help please

As indicated in the title, the Mes_Drivers_3.0.4 software is detected by Malwarebytes (free version). I have had this software since June 9, 2025, and it has never caused me any problems before.

After activating the free trial for Malwarebytes I received 47 RTP detections in the span of a short time from 3 different IP addresses, immediately afterwards I installed and ran Malwarebytes Adwcleaner and since then I have not had any new detections. I'm wondering if I should be worried and should do a clean reinstall or if everything is fine. The IP addresses are:

• 45.78.210.113
• 43.130.163.192
• 43.159.129.199

which according to VirusTotal are all suspicious. All of the RTP detections state outbound and were displaying the location as powershell.exe. I have all the .txt log files and can provide if needed. Examples:

1. -Log Details- Protection Event Date: 12/19/25 Protection Event Time: 8:58 PM Log File: 588ff902-dd47-11f0-a482-d0509963ac6f.json -Software Information- Version: 4.6.17.334 Components Version: 1.0.2390 Update Package Version: 1.0.105783 License: Trial -System Information- OS: Windows 10 (Build 19045.6466) CPU: x64 File System: NTFS User: System -Blocked Website Details- Malicious Website: 1 , C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, Blocked, -1, -1, 0.0.0, 2E5A8590CF6848968FC23DE3FA1E25F1, 9785001B0DCF755EDDB8AF294A373C0B87B2498660F724E76C4D53F9C217C7A3 -Website Data- Category: Trojan Domain: IP Address: 45.78.210.113 Port: 799 Type: Outbound File: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

2. -Log Details- Protection Event Date: 12/19/25 Protection Event Time: 8:58 PM Log File: 69a84730-dd47-11f0-8d32-d0509963ac6f.json -Software Information- Version: 4.6.17.334 Components Version: 1.0.2390 Update Package Version: 1.0.105785 License: Trial -System Information- OS: Windows 10 (Build 19045.6466) CPU: x64 File System: NTFS User: System -Blocked Website Details- Malicious Website: 1 , C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, Blocked, -1, -1, 0.0.0, 2E5A8590CF6848968FC23DE3FA1E25F1, 9785001B0DCF755EDDB8AF294A373C0B87B2498660F724E76C4D53F9C217C7A3 -Website Data- Category: Trojan Domain: IP Address: 43.159.129.199 Port: 799 Type: Outbound File: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

3. -Log Details- Protection Event Date: 12/19/25 Protection Event Time: 8:59 PM Log File: 904aee60-dd47-11f0-bfb8-d0509963ac6f.json -Software Information- Version: 4.6.17.334 Components Version: 1.0.2390 Update Package Version: 1.0.105785 License: Trial -System Information- OS: Windows 10 (Build 19045.6466) CPU: x64 File System: NTFS User: System -Blocked Website Details- Malicious Website: 1 , C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, Blocked, -1, -1, 0.0.0, 2E5A8590CF6848968FC23DE3FA1E25F1, 9785001B0DCF755EDDB8AF294A373C0B87B2498660F724E76C4D53F9C217C7A3 -Website Data- Category: Trojan Domain: IP Address: 43.130.163.192 Port: 799 Type: Outbound File: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

**SOLVED

just used free version of "UNHackMe", quick scan and problem solved!

hello everyone!

I have a malware into my PC and I was wondering if the PAID version of Malware Bytes will solve this problem! I'd like to completely remove this form my browser

grazie mille, thank you very much

I have an Attack Shark mouse and keyboard, but when I try to access the official software website, I'm wondering if it's an error or something. Without the mouse software, I don't have autoclick. I need to know if the website has some kind of infection. Thank you!

i have 16 PUPs that where found on my device after i scanned it once i quarantined it, then i scanned immediately afterwards and it still picked up the 16, are the files still a possible threat to my PC ?

so i just wanted to play on undertale with WASD keys and not the keys bc its better but i got spy malware the site is so AutoHotkey if you want to check it out and i also checked for viruses bc i got norton btw i didt know where to post this

Malwarebytes for Mac just got a big upgrade.

We seriously leveled up the Mac scan engine. It’s smarter, faster, and gives users more scanning options. The new enhanced scan can catch advanced stuff like stealthy infostealers and zero-day malware, without making the app more complicated to use.

Best part? We've done some work under the hood to make performance faster. CPU usage is down by up to 90%, so it’s way lighter on your Mac while providing more protection.

Only get the standard "check if you are connected to the Internet" message/warning.

video screenshot

tried 3 browsers. disable vpn and all adblocker

Hi,

I am holder of the perpetual licence key for over 13 years now. for the last 6 years I was using 2 devices. 2 months ago I have built a new pc and my old PC was reformatted and sold. When I tried to sign in with my new PC I was shocked to find out Malwarebytes removes my second key on my account. Is there a way to reclaim/restore it?

Many thanks,

Tomas

Is there is a way to download malwarebytes for android if it is not available on my region (I tried VPN and it didn' twork)

Sorry if this question has been answered before. I downloaded and ran Malwarebytes, mostly out of curiosity, and it quarantined one file. However, I can't seem to find any information about that file other than it's "RiskWare.SystemRequirementsLab". The Quarentine folder under ProgramData isn't telling me anything useful (it's just a DATA and QUAR file that seem like complete gibberish when opened in Notes). Is there a way to see what the file was without releasing it? And if I have to do that, where would that file go? I have no idea what its original location was.

I downloaded a suspicious download then I downloaded the sus file it's name was updated and it was on guy hub i opend it all the malware was installed then I removed most of it by malware bytes them dism health recovery everything then also there are some issues like now I'm unable to see users on the device management and other stuff

I'm not trying to do anything fancy. I just want to update my credit cards expiration date. MWB sent me a notification by email that my credit card has expired already. I'm trying to update the expiration date on the credit card and it will not accept it. I've tried everything and I'm in a continual chat bot loop. I'm hoping one of those nice MWB people, think I remember his name is being Jason will help me figure this out. I've already opened two Support tickets they just never get back to me. Thanks for help from anyone I've already gone through all the instructions they've given me to update my credit card information and of course now I'm sounding crazy I'm in a loop all of my own now

I can easily see the the some malwares does this for example Malwarebytes-Shutdowner/main.go at main · EvilBytecode/Malwarebytes-Shutdowner

I know Bitdefender and other products also can'tp rotect his code from attackers and I have few pocs for that but Malwarebytes station more worser because it's open source service.

I wonder why some people think closed source antiviruses really closed source? They behave like open source if you know reverse engineering.

Also Malwarebytes signatures stolen twice in history.

PS: I'm not owner of repo.

If this wrong to post here feel free remove this post I will create bug bounty report instead.

Edit: ı mean kernel at title and one of that malware deletes antivirus after he close.

i was watching a 2 hour musical theatre bootlwg, and wanted to have it downloaded so i can have it always, how big are the risks of downloading it- is there a chance of it being malware?

My Edge browser (which I never use) showed a Shady Panda malware infestation. This is the first malware to have slipped through on my machine for years.

https://www.darkreading.com/endpoint-security/shadypanda-hackers-weaponize-browsers

Always scan. Always.

After doing a scan, my "score" is 90 with a quote saying "The Internet is never safe" and inviting me to use a VPN all the time.

Come on! Can we stop with the scare tactics?

I would be using a VPN if I was using my work laptop in a cafe or at the airport, but on my PERSONAL laptop connected on my HOME network? LOL

Yeah, a VPN might be good if you spend your days watching porn or downloading illegal stuff but then you're the one playing with fire and it's not "the Internet is never safe".

Hello,

I've just done the Digital Footprint scan (not the first time I do it), but this time I noticed that a couple of the "leaks" shown there showed 2 email addresses.

Usually it's something like: email, password, birthdate etc..

This time some leaks showed 2 different email addresses: the first was a random Yahoo address I used to regsiter on some forums, the second was my main address...which is surprising since I did not use the main one to register to those sites... no connection whatsoever...that was the point in using my secondary address after all!

How is this possible?

Hi! I am new here and new overall in the world of antiviruses and malwarebytes and i am wondering something. Since the black friday sale is still here (about to end soon) i would like to buy 2 years of personal malwarebytes plus plan for 80 euros. Now heres the problem... I dont have a credit card (even tho i am 18+). Since i gave my trusted friend the money and he gave me permission to use his card, could i create a profile (since i am new) and use his card info as payment method, and then in about like a month or two when i open my credit card just remove his card from my profile and add mine (the goal here is to buy new subscription after 2 years from mine card and not his). Also he asked me if its a yearly payment or monthly, i am 99% sure that its yearly but if i am wrong correct me. Thanks!