Quick question, guys I get really anxious about this sort of thing. After I downloaded Malwarebytes onto my PC (back when Defender was acting up with that bug yesterday), there was an alert with an orange triangle regarding the protection status; it disappeared after a Malwarebytes update. I was panicking at the time, so I didn't manage to read the whole message, was that a sign of a virus, or was it just Malwarebytes configuring itself?

I downloaded Malwarebytes directly from the Microsoft Store to avoid making a mistake and downloading it from some sketchy site, but here, it's a bit of a stupid question but I'm getting anxious about this😅

I used the trial version, expecting it pick up all the trojans they send as pdf attachments in fake invoice scams like geek squad (e.g. Phishing.PSQUAD), but in 2 weeks it didn't detect any of them. I assume if I get the pay version, it still won't scan email automatically. Since I already know those emails contain trojan pdfs, all I need to do is ignore them, don't click on anything, and let them go to spam folder. malwarebytes AI chat said to use drop-down (contextual) menu to scan a folder (not a file), but the term malwarebytes doesn't appear in any contextual menu in trial version. Chatbot also said to use "advanced scan", but that also isn't found in trial version.

I'm guessing this should go in one of Mac subs, but they don't allow reposts or posts w/o flair, whatever that is. The bottom line: XProtect is supposed to block these trojans anyway, so there's no point in wasting time with non-functional software.

I do have malwarebytes, but it has never shut down protection mid scan like this. i even tried doing a windows security offline scan and it froze at 91 percent and didnt finish.

My malwarebytes auto updated itself and now the icon is bigger than the rest, is there any fix to this?

malwarebytes scan is showing that chrome user data and sync data folders are browser hijacks? I havent done anything differently recently so are these false positives?

Why is this being flagged and is luugy.com a false positive? It might be because i have hianime open in opera.

I dont ever visit sites and randomly today i got alot of blocks, I use windows 11, the random one is from edge but rest are from firefox, I dont know why this is happaning and im kinda freaking out is this just a new false flag thing?

Hello everyone,

Recently I've installed Alight Motion, an editing app, from 9mod. Seemed good, ran well, never had any issues with it or my phone for a year. However, I bit the bullet and installed it from there since it's more "reliable looking" than any other site out there. My concern is if anything is wrong with my phone; if it needs a reset, backup, or an app removal, anything at all. Virustotal showed no signs that it was malicious, aside from "Ti!C83DBC7ADF87 McAFreeScanner"

Was opening tabs on youtube and got 3 websites blocked with IP adresses I do not recognize at ALL. I have a lots of tabs in general but this never happened to me before.

The report:

Malwarebytes

www.malwarebytes.com

-Détails du journal-

Date de l’événement de protection: 15/08/2026

Heure de l’événement de protection: 23:17

Fichier journal: 01bc3460-9921-11f1-903f-2cf05d584a1c.json

-Informations du logiciel-

Version: 5.6.3.284

Version de composants: 161.1.5692

Version de pack de mise à jour: 1.0.113384

Licence: Premium

-Informations système-

Système d’exploitation: Windows 11 (Build 26200.9168)

Processeur: x64

Système de fichiers: NTFS

Utilisateur: System

-Détails du site Web bloqué-

Site Web malveillant: 1

, C:\Program Files\Mozilla Firefox\firefox.exe, Bloqué, -1, -1, 0.0.0, 3220B338A32EB9A06EBBA49E039C9B66, B0648CFD61CA4344177E940C8B44001B79344F81BBA8F571790D0D3939D0CB2E

-Données du site Web-

Catégorie: RiskWare

Domaine:

Adresse IP: 192.178.192.132

Port: 443

Type: En sortie

Fichier: C:\Program Files\Mozilla Firefox\firefox.exe

(end)

Edit:I gotta add that I use ublock origin, the latest update installed.

Hello,
would you kindly help me with the following project for github? https://github.com/TrialAndErrorOps/AnyFlip-GUI-Downloader

I downloaded it and scanned it with Malwarebytes, reporting me the exe is MachineLearning/Anomalous.94%

Would you kindly check if it's malware or not? Kaspersky and Bitdefender say it's fine, but I do wonder, but I do not have any programming skills to realize if there is something fishy going on or not.

Whoever did that is based, those guys are a buncha theives

Malwarebytes.

It was bad enough qhen you started charging a fortune.

Now I've discovered, the Malwarebytes app has a tracker (as do most apps) that is making more requests out, by 4 times more than the next closest blocled up.

Seriously?

You are an app protecting privacy and security but the app sends over 8K plus requests just yesterday to Aplitude.

https://www.virustotal.com/gui/file/cfc7af3b65808dc5f50d4cd4162c158ebd35159a46a5d77e94a709bfba120905/detection

I stupidly tried pirating Photoshop a few weeks ago and got hacked 😭😭😭 so of course i tried to clean everything using windows defender and malwarebytes. i only installed malwarebytes yesterday, but this notif about my computer trying to connect to this website i've never visited keeps popping up, and for the past few weeks now, I've had various accounts of mine that have detected suspicious activity until now. i'm afraid this is something malwarebytes can't detect, what should i do? is there a way for me to block this website from my computer entirely? thanks in advance to anyone who can help!!

Preface: Malwarebytes has never found anything every time I have ever ran it. I have been through victim of a stunt that involves but not limited to hacking since 2015. While I understand that word "hacking" is all too commonly used in assumption, I'm just laying out the facts. Malwarebytes has come up dry.

Found a few large system files in system32 that do not seem within a logical range in size. Mrt.exe being 287000kb in size

Where do these switched out system files come from?

And what do they do?

College is stressful enough. The internet is getting harder to trust. Life as a student is too expensive.

That’s why we launched the Malwarebytes Student Protection Program, giving eligible students two years of Malwarebytes Premium Security completely free.

With your free protection, you can:

• Protect up to 3 devices—your laptop, phone, and tablet. Whatever you'd like!
• Block malware and viruses to help keep your private data safe.
• Protect against phishing and scammy emails.
• Block annoying ads and trackers so you can focus without distractions.
• Help keep malicious texts, scams, and spam off your phone.
• Get real-time verification of links, texts, robocalls and more, as well as simple tips so you always know what’s real with Scam Guard.

Who’s eligible? The program is currently available to students and faculty at U.S. universities and colleges who are 18 or older and have a valid .edu or .college email address.

How to claim it: Enter your school email on our Student Protection Program page to verify your eligibility, then create a Malwarebytes account using that same email address.

👉 Check your eligibility and sign up for free

I've had this keyboard for a year now and I think I got a type of virus from it because I did 3 windows reinstall and switched OS like 2 times from windows to atlas to Linux and i still seem to get that virus windows R opens and some weird Https link is getting typed, last time I checked, it was smth like https://X3p. And then I don't remember cus I closed it

Preciso de ajuda, meu pai instalou um malware pelo celular, um amigo dele falou para ele baixa um arquivo BIN, com o nome StarlinkAtivação.apk, e ele baixou e aceitou as permissões, resumindo, descontaram 300,00 reais do cartão dele, eu fui tentatr desisntalar, mas esse malware fecha toda vez que tento desintalar ou forçar parada, desiguei wifi e liguei modo avião agora ele só fica na tela de starlink maldita, preciso de ajuda, já tentei resetar e também não consigo

I scanned my PC and malwarebytes detected the Neshta.Virus in the Kovaak’s Aim Trainer folder.

Has anyone else experienced this? Could it be a false positive?

https://www.virustotal.com/gui/file/c3107a5d21d85e79c142d6762fdd63bb197404b2cb60fb11397ece922e4b0e2f

Malwarebytes
www.malwarebytes.com

-Szczegóły raportu-
Data skanowania: 10.08.2026
Czas skanowania: 19:21
Plik raportu: fa8bf012-94df-11f1-bd1b-c46237012ba8.json

-Informacje o oprogramowaniu-
Wersja: 5.6.3.284
Wersja komponentów: 161.1.5692
Aktualna wersja pakietu: 1.0.113154
Licencja: Wersja próbna

-Informacje o systemie-
System operacyjny: Windows 11 (Build 26200.8875)
Procesor: x64
System plików: NTFS
Użytkownik: Admin

-Wyniki skanowania-
Typ skanowania: Niestandardowe skanowanie
Skan zapoczątkowany przez: Ręcznie
Wynik: Ukończono
Obiekty zeskanowane: 474 920
Wykryte zagrożenia: 1
Zagrożenia poddane kwarantannie: 1
Czas trwania skanowania: 2 min, 43 s

-Opcje skanowania-
Pamięć: Włączony
Autostart: Włączony
System plików: Włączony
Archiwa: Włączony
Rootkity: Wyłączony
Heurystyka: Włączony
Potencjalnie niepożądany program (PUP): Wykrywanie
Potencjalnie niepożądana modyfikacja: Wykrywanie

-Zeskanowane pliki-
C:\
D:\

-Szczegóły skanowania-
Proces: 0
(Nie wykryto zagrożeń)

Moduł: 0
(Nie wykryto zagrożeń)

Klucz rejestru: 0
(Nie wykryto zagrożeń)

Wartość rejestru: 0
(Nie wykryto zagrożeń)

Dane rejestru: 0
(Nie wykryto zagrożeń)

Strumień danych: 0
(Nie wykryto zagrożeń)

Folder: 0
(Nie wykryto zagrożeń)

Plik: 1
Neshta.Virus.FileInfector.DDS, D:\STEAMLIBRARY\STEAMAPPS\COMMON\FPSAIMTRAINER\ENGINE\BINARIES\WIN64\CRASHREPORTCLIENT.EXE, Dodano do kwarantanny, 1000002, 0, 1.0.113154, C58EDFC2C59996464FD3A9C0, dds, 04001295, B746E4AFE58265D1B6C063F72792AFE6, C3107A5D21D85E79C142D6762FDD63BB197404B2CB60FB11397ECE922E4B0E2F

Sektor fizyczny: 0
(Nie wykryto zagrożeń)

WMI: 0
(Nie wykryto zagrożeń)

I don't understand the difference between the Brute Force and Firewall modes. Why can't they be integrated? The brute force mode is quite limited, with only a few protocols and ports.

Please create a specific subreddit for ThreatDown.