Francois_Blais

Is a reformat of the hard disk an alternative?

Typo from me! I meant "wbemtest". (no dash in the name, sorry!) I had the same symptoms you have, go for it!

Here's a short test for you: At the command prompt, execute "wbem-test". Then, click on the Connect button and then connect as "root\SecurityCenter". Then click on the Query button. Now, type "SELECT * FROM AntiVirusProduct" and click on Apply. The result shoud show only one product. If you double-click on it, you should recognize "ALWIL Software" in the "companyName" string. I had a remnant of DrWeb there. This test is easy to do and you may discover something, who knows. Good luck, and best regards, Fran

I have no problems anymore with AVAST free and MBAM 1.46 real-time. What applets do you use in AVAST? I only enabled the File Agent and the Web Agent. Also try to disable as much unnecessary running services as you can. (easy to do with Autoruns) (rebooting each time you make changes) I disabled the Bonjour and ipod services, for instance. I had a DrWEB remnant from an old install still active.

I read somewhere that Malwarebytes and Sunbelt are now somehow related: http://www.sunbeltsoftware.com/Press/Releases/?id=346

Here's how it looks in my AVAST setup, saucer. In Avast, you can exclude whole paths, so it's easier than specifying each file. For the mbam.sys and mbamswissarmy.sys drivers, I also use the * wildcard, so it becomes mbam*.sys. Hope this helps!

Just a little update about the MBAM - VIPRE a/v combo. (a short note: MBAM real-time now runs fine here with AVAST and Kaspersky I'm now trying for a month) I had reinstalled back VIPRE (the straight a/v) earlier today, and the MBAMservice doesn't seem to play well with it. (attached pic) MBAM used around 9% of CPU time, in continuous, while it's completely idle with AVAST and Kaspersky when I do nothing. Also, the I/O is continuously at around 4MB. (also idle with both AVAST and Kaspersky) Very strange behaviour. And since VIPRE and MBAM are now sisters, it should be quite easy to solve, no? Best regards, Fran

I agree with EL34 that the wording could be enhanced a bit. The sentence by itself is quite unclear to what's terminated... Regards, Fran

52MB is normal RAM useage for MBAM 1.46 real-time, as far as I know.

Subscribed to this topic. Went to the same conclusions: 1.44 was perfect, but since then there's a bug somewhere. In my case, it's the high CPU usage that drew my attention. Regards, Fran

PM sent, thanks!

Exactly! I think I've been very clear on this in all my posts on several threads. There's an abnormal CPU usage that's noticed from many users, with real-time protection. I remember that we had a problem with 1.43, related to definition file updates and RAM consumption, and not everybody was experiencing that. We seem to have a similar case of bug that some people get, and others don't.

Thanks for your feedback. P3-1000 is a Pentium 3 at 1GHz.

Thanks, greyowl. I know I'm definitely not alone with this bug. To the MBAM developers: (just a shot in the dark) Is it possible that some compiler switch or option has not been disabled or changed (some debug mode maybe) for the final release? Best regards, Fran

Thanks for your support, whatmeworry?. As I said somewhere I had no problem with 1.44. This CPU thing began with 1.45, and is still there today. Regards, Fran

Update: Nothing helped, unfortunately. I went further, disabled as much as I could, leaving a very minimal Windows, and MBAM real-time still uses much too CPU resources. That old PC is going to run Linux anyway in the next days. I'll try the next releases of MBAM when they come out, but for the moment this case is closed unresolved. When I get a newer machine, I'll see how it goes. Thanks for the help, Fran

I'll try that tonight, thanks. Maybe SansaDispatch is the culprit. (Sansa is my MP3 player, which I bought recently) I also installed iTunes for my GF's iPod recently. iTunes also installs three services: applemobiledeviceservice, Bonjour and ipodservice. Maybe I could uncheck them too, if the other tests fail.

Thanks for the signature reminder! I know how to deactivate real-time protection; a simple reboot is enough. ("Start protection module with Windows" is unchecked) Is it normal that it turns on real-time protection by creating scheduled jobs? Regards, Fran

Thanks Samuel. This is not a resident software. It's a hard disk defragger, which I run in the middle of the night, everyday. Do you still want that I try that? Appears useless to me. Bst regards, Fran

Hi. Running 1.46 here. (on-demand only for the moment) If I go the scheduler and add jobs, it turns on the realtime protection right away. A bug? Regards, Fran

Just got 4060 (5/5/2010) here.

And does it work if you select the "Perform scheduled scan silently from system account" ?

Thanks. Here's the new log. Regards, Fran AutoRuns.zip

Thanks, 1PW. Undiagnosed malware? I ran three anti-virus programs lately, doing scans every night and am also scanning with MBAM. (the AV programs were tested one at a time, removing the other each time) Without MBAM real-time, I don't get all that funky CPU activity. If it's malware, MBAM and the AVs are not detecting it. Best regards, Fran