C:\Windows\SysWOW64\regsvr32.exe problem

A

alphonseda

New Member
Thread author
Jul 14, 2018
5
0
2
Minnesota
Malwarebytes reports problems coming from here. I'd appreciate advice on how to proceed. I see some regular reports suggesting to start with FRST and adding the 2 txt files FRST & Addition. However it occured to me that I ran a quarantine from MWBytes after running these, so please let me know if I should re-run. I'd also love to learn how to read an understand the fix if you have any advice on how to proceed. Thanks! nb
 

Attachments

This all started a little over a week ago when I was using my work VPN on my personal PC. My work admin detected a virus on my PC (how, I don't know) and shut down my VPN. I downloaded Malwarebytes at the advice of my office PC support. Every scan keeps showing the same number (22) of pup.optional.incredibar. I quarantine them and they reappear. I also see live website blocks periodically from C:\Windows\SysWOW64\regsvr32.exe. Will getting rid of the Adware resolve this, and how do I find it and get rid of it? Thanks!
 
MalwareBytes stores Website blocked and Scan log reports. Can you export the latest Website blocked report where it shows regsvr32.exe?
 
I don't know why, but I am no longer getting reports of website blocks. However I keep getting 22 PUPs when I scan, quarantine, and scan again they're still there. If these seem innocuous or if you think a different scan might reveal something, I'd appreciate your thoughts. Thanks again for your assistance!
 
FRST.gif
Scan with Farbar Recovery Scan Tool

Please re-run Farbar Recovery Scan Tool to give me a fresh look at your system.
  • Right-click on
    FRST.gif
    icon and select
    RunAsAdmin.jpg
    Run as Administrator to start the tool.
    (XP users click run after receipt of Windows Security Warning - Open File).
  • Make sure that Addition.txt option is checked.

    2873ryc.png

  • Press Scan button and wait.
  • The tool will produce two logfiles on your desktop: FRST.txt and Addition.txt.
Please attach report into your next reply.
 

You may also like...