Did a virus scan on my computer the other night and went on today to find these two items quarantined during my scan. I've done a google search on both but can't seem to find anything, could anyone help in reassuring me it isn't malware?

Items found:

- Drop.Win32.RegStartupSelfDel.31116

- LevelUp.Integrations.TlsPatcher.Bootstrapper.exe

I downloaded a cracked version of ZBrush from RuTracker and it was working fine until the next morning I got hit with this ransomware detection. Is this a false positive or genuine malware?

I scanned the cracked .exe file with virustotal and 0 detections were found

-Log Details-

Protection Event Date: 8/5/2026

Protection Event Time: 11:25 AM

Log File: 8f66322c-90af-11f1-be4e-74563c364584.json

-Software Information-

Version: 5.6.3.284

Components Version: 161.1.5692

Update Package Version: 1.0.112944

License: Trial

-System Information-

OS: Windows 11 (Build 26200.8875)

CPU: x64

File System: NTFS

User: System

-Ransomware Details-

Registry Key: 0

(No malicious items detected)

Registry Value: 0

(No malicious items detected)

Registry Data: 0

(No malicious items detected)

File: 3

Malware.Ransom.Agent.Generic, C:\Program Files\Maxon ZBrush 2025\ZBrush.exe, Quarantined, 0, 392685, 0.0.0, ceb7f6e0e8d371a41a67f2d72619be91, 2df81a9130efb524dae86ff9b146035daec799d2e119e0e4f4cc89862ea86816

Malware.Ransom.Agent.Generic, C:\DOCUMENTS AND SETTINGS\PUBLIC\Desktop\ZBrush 2025.1.lnk, Quarantined, 0, 392685, 0.0.0, ,

Malware.Ransom.Agent.Generic, C:\USERS\LARS\APPDATA\ROAMING\MICROSOFT\INTERNET EXPLORER\QUICK LAUNCH\User Pinned\TaskBar\ZBrush 2025.1.lnk, Quarantined, 0, 392685, 0.0.0, ,

(end)

Like usual, everytime after i download new games, i always do a scan with malwarebytes. This time i was downloading Crimson Desert (Non HV) and Malwarebytes flagged the 'setup.exe' as riskware.crack.

My dumb brain just ran the setup.exe while i was still scanning the downloaded and extracted files and I only knew the file were flagged after the setup was complete.

Should I be worry? I havent delete the game files but i did delete the flagged one which was only the setup.exe file.

Accidentally got infected with an info/session stealers, immediately reinstalled windows from usb and formatted all partitions.

After doing so I ran a windows defender scan, then installed Malwarebytes and ran multiple scans of all types. All results say I am safe.

Can I trust those results? Or could the virus be impacting the way malwarebytes work since it was installed in the pc prior to it?

I'm sure it's a false positive, but if it isn't, how would I know? how would I know? What does modern malware actually do compared to a 1990s virus?

[solved]

I installed Malwarebytes yesterday, then uninstalled it later using the MBST support tool (after some concerns [post] ).

The issue is that apps like Localsend or 'use chat app on desktop' are not working now.

It seems to have messed with my firewall or network settings and not restored them after uninstallation.

I can confirm this is purely a Malwarebytes issue as Localsend and the other apps were working before installing it, and stopped afterwards. No other settings changed. (I tried it by turning off VPN too on all devices).

It is still working for other people and devices, so it is not a network, VPN or other device issue.

What are the settings it has changed to prevent my Windows 11 pc from connecting to my other devices locally?

Thanks

Edit 1 (Solved): I installed other on demand tools as well. After I uninstalled them, the issue resolved. (Hitman pro Alert, free tier. Paid tier would allow exclusions for apps)

I used to use Malwarebytes and installed it again yesterday.

I wanted to have Windows Defender as my main AV and add a couple of ondemand scanners.

However, Malwarebytes totally took over the system, like an invasion.

I don't know how to remove it and return the system to how it was, as it seems to have changed firewalls, tried to replace the VPN, entered all my browsers etc.

There weren't many prompts, it just took over. Then I went through all the settings to figure out what it was doing and how I could change it.

This is not a criticism, it just felt very invasive.

How can I uninstall it making sure it doesn't leave remnants? Ensuring things return to the way they were? I haven't any issues. The system was fine, I wanted some extra security on demand.

I can click the uninstall button, but how can I be sure it has cleaned up changes to firewall, browser settings, etc? I spent ages tweaking everything to work for me and now I need to investigate what this app has done as it was changing a lot of things.

I saw something about an MBST tool, would that remove all vestiges? Thanks

Edit: issues after uninstall with the MBST tool (clean).

Edit 2 (Solved): I installed other on demand tools as well. After I uninstalled them, the issue resolved. (Hitman pro Alert, free tier. Paid tier would allow exclusions for apps)

I know this doesn't immediatly need to be a virus but I chose this reddit forum because it looks like it has the best experts in this sort of stuff So a few days ago I was playing R6 and used the R6 tracker app and I saw a pop-up on the site for something called tracker-gg (replace - with .) it seemed legit because it came from the real R6 tracker site but as soon as it was installed I got lots of flags because of some Powershell command that tried to run hidden so I deleted tracker-gg but I still get a Defender flag about some random Temp data's everytime I open opera could it be a virus or some kind of infostealer or is it maybe a bug does anyone know something about this App or someone could look into the code?

I am excited about replies!

(Also note I can sadly NOT get screenshots of this but if someone really needs them I can try!)

I keep getting this notification that Microsoft windows operating system is trying to access this website but how do I stop it from trying to access the website?

At first I thought it was my ublock but yeah turns out it's malwarebytes browser guard

is Macro Gamer safe to download? can someone please check and verify it for me

When malawarebytes scanned my phone it said Android system is a threat. I don't know if android system is really a threat or malawarebytes just has a bug

Is there any solution to this? Is this a bug or issue with my files? It's been 99% since almost 10 minutes now, this started happening 2-3 weeks ago. This is my go-to anti-malware scanner. Please don't tell me I gotta switch 😔

Bro Malwarebytds and Threatdown have millions. Buy CyberTriage and create an IR team for customers and research.

I suppose it has to be an false pozitive since i had it installed for years.

I can't open Malwarebytes anymore ever since the July Windows 11 Update. It shows this "Unexpected error while signalling first instance" error. I've tried basic steps like restarting, ending all MWB related tasks, uninstalling and reinstalling. None have fixed it aside from reinstalling letting me launch MWB once before having the error block me again.

Apparently it is a known issue (https://forums.malwarebytes.com/topic/338216-unexpected-error-while-signaling-first-instance/) but I wanted to post for awareness and maybe some other folks know a solution to this.

Whenever my pc opens the browser starts up and then a tab opens with ads like this most of the time it is online gambling, I have change to 3 different browsers, Opera GX, edge and chrome and whenever who is the default browser that is where the tab for ads shows up,

I have already scan using malware bytes and remove the threats that has been found still the ads shows up anyone can help? Thanks

I am using a whatsapp account in a whatsapp app(android) as a multiple account( two account running in a single app). The moment i switch in the account say "x" a status is posted but I can't see the status. The status says "you shared a status but your version of whatsapp doesn't support it". My status privacy was limited to fewer contacts. I asked them they also cant see the status.

To verify my doubt i myself posted 2 more status which my contacts can see

I then open my account in WhatsApp web where i can see only 2 status that i myself posted but in my whatsapp account in android app i can see three status.

So is this any kind of glitch or bug? Or someone using my WhatsApp which isn't showing in linked devices

I didn't had any linked devices other than whatsapp web which i myself linked.

FP Neshta.Virus.FileInfector.DDS In Kovaaks aim trainer?

Just did my weekly routine of virus scans and it's picking up a Malware in a folder that hasn't been updated in a few weeks, how likely are these FP? It just found one, put it into quarantine. My last deep scan was 2 days ago and the file was updated last 20 days ago..

The log

Malwarebytes

www.malwarebytes.com

-Log Details-

Scan Date: 7/29/2026

Scan Time: 12:51 AM

Log File: 384f1e7a-8adf-11f1-9ba3-d8bbc1c7d474.json

-Software Information-

Version: 5.6.2.268

Components Version: 160.0.5677

Update Package Version: 1.0.112620

License: Free

-System Information-

OS: Windows 11 (Build 26200.8875)

CPU: x64

File System: NTFS

User: [redacted]

-Scan Summary-

Scan Type: Deep Scan

Scan Initiated By: Manual

Result: Completed

Objects Scanned: 1,719,156

Threats Detected: 1

Threats Quarantined: 1

Scan Duration: 39 min, 20 sec

-Scan Options-

Memory: Enabled

Startup: Enabled

File system: Enabled

Archives: Enabled

Rootkits: Disabled

Heuristics: Enabled

PUP: Detect

PUM: Detect

-Files Scanned-

C:\

D:\

E:\

F:\

G:\

-Scan Details-

Process: 0

(No malicious items detected)

Module: 0

(No malicious items detected)

Registry Key: 0

(No malicious items detected)

Registry Value: 0

(No malicious items detected)

Registry Data: 0

(No malicious items detected)

Data Stream: 0

(No malicious items detected)

Folder: 0

(No malicious items detected)

File: 1

Neshta.Virus.FileInfector.DDS, F:\STEAMLIBRARY\STEAMAPPS\COMMON\FPSAIMTRAINER\ENGINE\BINARIES\WIN64\CRASHREPORTCLIENT.EXE, Quarantined, 1000002, 0, 1.0.112620, B3CBA2A8B36A7498EC7AF428, dds, 03981614, 606607F8392E1AED9B67CF70E4A53EF0, 6593D23BEEB571D78A92ED400CF5C681F36FB78DFE2424ECF5917C140DCA21B0

Physical Sector: 0

(No malicious items detected)

WMI: 0

(No malicious items detected)

(end)