NTxLS Posted October 3, 2016 ID:1065253 Share Posted October 3, 2016 Greetings from the Great Country of TEXAS, Found this within "SCANNING HISTORY LOG" and never received any notice that it was found. Other logs have not shown any thing listed. Do I just go into that folder and delete that record? "PUP.Optional.TweakBit, C:\ProgramData\BSD\DriverHive, No Action By User, [e9ebb9db5b3fa591049ce71b0005b050]" The red part of that report tells me there was a notification, WRONG! Never happened and has occurred before several times. TIA, CU "L8R, NTxLS "LoneWanderer" Link to post Share on other sites More sharing options...
NTxLS Posted October 5, 2016 Author ID:1065508 Share Posted October 5, 2016 Excuse me, please? MBAM (Premium) v2.2.1.1043 (Pd version) keeps finding this "Non-Malware Detected" with a 'Always on TOP' box telling of the "Scan Complete" with "Click here to view details." Yet NOTHING is found when going to the location shown in the log file. My first post shows what is within the log file. How am I to STOP this from occurring any more? Link to post Share on other sites More sharing options...
1PW Posted October 6, 2016 ID:1065624 Share Posted October 6, 2016 Reference: https://www.malwarebytes.com/support/guides/mbam/History_AL.html > Scan Log. Hello NTxLS: For analysis by experts, please find the latest appropriate Scan Log and generate a text (.txt) file from that report and attach only to your next reply to this topic. Thank you. Link to post Share on other sites More sharing options...
NTxLS Posted October 6, 2016 Author ID:1065687 Share Posted October 6, 2016 1PW. This has been so strange, nothing found in the folder listed. Now there are more things being placed on my system. Do not know where they are coming from, maybe Microsoft because I have not upgraded to WX and have their TELEMETRY BLOCKED. They are not telling the truth about 'CompatTellRunner.exe' nor the DIAG files for that same program. The Log/file titled "PUP_OPTIONAL_TWEAKBIT' PUP_OPTIONAL_TWEAKBIT.txt Link to post Share on other sites More sharing options...
Aura Posted October 7, 2016 ID:1065769 Share Posted October 7, 2016 (edited) Hi NTxLS Open Malwarebytes, go in the Settings panel, followed by Detection and Protection. Under PUP (Potentially Unwanted Program) detections and PUM (Potentially Unwanted Modification) detections, what is the action taken? Edited October 7, 2016 by Aura Link to post Share on other sites More sharing options...
NTxLS Posted October 7, 2016 Author ID:1065819 Share Posted October 7, 2016 Aura, Mine is as you have shown except for "Scan for Rootkits" is also selected. Should I set the "PUP + PUM" to 'Warn User' or leave as you have shown? Link to post Share on other sites More sharing options...
NTxLS Posted October 7, 2016 Author ID:1065820 Share Posted October 7, 2016 Aura, Mine is as you have shown except for "Scan for Rootkits" is also selected. Should I set the "PUP + PUM" to 'Warn User' or leave as you have shown? Also just started another scan and it has shown the box with the same data as first reported. Your system will not allow me to edit that post so repeating with my last line included. Link to post Share on other sites More sharing options...
NTxLS Posted October 7, 2016 Author ID:1065822 Share Posted October 7, 2016 Aura, Just ran a fresh scan and the attached is my screen shot of what was found and this time allowed me to quarantine what was found.Those dated today, 10/07/2016, were found today the others are from a couple of days ago. Those of 10/05/2016 have not been displayed like this so were never quarantined, until now. There has not been more than just one shown until today, just now, there are four (4). Do not understand why this is behaving this way. Also just after that scan my system did a REBOOT without any warning, presume that was done by MBAM thought the need of a reboot would give me a box to agree now or delay. NEVER did this last. Link to post Share on other sites More sharing options...
NTxLS Posted October 7, 2016 Author ID:1065825 Share Posted October 7, 2016 Aura, Just ran a fresh scan and the attached is my screen shot of what was found and this time allowed me to quarantine what was found.Those dated today, 10/07/2016, were found today the others are from a couple of days ago. Those of 10/05/2016 have not been displayed like this so were never quarantined, until now. There has not been more than just one shown until today, just now, there are four (4). Do not understand why this is behaving this way. Also just after that scan my system did a REBOOT without any warning, presume that was done by MBAM thought the need of a reboot would give me a box to agree now or delay. NEVER did this last. Cannot get my attachment to work, keep getting a "-200" presuming that is an error, will work on getting it through some how. Latest NOTE: that "Scan Complete - Non-Malware Detected" again as originally posted. Link to post Share on other sites More sharing options...
NTxLS Posted October 7, 2016 Author ID:1065826 Share Posted October 7, 2016 Aura, Your system keeps telling me I cannot edit a post that was just made, so I copied and made my edit and re-posted twice (2) plus would not allow me to include my screen shot. Will work on getting that done so it may be shown. Thank you for your patients Link to post Share on other sites More sharing options...
Aura Posted October 7, 2016 ID:1065829 Share Posted October 7, 2016 There is a time limit after which you cannot edit a post you made. Now that you ran a scan and the detections came back, did you choose to delete them? Link to post Share on other sites More sharing options...
NTxLS Posted October 7, 2016 Author ID:1065830 Share Posted October 7, 2016 Aura, The time for doing the edit could not have been more than two (2) minutes. I just will not post until I feel like it, which means my reply will be delayed until I have a chance to think over what needs to be said. I quarantined them to show you what was found and was able to post the attach, that is included with this message, and just before starting this message DELETED all that are shown in my attached file. Link to post Share on other sites More sharing options...
NTxLS Posted October 7, 2016 Author ID:1065833 Share Posted October 7, 2016 Aura, One question if I may? Why is the "Malicious Website Protection" being "STOPPED"? I did not request that action nor did I uncheck that feature. Under "Advanced Option" all are checked except for 'Delay Protection at startup for 15 seconds' want it fully operational ASAP! Link to post Share on other sites More sharing options...
Aura Posted October 7, 2016 ID:1065834 Share Posted October 7, 2016 So these threats have indeed be quarantined. Now, if you run a new Threat Scan, are they detected again? Link to post Share on other sites More sharing options...
NTxLS Posted October 7, 2016 Author ID:1065835 Share Posted October 7, 2016 9 minutes ago, Aura said: So these threats have indeed be quarantined. Now, if you run a new Threat Scan, are they detected again? Aura, Just ran a scan and removed that PEST non-malware again, also had not set a password because I am the only user of this system, running as Limited USER, so that was added to MBAM. Yes, that PEST was discovered again, after setting the password am running another scan at this time. Plus need to do a reboot after this is finished scanning this time around. Will report results later Link to post Share on other sites More sharing options...
Aura Posted October 8, 2016 ID:1065919 Share Posted October 8, 2016 Let us know how it goes. If Malwarebytes keeps on detecting these items, it means that the PUPs responsible for these are probably still active on your system, and you'll need to head to the Malware Removal for Windows section to get them removed. Link to post Share on other sites More sharing options...
NTxLS Posted October 8, 2016 Author ID:1065940 Share Posted October 8, 2016 4 hours ago, Aura said: Let us know how it goes. If Malwarebytes keeps on detecting these items, it means that the PUPs responsible for these are probably still active on your system, and you'll need to head to the Malware Removal for Windows section to get them removed. Aura, I THANK YOU very muchly for this assistance. This has been bothering me for some time and just could not figure out what the issue is or remove anything because the folder listed is EMPTY. Plus MBAM is supposed to treat that as malware and remove same, it will not only says it is warning yet that is not happening either. Will check into the "Malware Removal for Windows" next step. Have a good week-end Link to post Share on other sites More sharing options...
Aura Posted October 8, 2016 ID:1065950 Share Posted October 8, 2016 No problem NTxLS, you're welcome Once you post your thread over there, feel free to post the URL for it here. If it hasn't been taken already, I'll take it and assist you. Link to post Share on other sites More sharing options...
NTxLS Posted October 9, 2016 Author ID:1066030 Share Posted October 9, 2016 22 hours ago, Aura said: No problem NTxLS, you're welcome Once you post your thread over there, feel free to post the URL for it here. If it hasn't been taken already, I'll take it and assist you. Aura, Thank you for that offer, but; so far I managed to eliminate that troublesome pest. A bit of a resourceful problem solver, self taught, just need some time and set my mind to doing what is required to get the job done. Not attempting to brag just telling the truth. Just one point that is NOT understood about MBAM, why did it STOP the only feature that was to monitor this type of activity? Then NEVER give a warning that this was found AND NOT deal with it as is selected to as if it were "Malware" DELETE from my system? Just do not comprehend this PEST was ble to circumvent what was supposed to be done and do IT's own thingy. NOT really an issue with me as it is solved and gone for now. OH! One last point if I may? All of your posts to this thread have been very helpful, but; there NEVER was a message sent to my mailbox about your posts, just came in here and found them. Do they NOT send email about replies to poster's messages? Link to post Share on other sites More sharing options...
Aura Posted October 10, 2016 ID:1066080 Share Posted October 10, 2016 Malwarebytes' settings doesn't change automatically, you need to change them manually. So far, we haven't seen any malware tempering with Malwarebytes' settings as well. Perhaps a misclick or manipulation occured at one point when you were going through the settings? And yes, if you follow a thread on Malwarebytes' Forums, an email will be sent to your address everytime someone's post in it. However, you need to follow that thread. By default, you follow every thread you post in. Take a look in the top right-corner, I guess it says "Follow" for you, since I seem to be the only one following this thread. If you had been following this thread, you would have gotten an email everytime someone had replied in it. Link to post Share on other sites More sharing options...
NTxLS Posted October 11, 2016 Author ID:1066300 Share Posted October 11, 2016 Greetings from the Great Country of TEXAS, MBAM "Settings/Detection and Protection/PUP protection / PUM protection set to "Treat detections as malware" are NOT being handled as per my selection. Below is what is recorded in logs: "Folders: 1 PUP.Optional.TweakBit, C:\ProgramData\BSD\DriverHive, No Action By User, [36fea6ef67331125d7c7f50d41c45ca4]," "Files: 1 PUP.Optional.DriverSupport, C:\Windows\System32\Tasks\Driver Support, No Action By User, [a64816811a8095a1114235d637ce26da], " With-out even the identified as "No Action by User" which is not true, there was not any selectable options on said warning nor my selection for handling the detection as shown above. I believe these are being installed by Microsoft's Community Forums. I have removed them myself, no thanks to MBAM Premium (Pd) version 2.2.1.1043. Link to post Share on other sites More sharing options...
Staff Ried Posted October 12, 2016 Staff ID:1066384 Share Posted October 12, 2016 Hello NTxLS, I'd like to begin by getting a look at the Malwarebytes Anti-Malware internal installation and settings details. Please download our diagnostic tool, mbam-check.exe to your desktop from this link. https://downloads.malwarebytes.org/file/mbam_check Double-click it to run it. The log which opens will be saved to your desktop as CheckResults.txt. Please attach this log to your next reply. Link to post Share on other sites More sharing options...
NTxLS Posted October 19, 2016 Author ID:1067253 Share Posted October 19, 2016 Ried STAFF, Most all forums I hold membership, approximately 60, the "Follow" the thread where I post is automatically set, did not know nor realize your's is different. Have followed AURA's instructions. It is becoming obvious to me that MBAM is the culprit that keeps installing these "Non-Threats" when the removal of said, "Non-Threat" causes a need to "ReBoot" so it may read the Registry Files so this is reinserted. As long as I do not follow that one instruction the "Non-Threats" remain off of my system, only returning when there is a requirement of a 'ReBoot' by some other feature installed, like updates from Microsoft. I am not a "Dumb" user have been using computers since before the World Wide Web (www) was ever developed working in DOS plus using Unix software to surf the Network before the WWW or even Windows were ever developed. My knowledge is 'self taught' and many have attempted to pull the proverbial 'wool over my eyes' and are UNSUCCESSFUL. Your request is in process and have noticed it does not require Admin Level to run said program Link to post Share on other sites More sharing options...
NTxLS Posted October 19, 2016 Author ID:1067264 Share Posted October 19, 2016 Ried, Here is the file you requested, there are some data within that file that is INCORRECT plus some data that does NOT pertain to my issues. I did review it prior to sending said file. When may I receive information on your evaluation? Excuse me please? For some unknown reason that file is not uploadable to your forums, keep getting an ERROR message and failure to upload. The file is only 160KB and now this reply is not being accepted by your forums. Link to post Share on other sites More sharing options...
NTxLS Posted October 19, 2016 Author ID:1067265 Share Posted October 19, 2016 Ried STAFF, Am attempting to upload that file again, CheckResults.txt size 159KB: CheckResults.txt Link to post Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now