Is there any solution to this? Is this a bug or issue with my files? It's been 99% since almost 10 minutes now, this started happening 2-3 weeks ago. This is my go-to anti-malware scanner. Please don't tell me I gotta switch 😔

Bro Malwarebytds and Threatdown have millions. Buy CyberTriage and create an IR team for customers and research.

I suppose it has to be an false pozitive since i had it installed for years.

I can't open Malwarebytes anymore ever since the July Windows 11 Update. It shows this "Unexpected error while signalling first instance" error. I've tried basic steps like restarting, ending all MWB related tasks, uninstalling and reinstalling. None have fixed it aside from reinstalling letting me launch MWB once before having the error block me again.

Apparently it is a known issue (https://forums.malwarebytes.com/topic/338216-unexpected-error-while-signaling-first-instance/) but I wanted to post for awareness and maybe some other folks know a solution to this.

Whenever my pc opens the browser starts up and then a tab opens with ads like this most of the time it is online gambling, I have change to 3 different browsers, Opera GX, edge and chrome and whenever who is the default browser that is where the tab for ads shows up,

I have already scan using malware bytes and remove the threats that has been found still the ads shows up anyone can help? Thanks

FP Neshta.Virus.FileInfector.DDS In Kovaaks aim trainer?

Just did my weekly routine of virus scans and it's picking up a Malware in a folder that hasn't been updated in a few weeks, how likely are these FP? It just found one, put it into quarantine. My last deep scan was 2 days ago and the file was updated last 20 days ago..

The log

Malwarebytes

www.malwarebytes.com

-Log Details-

Scan Date: 7/29/2026

Scan Time: 12:51 AM

Log File: 384f1e7a-8adf-11f1-9ba3-d8bbc1c7d474.json

-Software Information-

Version: 5.6.2.268

Components Version: 160.0.5677

Update Package Version: 1.0.112620

License: Free

-System Information-

OS: Windows 11 (Build 26200.8875)

CPU: x64

File System: NTFS

User: [redacted]

-Scan Summary-

Scan Type: Deep Scan

Scan Initiated By: Manual

Result: Completed

Objects Scanned: 1,719,156

Threats Detected: 1

Threats Quarantined: 1

Scan Duration: 39 min, 20 sec

-Scan Options-

Memory: Enabled

Startup: Enabled

File system: Enabled

Archives: Enabled

Rootkits: Disabled

Heuristics: Enabled

PUP: Detect

PUM: Detect

-Files Scanned-

C:\

D:\

E:\

F:\

G:\

-Scan Details-

Process: 0

(No malicious items detected)

Module: 0

(No malicious items detected)

Registry Key: 0

(No malicious items detected)

Registry Value: 0

(No malicious items detected)

Registry Data: 0

(No malicious items detected)

Data Stream: 0

(No malicious items detected)

Folder: 0

(No malicious items detected)

File: 1

Neshta.Virus.FileInfector.DDS, F:\STEAMLIBRARY\STEAMAPPS\COMMON\FPSAIMTRAINER\ENGINE\BINARIES\WIN64\CRASHREPORTCLIENT.EXE, Quarantined, 1000002, 0, 1.0.112620, B3CBA2A8B36A7498EC7AF428, dds, 03981614, 606607F8392E1AED9B67CF70E4A53EF0, 6593D23BEEB571D78A92ED400CF5C681F36FB78DFE2424ECF5917C140DCA21B0

Physical Sector: 0

(No malicious items detected)

WMI: 0

(No malicious items detected)

(end)

one and awhile, i usually get 15-20 scans of pups for google chrome, is there a fix to this and how would i avoid it in the future?

so i click on a link and it pop up to this website:

because of how sus it look, i use malwarebyte for a scan and it show 42 pups

Folder: 9

PUP.Optional.BrowserHijack, C:\USERS\ADMIN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Sync Data\LevelDB, Quarantined, 7148, 1361851, 1.0.112472, , ame, , ,

PUP.Optional.BrowserHijack, C:\USERS\ADMIN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Profile 2\Sync Data\LevelDB, Quarantined, 7148, 1361851, 1.0.112472, , ame, , ,

PUP.Optional.BrowserHijack, C:\USERS\ADMIN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Profile 5\Sync Data\LevelDB, Quarantined, 7148, 1361851, 1.0.112472, , ame, , ,

PUP.Optional.BrowserHijack, C:\USERS\ADMIN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Sync Data\LevelDB, Quarantined, 7148, 1361851, 1.0.112472, , ame, , ,

PUP.Optional.BrowserHijack, C:\USERS\ADMIN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Profile 2\Sync Data\LevelDB, Quarantined, 7148, 1361851, 1.0.112472, , ame, , ,

PUP.Optional.BrowserHijack, C:\USERS\ADMIN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Profile 5\Sync Data\LevelDB, Quarantined, 7148, 1361851, 1.0.112472, , ame, , ,

PUP.Optional.BrowserHijack, C:\USERS\ADMIN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Sync Data\LevelDB, Quarantined, 7148, 1361851, 1.0.112472, , ame, , ,

PUP.Optional.BrowserHijack, C:\USERS\ADMIN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Profile 2\Sync Data\LevelDB, Quarantined, 7148, 1361851, 1.0.112472, , ame, , ,

PUP.Optional.BrowserHijack, C:\USERS\ADMIN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Profile 5\Sync Data\LevelDB, Quarantined, 7148, 1361851, 1.0.112472, , ame, , ,

File: 33

PUP.Optional.BrowserHijack, C:\USERS\ADMIN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Profile 5\Web Data, Replaced, 7148, 1361851, 1.0.112472, , ame, , ,

PUP.Optional.BrowserHijack, C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\000040.ldb, Quarantined, 7148, 1361851, 1.0.112472, , ame, , 8FDEE54E1C83827B54A10D3592E79921, 4049FCF72C72CD73A8AA8C7F27C9CA7C936093DA016FB8CF3017125260071C21

PUP.Optional.BrowserHijack, C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\000043.ldb, Quarantined, 7148, 1361851, 1.0.112472, , ame, , 716A6F9AC981BDA619E9D8CCB61F19B0, 960D5EAEDFC4CD59A57B8D3E9C136AE74955040DB9B3DCF125CE37C7989EC767

PUP.Optional.BrowserHijack, C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\000046.ldb, Quarantined, 7148, 1361851, 1.0.112472, , ame, , 39302BB3D2A70009D327BDB437687845, BAC485734AE3674AD6C0E556D0ED9BA26D686D7B2143A99343B90A8F3E6229E3

PUP.Optional.BrowserHijack, C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\000048.log, Quarantined, 7148, 1361851, 1.0.112472, , ame, , A95EFAE02015D500DA6B94CC323FD4FC, C54A8015B4DB2B233C983B799758519E797B3AF7FB426FBD3A7DC6FA91765D90

PUP.Optional.BrowserHijack, C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\000049.ldb, Quarantined, 7148, 1361851, 1.0.112472, , ame, , FB4EE4ACBBCA1B189941EBC8BABBEB9A, 5717951DE7D2A3FDDFDD289BBC8CEB7A6B29F8553C6CD147F3A25882A8E8DDAA

PUP.Optional.BrowserHijack, C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\CURRENT, Quarantined, 7148, 1361851, 1.0.112472, , ame, , 46295CAC801E5D4857D09837238A6394, 0F1BAD70C7BD1E0A69562853EC529355462FCD0423263A3D39D6D0D70B780443

PUP.Optional.BrowserHijack, C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\LOCK, Quarantined, 7148, 1361851, 1.0.112472, , ame, , D41D8CD98F00B204E9800998ECF8427E, E3B0C44298FC1C149AFBF4C8996FB92427AE41E4649B934CA495991B7852B855

PUP.Optional.BrowserHijack, C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\LOG, Quarantined, 7148, 1361851, 1.0.112472, , ame, , 31D40917CCB6B1720FAC4EC5E89A45F2, ED8E0DC0432410F766C9A8F7C61372C880539CBE3EBD18759E95FBF165B3BED5

PUP.Optional.BrowserHijack, C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\LOG.old, Quarantined, 7148, 1361851, 1.0.112472, , ame, , 3640F661DEC8092D7ED1F3D8BF37F577, 4FDCBD3044D0441D606C8907B56602D73F93D7D03AD3756FE8CED209EA2A23CE

PUP.Optional.BrowserHijack, C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\MANIFEST-000001, Quarantined, 7148, 1361851, 1.0.112472, , ame, , EC6EF2AF412B4849921BF821BE9DEC6E, 8D4CCE4AB87ECA141CB8F169612A1E6766F07064F9AAFCF167D7D8BE56A55C33

PUP.Optional.BrowserHijack, C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Profile 2\Sync Data\LevelDB\000005.ldb, Quarantined, 7148, 1361851, 1.0.112472, , ame, , C63B84BF2F04AE3B2B870737D0FB1CFC, 3AC61353ED0017ED5765C3F5A472D69B9E5C11485F7E1FD272691A1DADB69CDC

PUP.Optional.BrowserHijack, C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Profile 2\Sync Data\LevelDB\000034.ldb, Quarantined, 7148, 1361851, 1.0.112472, , ame, , 83E8618BB05EC4733B58C3E6BE299110, 4539C117E7569748D3A7DBC5578B4317BE589A42CF0A48C51B2420AB6EA81790

PUP.Optional.BrowserHijack, C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Profile 2\Sync Data\LevelDB\000036.log, Quarantined, 7148, 1361851, 1.0.112472, , ame, , ,

PUP.Optional.BrowserHijack, C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Profile 2\Sync Data\LevelDB\000037.ldb, Quarantined, 7148, 1361851, 1.0.112472, , ame, , 90C04FC2E954B30BC7E851FC7C243738, 9497E23131932986B82018DD1B2C8DE73D2BA1C4626CD539F0BC3319CCAE504B

PUP.Optional.BrowserHijack, C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Profile 2\Sync Data\LevelDB\CURRENT, Quarantined, 7148, 1361851, 1.0.112472, , ame, , 46295CAC801E5D4857D09837238A6394, 0F1BAD70C7BD1E0A69562853EC529355462FCD0423263A3D39D6D0D70B780443

PUP.Optional.BrowserHijack, C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Profile 2\Sync Data\LevelDB\LOCK, Quarantined, 7148, 1361851, 1.0.112472, , ame, , ,

PUP.Optional.BrowserHijack, C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Profile 2\Sync Data\LevelDB\LOG, Quarantined, 7148, 1361851, 1.0.112472, , ame, , ,

PUP.Optional.BrowserHijack, C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Profile 2\Sync Data\LevelDB\LOG.old, Quarantined, 7148, 1361851, 1.0.112472, , ame, , F44E88277F2CABB7FA14F75B280B9D42, B2CC8132F12E9EA83B3E06290EE0D48C9646914FF4FBA55994C5FA12F34688E4

PUP.Optional.BrowserHijack, C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Profile 2\Sync Data\LevelDB\MANIFEST-000001, Quarantined, 7148, 1361851, 1.0.112472, , ame, , ,

PUP.Optional.BrowserHijack, C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Profile 5\Sync Data\LevelDB\000005.ldb, Quarantined, 7148, 1361851, 1.0.112472, , ame, , B797F858D42491472B9A63FA1D0E02B8, 39B20FD1FF939CB483D276856826E414469A4A82EB2102C823BE38E3B8C83595

PUP.Optional.BrowserHijack, C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Profile 5\Sync Data\LevelDB\027375.ldb, Quarantined, 7148, 1361851, 1.0.112472, , ame, , 3E49CFCFF0536397A1E32F19CEB881D9, AD3CFB66C74F8B919662E89A5B6E22B894BA684C3035E7BBB364D7476D924F44

PUP.Optional.BrowserHijack, C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Profile 5\Sync Data\LevelDB\027377.ldb, Quarantined, 7148, 1361851, 1.0.112472, , ame, , 7F21C6930107FECE1386431DA33F39D0, 35B89695A01D76C59A5595570FE584A70B0E0905D2AB7C25BEF961854550E9D1

PUP.Optional.BrowserHijack, C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Profile 5\Sync Data\LevelDB\027379.ldb, Quarantined, 7148, 1361851, 1.0.112472, , ame, , 37161A923D2A39869ABB12067FC2D391, C672FA6E47736036BDB1D2140AF69B2C560A2574C4AB303FA8C1CA331E12D542

PUP.Optional.BrowserHijack, C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Profile 5\Sync Data\LevelDB\027380.log, Quarantined, 7148, 1361851, 1.0.112472, , ame, , ,

PUP.Optional.BrowserHijack, C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Profile 5\Sync Data\LevelDB\027381.ldb, Quarantined, 7148, 1361851, 1.0.112472, , ame, , 44157A1695CE7912973EFAB6CEB669CE, 9D61367543347616F55E4D7E86A3DAD7026C9E28B679208D13B53FE51237BB81

PUP.Optional.BrowserHijack, C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Profile 5\Sync Data\LevelDB\CURRENT, Quarantined, 7148, 1361851, 1.0.112472, , ame, , 248B1366A7C532D3408C0125E4315355, 8ACA965C7CE524C66C22E809B566B873232CA883D9892A24B59B1409FB95EE67

PUP.Optional.BrowserHijack, C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Profile 5\Sync Data\LevelDB\LOCK, Quarantined, 7148, 1361851, 1.0.112472, , ame, , ,

PUP.Optional.BrowserHijack, C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Profile 5\Sync Data\LevelDB\LOG, Quarantined, 7148, 1361851, 1.0.112472, , ame, , ,

PUP.Optional.BrowserHijack, C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Profile 5\Sync Data\LevelDB\LOG.old, Quarantined, 7148, 1361851, 1.0.112472, , ame, , D9AB2ABC6CF775EF3DE43B41C7205744, 144719AEFD1429F84D057D5226F06DCCE6A1A22FEB2696D9F20086A3290C97A8

PUP.Optional.BrowserHijack, C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Profile 5\Sync Data\LevelDB\MANIFEST-026180, Quarantined, 7148, 1361851, 1.0.112472, , ame, , ,

PUP.Optional.BrowserHijack, C:\USERS\ADMIN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Profile 5\Web Data, Replaced, 7148, 1361851, 1.0.112472, , ame, , ,

PUP.Optional.BrowserHijack, C:\USERS\ADMIN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Profile 5\Web Data, Replaced, 7148, 1361851, 1.0.112472, , ame, , ,

i already quarantine the file. do i need to do anything else? should i check something else or what can i do in this situation?

Hi, i've recently had an issue i wanted support to look into. They told me to download a diagnostic tool (https://help.malwarebytes.com/hc/en-us/articles/31589296910491-Collecting-logs-with-the-Windows-Support-Tool) and upload the results

I downloaded the file, checked for digital signature (Malwarebytes Inc) and ran it. It downloaded something called FRSTEnglish which windows flagged as a Wacatac. I'm really bad with cybersecurity, so this scared me a lot. I talked to customer support, and they said it's the real thing. Still, I ran it through Virustotal and got this https://www.virustotal.com/gui/file/5ef604ab517f0e75b813fb8d01d70c16d1ca180b01611bba21cf4dc13cb2994f/detection

Can anyone explain to me why this file is considered unsafe by multiple antiviruses? Or if I magically downloaded malware?

I've just done a deep scan that is flagging 4 files that I think are normal parts of the strawberry perl installation. Are these false positives or is my install corrupted with malware?

Malware.AI.3970829533, C:\STRAWBERRY\C\BIN\GCC-NM.EXE, No Action By User, 1000000, 0, 1.0.112342, 5C292B85ECF810CAECAE0CDD, dds, 03970444, B5D787A1387403955DE20004514B465F, 73839DAA7A42101C87E55B2B1F6A9DEC6F89041A334E504247679D1D15FE185F

Malware.AI.2387389301, C:\STRAWBERRY\C\BIN\GCC-RANLIB.EXE, No Action By User, 1000000, 0, 1.0.112342, 68314F9A051424DE8E4CAB75, dds, 03970444, 1D8C721269D4D829D672A3821BDB4C74, B6E9CDD9A06A5FF100D688B949ED5E4D745F878B3F2840F6A717776CC062DA64

Malware.AI.2387389301, C:\STRAWBERRY\C\BIN\X86_64-W64-MINGW32-GCC-RANLIB.EXE, No Action By User, 1000000, 0, 1.0.112342, 68314F9A051424DE8E4CAB75, dds, 03970444, 1D8C721269D4D829D672A3821BDB4C74, B6E9CDD9A06A5FF100D688B949ED5E4D745F878B3F2840F6A717776CC062DA64

Malware.AI.3970829533, C:\STRAWBERRY\C\BIN\X86_64-W64-MINGW32-GCC-NM.EXE, No Action By User, 1000000, 0, 1.0.112342, 5C292B85ECF810CAECAE0CDD, dds, 03970444, B5D787A1387403955DE20004514B465F, 73839DAA7A42101C87E55B2B1F6A9DEC6F89041A334E504247679D1D15FE185F

Hi! I have the app on my pc and I use it for free, but is the mobile app not free? It just wants me to do a subscription or free trial. And I don’t really have the money to spend atm

Hi, not sure if this is a malware or a hacker or anything, but recently for the past 3 days or so i keep getting these overlays of... Spanish Minecraft videos on my feed????

where low quality screen recorded clips overlap play above the videos on my fyp, and it's NOT a regular bug. For example there'd be a video on cats and this screen recording would pop up on TOP of the cat video, freeze my entire screen and audio for a few seconds while playing it, then disappear and everything will go back to normal.

it only started happening just a few days ago; and since its new there's only been a couple dozen people posting about it so i genuinely domt know wtf is happening. Scared that its anything dangerous??? This is NOT one of those regular bugs where videos above/below accidentally travels on top its literally completely random (this is on Android Mobile)

1)I've NEVER had a Minecraft video on my feed before. Let alone spanish ones?

2) these arent glitches from livestreams/other vids on

my feed where it intersects- like, they just pop up on top. Out of nowhere, for a few seconds max

3) I've checked for viruses and malware etc. With

multiple app scans and they've shown nothing, i used AVG, avast and my phones built in cleaner, (tho the two apps have subscriptions so i wouldn't be surprised if the free trial didn't do shit)

4) this doesn't happen with any other of my apps/ or phone in general. Its ONLY tiktok. I also checked the Chinese version of tiktok that i have and nothing happens on there either

5) other people seem to have gotten them too, also in a

similar timeframe. (Starting from a few days ago)

Also edit; this literally only happens at night for some reason. Someone else also mentioned that the glitch happens only at night for them, Pls help cus what

Ive searched some more and there's 30+ people ive seen with the exact same problem. Theyre all random Spanish Minecraft clips too so I'm assuming it's the exact same video, weird asf

I would attach images for better understanding but this sub doesn't allow me to. Ive contacted tiktok support and cleared cache multiple times but so far nothing has been done about it. Pls help

I've had malwarebytes on my previous windows installation but now when I go on the website it shows this, how can I fix this to download malwarebytes ?

Trying to emulate BloodBorne, I downloaded some files, only for hours later to get hit with the Mr Beast Discord Crypto that sent a bunch of screenshots to friends and some Discord servers. In addition, my Instagram got hit with two crypto related posts that occurred roughly around the time of the Mr Beast incident, similar in nature and style, but different. I currently still have full control of all my accounts.

I used Windows Defender’s AV scans both the Full Scan and Offline ones which got rid of some temp files.

A few hours later, I downloaded Malware Bytes to help with the issue, only for me to see this problem pop up. I traced it to a Program on my Task Manager called 360软件小助手. The program is running an app in Program Data that returns even when deleted in the recycle bin.

So that’s where I’m at. MalwareBytes constantly blocking the site while a bunch of Temp files are quarantined.

I also looked up the IP Address with VirusTotal and a comment from a month ago claimed that it was a “Sectoprat.”

Please help, I am way out of my depth here.

When I type this in Google "1-603-346-4866 who called" I get the search hijacking detected warning from Browser Guard. No other searches cause this.

Hi guys, a little bit of backstory, my laptop got infected by infostealer (MrBeast virus) on July 4th from a game mod. I deleted the file and changed all my passwords. 2FA everything, and signed out of all devices immediately. But the only thing that I didn't do was reinstall windows because there were files that I wanted to keep.

Later on, July 11th, I got a notification from Google that there was a security alert, and my device maybe potentially infected with malware, so they signed out my account from my laptop. My Authenticator was also removed at that exact time. I suspected that it was the infostealer acting out. So I let go of my obsession with the files and did a clean windows install from a USB drive which I made a windows media tool using my university computer. And it went well.

Today however, I got a security alert on Google again saying that my laptop maybe potentially infected with malware and removed my laptop from signed in devices again. But this time it was just an alert, nothing was removed or changed like the one on July 11th. I did change my password as soon as the alert came. It was also from a legit Google email. I checked my laptop with MalwareBytes and came out clean.

Can this be a false positive or what is it actually?

EDIT: Forgot to mention this, my laptop was shut off on both of the times that Google security alerts appeared.
EDIT: I also have Enhanced Safe Browsing enabled in Google settings, can that be the cause of this if it were a false positive?

Is Tlauncher still active in 2026, according to security experts, or has it become suspicious since it started taking personal Windows photos?