T
TMWGray
Guest
I am getting Windows Security reports saying the following apps have been blocked. On looking at the detail it advises they have been deleted, however it seems they keep coming back. The first one on 11/08/2020 does not appear to have returned. The others seem to be identical except for the HarddiskVolumeShadowCopy number. I ran an MS Defender Offline Scan a couple of days ago but the last one shown appeared yesterday. I have no experience in this but it would seem that it is an app already installed. Is there a way I can find out which app or apps are causing this so I can delete it completely? Using Win 10 version 2004 with latest update and Chrome browser Version 86.0.4240.111
11/08/2020 PUA:Win32/CandyOpen
file: C:\Program Files (x86)\MP3 Rocket\record\SMM_HyperCam.exe
27/09/2020 PUA:Win32/AskToolbar
file: \Device\HarddiskVolumeShadowCopy59\Users\Tom Gray\AppData\LocalLow\Sun\Java\jre1.7.0_60\java_sp.dll->[RSRCEmb]
6/10/2020 PUA:Win32/AskToolbar
file: \Device\HarddiskVolumeShadowCopy32\Users\Tom Gray\AppData\LocalLow\Sun\Java\jre1.7.0_60\java_sp.dll->[RSRCEmb]
13/10/2020 PUA:Win32/AskToolbar
file: \Device\HarddiskVolumeShadowCopy53\Users\Tom Gray\AppData\LocalLow\Sun\Java\jre1.7.0_60\java_sp.dll->[RSRCEmb]
20/10/2020 PUA:Win32/AskToolbar
file: \Device\HarddiskVolumeShadowCopy74\Users\Tom Gray\AppData\LocalLow\Sun\Java\jre1.7.0_60\java_sp.dll->[RSRCEmb]
Appreciate any help to resolve this.
TMWGray
More...
11/08/2020 PUA:Win32/CandyOpen
file: C:\Program Files (x86)\MP3 Rocket\record\SMM_HyperCam.exe
27/09/2020 PUA:Win32/AskToolbar
file: \Device\HarddiskVolumeShadowCopy59\Users\Tom Gray\AppData\LocalLow\Sun\Java\jre1.7.0_60\java_sp.dll->[RSRCEmb]
6/10/2020 PUA:Win32/AskToolbar
file: \Device\HarddiskVolumeShadowCopy32\Users\Tom Gray\AppData\LocalLow\Sun\Java\jre1.7.0_60\java_sp.dll->[RSRCEmb]
13/10/2020 PUA:Win32/AskToolbar
file: \Device\HarddiskVolumeShadowCopy53\Users\Tom Gray\AppData\LocalLow\Sun\Java\jre1.7.0_60\java_sp.dll->[RSRCEmb]
20/10/2020 PUA:Win32/AskToolbar
file: \Device\HarddiskVolumeShadowCopy74\Users\Tom Gray\AppData\LocalLow\Sun\Java\jre1.7.0_60\java_sp.dll->[RSRCEmb]
Appreciate any help to resolve this.
TMWGray
More...