r/Malwarebytes

Hi there,
Since around 03.07.2026 13:00 (UTC), Kaspersky AntiVirus blocks access to MSFT products. So far Teams, Outlook, Word, Excel affected.

When I close AV totally, it's fine, Teams is connected.
When I close disable ports that are watched Teams is connected.

What I don't understand is, I don't see any block report in Kaspersky AV app.
A report like; this ip, this port is, blocked, because of this problem.

Is there anyone having same issue?

Hi everyone,
My name is Bravey, and I’m looking for some advice because I’m pretty worried about a possible malware infection.
A few friends and I were making a Minecraft video, and we wanted to use the FapCraft mod. We found a website called fapcraftx.com and downloaded what we thought was the mod. All four of us downloaded the file, but I’m the only one who actually placed the JAR into my Minecraft mods folder and launched Minecraft with it through Modrinth.
When I launched the game, the mod showed up as an “Unknown” mod instead of displaying a normal name. It also didn’t seem to work correctly. Later, one of my friends checked the file with a Java malware scanner (I’m not sure exactly which one), and it reportedly detected something called “WeeDHack.” That’s when I started worrying that I may have run malware.
As soon as I found out, I took several steps:
Logged out of most of my important accounts.
Changed the passwords on the important accounts I could access immediately.
I haven’t changed the password to my main email yet because I don’t currently have access to the phone used for two-factor authentication. However, I did change the password to my backup email, which I use for account recovery.
Ran a full Microsoft Defender scan. It ran for around 8 hours. It cleaned up some files but never fully completed because I had to restart my computer.
Ran Malwarebytes afterward, which detected around 57-87 threats (I don’t remember the exact number). I quarantined/removed everything it found.
Ran a second Malwarebytes scan afterward, and it came back clean.
Since then, I haven’t noticed any suspicious logins, unauthorized account activity, or strange behavior on my PC. That said, I also haven’t really been using the computer because I’ve been afraid to.
My questions are:
Based on everything I’ve done, is there anything else I should do?
Is it possible that I’m still infected even though Malwarebytes is now clean?
Should I consider reinstalling Windows just to be safe?
Are there any logs or scan results I should upload that would help determine whether I’m actually infected?
Any advice would be greatly appreciated. Thanks for taking the time to read this.

i downloaded something off of internet archive that came up as safe on virustotal, so either it wasnt, or somehow i magically got malware, but holavpn showed up as a pup in malwarebytes (i have never installed this program), so i got rid of it. i did a 2nd scan afterwards to get rid of it because it showed up again in more detections and malwarebytes told me to restart my laptop, so i did, and now im stuck on a black screen that wont open anything. ive tried opening task manager, ive turned it on and off several times, its just not opening but its running.

https://preview.redd.it/8sb1g0a1exah1.png?width=925&format=png&auto=webp&s=7c2c306b20ed8eecf50543cb5db1d34c31918db4

Hey!

A little bit over a week ago, my MBAM scan found a few PUP.Optional.BrowserHijack files and folders. I did a full MBAM scan and found nothing, so I let it be for a day. The next day, the files were back. MBAM quarantined them, I did another scan, nothing. I then disabled Google sync.

Next day I decided to make a fresh Windows 11 installation from USB, and the very first thing I did after installing W11 was to install MBAM, enable browser guard, enable all the features MBAM allowed me to and then installed all the Windows updates and after that, changed all my passwords.

I did another full scan, found absolutely nothing.

Now, after a week of no threat detections, MBAM found 3 PUP.Optional.BrowserHijack files after a routine check.

File: 3

PUP.Optional.BrowserHijack, C:\\USERS\\\*\*\*\\APPDATA\\LOCAL\\GOOGLE\\CHROME\\USER DATA\\Default\\Web Data, Replaced, 7911, 1413514, 1.0.111688, , ame, , ,

PUP.Optional.BrowserHijack, C:\\USERS\\\*\*\*\\APPDATA\\LOCAL\\GOOGLE\\CHROME\\USER DATA\\Default\\Web Data, Replaced, 7911, 1413514, 1.0.111688, , ame, , ,

PUP.Optional.BrowserHijack, C:\\USERS\\\*\*\*\\APPDATA\\LOCAL\\GOOGLE\\CHROME\\USER DATA\\Default\\Web Data, Replaced, 7911, 1413514, 1.0.111688, , ame, , ,

I have no idea what to do, my Chrome is up to date, I still use the Browserguard provided by MBAM along with all the other features provided by the trial version and I also have Windows Defender enabled.

Should I be worried, or could those 3 detections just be false positives?

Thanks for your help!

Hello, my deep scans usually take 7 minutes to complete, however the past couple weeks its taking over 20 minutes. I know that doesnt sound long but when I watch it scan sometimes it gets stuck on a number for a couple minutes. My threat scan used to take 1-2 minutes, but now it takes 10 minutes to complete and does the same thing. Did this change for anyone else? Is this normal? Turning off scan for rootkits speeds up my threat scan timer but not the deep scan

Also my other question is, is it ok to run a deep scan daily? Im not really tech savy but I got a virus a year ago so my ocd is bad now with always running a scanner before bed. I have windows defender as my real time protection and malwarebytes free version I scan daily. Should I just do a threat scan before bed or is a deep scan is ok?

I recently accidentally installed trojanware on my pc, I ran a full scan which quarantined all the suspicious files and did a deep scan on malwarebytes that brought up 0 detections after 1.7 million file scans, and i double checked my task manager and saw no suspicious programs running. I've been disconnected from my internet while doing this just fo be safe, and I use a secure private browser and have no cookies added (i recently switched to it and deleted my old browser,) I just wanna be sure there's anywhere else I need to check to know i've fully uninstalled it. I'm somewhat knowledgeable in computers just not with viruses specifically so if there's anything I should double check id appeetiate the help, i'm PRETTY SURE ive gotten rid of it though. (btw the initial virus scan had 117 detections before I quarantined/deleted it. I'm running on the most recent version of windows 10)

Hi, I got a notification from Malwarebytes saying it quarantined 19 pups on my computer, I checked the names, it was "PUP.Optional.BrowserHijacking", I haven't installed anything lately, except for mods through CurseForge. The only thing I installed not too long ago, was AdBlock Plus again, and from the original webpage. Is it possible, it's falsely detecting it as a PUP? I deleted it just in case, and did a scan which showed up clean saying I'm 100% safe, but I want to make sure and ask around.

Hi all, I had 14 PUP.Optional.BrowserHijack flags come up when I ran a Malwarebytes scan.
Doing my usual panic I went straight to google, did a AdwCleaner scan and it found a PUP.Optional.Legacy registry file HKLM\Software\Wow6432Node\Classes\CLSID{8BF0126F-A5B7-4720-ABB2-2414A0AF5474}, so I quarantined that, ran it again and that was clear.

I then went back to malwarebytes and quarantined the original files it found which were:

Folder: 3
PUP.Optional.BrowserHijack, C:\USERS\USERNAME\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Sync Data\LevelDB, Quarantined, 8833, 1413514, 1.0.111469, , ame, , ,

PUP.Optional.BrowserHijack, C:\USERS\USERNAME\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Sync Data\LevelDB, Quarantined, 8833, 1413514, 1.0.111469, , ame, , ,

PUP.Optional.BrowserHijack, C:\USERS\USERNAME\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Sync Data\LevelDB, Quarantined, 8833, 1413514, 1.0.111469, , ame, , ,

File: 11
PUP.Optional.BrowserHijack, C:\USERS\USERNAME\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Web Data, Replaced, 8833, 1413514, 1.0.111469, , ame, , ,

PUP.Optional.BrowserHijack, C:\USERS\USERNAME\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\000005.ldb, Quarantined, 8833, 1413514, 1.0.111469, , ame, , 20B273605104EC0C7BE41ACC57FEA520, 26A0BE59B33FB271FB4FBA4B58705CA9087270141CD56876400E180B7E725CF0

PUP.Optional.BrowserHijack, C:\USERS\USERNAME\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\031458.log, Quarantined, 8833, 1413514, 1.0.111469, , ame, , ,

PUP.Optional.BrowserHijack, C:\USERS\USERNAME\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\031460.ldb, Quarantined, 8833, 1413514, 1.0.111469, , ame, , 3F4272C4ECA1673FB50017643754081D, F0925B5876327D0C0908A84C09A6573F6190DF6BA6B3070849ED2DB1D2C6C066

PUP.Optional.BrowserHijack, C:\USERS\USERNAME\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\CURRENT, Quarantined, 8833, 1413514, 1.0.111469, , ame, , 238D8F9AB370E85904802F71AB644A01, 7CB6D2359EC2C293E99F1EFD0C39139EF69148CA2F0610877A6119053FCE2310

PUP.Optional.BrowserHijack, C:\USERS\USERNAME\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\LOCK, Quarantined, 8833, 1413514, 1.0.111469, , ame, , ,

PUP.Optional.BrowserHijack, C:\UUSERS\USERNAME\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\LOG, Quarantined, 8833, 1413514, 1.0.111469, , ame, , ,

PUP.Optional.BrowserHijack, C:\USERS\USERNAME\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\LOG.old, Quarantined, 8833, 1413514, 1.0.111469, , ame, , 51960448FFF9B4A52018283A59383260, 68D1A94170681F809427892320E6755BEE435977679D4E31D9D26A837348CA87

PUP.Optional.BrowserHijack, C:\UUSERS\USERNAME\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\MANIFEST-029511, Quarantined, 8833, 1413514, 1.0.111469, , ame, , ,

PUP.Optional.BrowserHijack, C:\USERS\USERNAME\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Web Data, Replaced, 8833, 1413514, 1.0.111469, , ame, , ,

PUP.Optional.BrowserHijack, C:\USERS\USERNAME\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Web Data, Replaced, 8833, 1413514, 1.0.111469, , ame, , ,

Now I don't know if this is a false positive as I haven't downloaded anything since the last scan date before today, nor have I had any detections from the browserguard.

I have done a scan in both Malwarebytes and the AdwCleaner and they're bot showing clear, but I am paranoid....am I clear?

EDIT: I have been helped on the Malwarebytes Forums. Not infected but it was a true detection. Sorting it now, just waiting on the last confirmation. Thanks all!

Just for kicks, I asked malwarebytes browser guard to analyze help.malwarebytes.com and this is what I got:

Version 3.3.0

help.malwarebytes.com: Dangerous

Our recommendation: Don't trust

This website shows multiple indicators consistent with a phishing scam.

----

The fact that malwarebytes browser guard doesn't trust their own site is troubling imo.

I am not commenting further because this speaks for itself.