Our PC has been repeatedly getting THREAT DETECTED popups for probably a week or two but I hadn’t noticed until I used the machine; the primary user had mentioned it but not how frequent it is (every 5-10 minutes).
At first I thought it was a good thing b/c I figured it was blocking bad things from getting onto the computer when she was browsing. I ran a system scan on Avast and a malwarebytes scan which turned up a few things and figured that got rid of it. But it kept happening and I realized recently it happens anytime, not just when browsing. All of the warnings reference either wvydeo or xmlka, both of which seem to be common.
Hard to say if it’s connected or not but since this began this computer has been slow to communicate with the printer and as of right now does not appear to be printing at all.
I’ve got my most recent scans attached:
-screencap of the popup message with file name & process
-malwarebytes, tonight + the one from 11-11 which turned up a few things
-farbar FRST log
looks like I maxed out on attachments, will do a second post with additional attachments.
Yep, it only let me post 4… ADDITION is attached here along with an aswmbr.txt log as well.
I also ran Hitman Pro at the suggestion of another forum and it found bunch of things. No idea where the log got saved though, can’t fin it but could easily run another if necessary.
I assume that means I should turn off Defender then? (Being not very technically competent, I can use directions as specific as possible…) I had no idea it was on/enabled/whatever.
Will do and will let you know if threats keep on being detected…
Omg, this stupid forum software is still doing it.
We have to do this again:
1. Open notepad and copy/paste the text present inside the code box below. To do this highlight the contents of the box and right click on it. Paste this into the open notepad. NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to the operating system
2. Save notepad as fixlist.txt to your Desktop. NOTE: => It’s important that both files, FRST and fixlist.txt are in the same location or the fix will not work.
3. Run FRST/FRST64 and press the Fix button just once and wait. If the tool needed a restart please make sure you let the system to restart normally and let the tool completes its run after restart.
The tool will make a log on the Desktop (Fixlog.txt). Please attach it to your reply. Note: If the tool warned you about the outdated version please download and run the updated version.
[]Remove disinfection tools
[]Purge system restore
[*]Reset system settings
[*]Push Run and wait until the tool completes his work. All tools we used should be gone. Tool will create an report for you (C:[B]DelFix.txt). I don’t need it for review.
Tool deletes old system restore points and creates a fresh system restore point after cleaning.
Step 2. - Tips and tricks to keep your computer clean, safe and in a good shape.
Additional software that I personally use and install on all my clients devices:
[]Malwarebytes’ Anti-Malware (paid version highly recommended) - to scan your system from time to time in search for malware.
[]Malwarebytes’ Anti-Exploit - to prevent plenty of mostly exploited vulnerabilities.
[]McShield - to prevent infections spread by removable media.
[]Unchecky - to prevent from installing additional foistware, implemented in legitimate installations.
[*]Adblock - to surf the web without annoying ads!
[*]Qualys BrowserCheck - cloud service that scans your browsers and plugins to see if they’re all up-to-date.
