, Windows Vista, Windows 7 & Windows 8 & Windows 10: C:\Program Files\Malwarebytes Anti-Malware\mbam.exe C:\Program Files\Malwarebytes Anti-Malware\mbamdor.exe C:\Program Files\Malwarebytes Anti-Malware\mbampt.exe C:\Program Files\Malwarebytes Anti-Malware\mbamresearch.exe C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe For 64 bit versions of Windows Vista or Windows 7 / 8 & 10: C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamdor.exe C:\Program Files (x86)\Malwarebytes Anti-Malware\mbampt.exe C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamresearch.exe C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe C:\Program Files (x86)\Malwarebytes Anti-Malware \mbamscheduler.exe Note: If using a software firewall besides the built in Windows Firewall you'll need to exclude MBAM.EXE, MBAMSERVICE.EXE and MBAMRESEARCH.EXE from it as well
  3. I do not work for Malwarebytes so I can not say why its there or why it wasn't removed. The empty folder is harmless. You can delete it if you choose to.
  4. Until Ron returns... below are the items from your logs that are hacks and or software that were applied to bypass both Microsoft and Malwarebytes activations. Those are the ones you need to remove. You need to edit your hosts file that is located in C:\Windows\System32\Drivers\ETC and remove the entry highlighted in red below. The other items below are/were used to activate your copy of Windows 10, I am going by the name in the downloads folder of Windows_10_Activator_KMSpico_v10_All_Version_Activ.exe. Using hacks and software such as the ones below can lead you to getting infected and can lead you vulnerable to exploits and possible legal action. You may want to check with whom ever you purchased the computer or whoever installed Windows 10 for you. Task: {1A2827BA-9915-48FF-9BDB-EE105EBE028E} - System32\Tasks\{05ED0C42-AD8E-42EC-A97C-3C78D976864F} => C:\Program Files (x86)\KMSPico\StubInstallerCleanUp.bat [2016-09-28] () <==== ATTENTION 2016-09-28 11:17 - 2016-09-28 11:19 - 00000000 ____D C:\Program Files (x86)\KMSPico 2016-09-28 11:17 - 2016-09-28 11:17 - 00471411 _____ C:\Users\m-mcc\Downloads\KMSPico 2016-09-28 11:15 - 2016-09-28 11:15 - 04924488 _____ C:\Users\m-mcc\Downloads\Windows_10_Activator_KMSpico_v10_All_Version_Activ.exe 2015-10-30 08:24 - 2016-08-25 15:44 - 00000916 ____A C:\WINDOWS\system32\Drivers\etc\hosts
  5. I was not aware you had already tried that. We will need to see if the folks from MBAM staff can review the logs and see if they can find a reason for this.
  6. Hello Gt-truth, its a folder that gets created by Malwarebytes, there is another topic >>HERE<< with the reason for its creation
  7. Hello and Welcome to Malwarebytes Let's try this first.... Please follow the steps in this pinned topic to uninstall your current version of MBAM and reinstall the latest build - MBAM Clean Removal Process 2x Please let us know how it goes. Thank You, Firefox
  8. Hello and Welcome to Malwarebytes... As you stated since you don't have more details its really hard for us to determine if something actually got through especially a ransomeware as you stated. By the sounds of it, it sounds as if it was one of those fake scam popups, like the ones below, does that look familiar? Similar to these ? MalwareScam.wmv MalwareScam-1.wmv MalwareScam-2.wmv MalwareScam-3.wmv MalwareScam-4.wmv MalwareScam-5.wmv MalwareScam-6.wmv NOTE: Thanks to @David H. Lipman for the videos.
  9. Ms

    Glad to hear it, and we are glad to have helped you through the process. Don't hesitate to post should you encounter any further issues.
  10. Hello and Welcome! Not sure if it will run on any server at the moment, I have not tested it. That being said, this tool is not going to be a stand alone tool, it is going to be eventually incorporated into Malwarebytes Anti-Malware program (unless something changes in the future).
  11. OK let us know the results and if you want provide us with the scan log so we can see what was detected...
  12. Thanks for the added info.... just so your aware, custom (full) scans are really not recommended to be run frequently. A Threat Scan is the recommended scan type, which will scan all areas that malware likes to hide and load from.
  13. Let's try this clean reinstall first (as the log shows that it was installed on 2016/08/31).... Please follow the steps in this pinned topic to uninstall your current version of MBAM and reinstall the latest build - MBAM Clean Removal Process 2x Please let us know how it goes. Thank You, Firefox
  14. Hello and Welcome! I would try the suggestions posted by @daledoc1 to see it that helps your issue...