Jump to content

MadDemon64

Honorary Members
  • Posts

    150
  • Joined

  • Last visited

Posts posted by MadDemon64

  1. 12 minutes ago, lmacri said:

    Hi MadDemon64:

    I tried two system restarts this morning on my Vista SP2 machine with the MB setting at Protection | Start-up Options | Enable Self-Protection Module Early Start turned ON and mbamtray.exe still crashed.  Note that mbamtray.exe is owned by USER and only attempts to load shortly after I log in to my Windows user account, and not when MBAMService.exe (which is owned by SYSTEM) is loaded at boot-up.

    However, the MB icon eventually appeared in my system tray about 1 min after I logged in to my Window user account, so it looks like mbamtray.exe was able to recover from both crashes.  I've never seen that happen when self-protection early start is disabled.

    Here are both dump files (saved in C:\Users\<username>\AppData\Local\CrashDumps) for this morning's mbamtray.exe crashes after MB self-protection early start was enabled, as well as the pop-up message my Vista SP2 OS displays every time the MB tray application crashes...

    mbamtray.exe.1096.dmp
    mbamtray.exe.4192.dmp

    901378287_MBv3_2_2TrayApplicationHasStoppedWorking28Aug2017.png.36af6a1454d292d1f2788e095d50a1a4.png

    ..and a sample of one of the mbamtray.exe APPCRASH errors logged in the Event Viewer showing that kernel32.dll is still the faulting module.

    MB v3_5_1 mbamtray_exe APPCRASH Error Log 21 May 2018.txt

    As I previously reported in post # 96, the MB icon will consistently load in the system tray without crashing if MB's self-protection is completely disabled .
    ----------
    32-bit Vista Home Premium SP2 * Firefox ESR v52.8.0 * Norton Security Premium v22.14.0.54 * MB Premium v3.5.1.2522-1.0.365

    So, even though the tray crashed, it eventually reappeared?  But only when you had self-protection set to early start?

  2. 4 minutes ago, capun said:

    Tried everything short of un-installing it. The MBAM process keeps re-starting and you can see it starting to gobble up RAM until it eats it all.

    Trying to stop the service, you get a message about an error with the handler. Trying it again it stops then re-starts creating the MBAM process once again. It's a forever loop

    Time to un-install it until it is fixed.

    Don't uninstall it.  Just restart your computer (hard reset if you have to), and as soon as your computer starts up, open Malwarebytes, uncheck the option to have it start at startup, and then either restart your computer again or close it from task manager or the notification icons area.

  3. I noticed my computer was slowing down and was scared I caught a virus.  After I finally shut it down (after waiting ten minutes for it to open a folder) I noticed Malwarebytes was taking up all the RAM.  I'm morbidly glad I'm not the only one with this issue.

    I am not going to use malwarebytes until this issue is resolved.

  4. On 1/21/2018 at 2:03 PM, lmacri said:

    Hi bha19:

    I wouldn't advise leaving MB v3's self-protection permanently disabled, since this module prevents MB files from being deleted or modified if your system is ever infected with malware.  MadDemon64 and I only disabled this module for testing purposes.

    I'm not sure what username you use in the Norton forum, but did anyone suggest that you disable Fast Startup in your power settings?  This setting is only available with Win 8.x and Win 10, and if it is enabled your computer performs a hybrid shutdown instead of a full power down when you shutdown your computer (see the How-To Geek article The Pros and Cons of Windows 10’s “Fast Startup” Mode ), and Fast Startup could be causing problems with with loading of Norton and Malwarebytes services at boot-up.  Try re-testing with MB v3's self-protection disabled after you have ensured that Fast Startup is disabled and you have re-booted your computer a few times, or the setting changes you made in MB might not immediately take effect.  See my comments in pdracing's thread Repeated pop-up "! Verifying Subscription" for more information about Fast Startup.

    And just to clarify, I also find that the main mbamservice.exe process continues to run in the background if mbamtray.exe crashes at boot-up and fails to load the MB icon in my system tray.
    ----------
    32-bit Vista Home Premium SP2 * Firefox ESR v52.5.3 * NS Premium v22.11.2.7 * MB Premium v3.3.1.2183-1.0.262

    I would say the test was a success.  The tray has yet to crash once after disabling self-protection.

  5. 4 minutes ago, lmacri said:

    Hi dcollins:

    I've shut down and re-booted my computer about a dozen times since disabling MB v3 self-protection (Settings | Protection | Startup Options | Enable Self-Protection Module | OFF) and so far my MB icon has loaded correctly in the system tray every time.

    The mbamtray.exe APPCRASHes were an intermittent problem on my 32-bit Vista SP2 computer but usually occurred every 2 or 3 re-boots so I'm still not 100% certain that the MB self-protection module is the cause.  I'll continue to monitor over the long weekend and post back if I see another crash.

    Just a side note that this is the first time I've tried testing with MB v3 self-protection disabled.
    ----------
    32-bit Vista Home Premium SP2 * Firefox ESR v52.5.3 * NS Premium v22.11.2.7 * MB Premium v3.3.1.2183-1.0.262

    Ditto.  So far, so good.

  6. 4 hours ago, lmacri said:

    Hi MadDemon64:

    See Tex10's thread Custom Scans take 8 to 12 hours or more to complete.  It takes several hours for a MB v3.x full system scan to scan almost a decade worth of software updates (~20,000 subfolders) in my Windows component store at C:\Windows\WinSxS, and I'm sure having a dual core CPU / 3 GB RAM in my 32-bit Vista SP2 computer doesn't help.  I also included D:\ drive (my HP recovery partition) in my scan.
    ----------
    32-bit Vista Home Premium SP2 * Firefox ESR v52.5.2 * NS Premium v22.11.2.7 * MB Premium v3.3.1.2183-1.0.262
    HP Pavilion dv6835ca, Intel Core2Duo T5550 @ 1.83 GHz, 3 GB RAM, NVIDIA GeForce 8400M GS

    Fair enough.

  7. 40 minutes ago, lmacri said:

    Hi dcollins:

    My full system scan from Safe Mode with rootkit scanning enabled took almost 8 hours on my 32-bit Vista SP2 machine (a similar scan on the same computer with MBAM v2.2.1 used to take under 2 hours) but like MadDemon64 reported in post # 90, my scan didn't find any threats.  I had one Heuristics.Shuriken detection for an old Xerox printer plugin XM7750P.dll but Malwarebytes employee Atribune confirmed <here> it was a false positive.
    ----------
    32-bit Vista Home Premium SP2 * Firefox ESR v52.5.2 * NS Premium v22.11.2.7 * MB Premium v3.3.1.2183-1.0.262 

    Strange, it only took my computer 15 minutes for a full scan in safe mode with rootkit enabled.

    Either something is wrong with my scan or Windows 8.1 computers are beyond faster than Windows Vista computers.

  8. 56 minutes ago, dcollins said:

    Another user having this problem ran a scan in safe mode, and discovered some trojans that, once removed, allowed the tray to load properly. Can you try running a full rootkit scan in safe mode to see if any detections are picked up?

    Well, the scan completed and found nothing.  Rootkit detection was on and the computer was in safe mode without networking.  Malwarebytes found nothing.

  9. 45 minutes ago, dcollins said:

    It's been awhile since I asked, and it was mixed in with other results, so I'd like to get some confirmation.

    If we disable self-protection under Settings -> Protection, does the system tray boot properly?

    I'll try that and get back to you on the results.

     

    44 minutes ago, lmacri said:

    Hi MadDemon64:

    Your findings may differ from mine but I already ran that test and it made no difference on my 32-bit Vista SP2 computer  - see my 26-Sep-2017 post # 10 of my thread MB v3.2.2 - System Tray Icon Missing After mbamtray.exe APPCRASH.

    Delaying real-time protection (Settings | Protection | Startup Options | Delay Real-Time Protection When Malwarebytes Starts) delays the initial loading of MBAMService.exe (the service owned by SYSTEM) at initial boot-up, but mbamtray.exe (the process owned by the USER) doesn't load until the initial boot-up is complete and the USER has logged in to their Windows user account. I can re-boot my computer and let it sit for hours, but mbamtray.exe (and other processes owned by the USER like nsbu.exe for Norton background tasks, taskeng.exe for my Windows Calendar, etc.) don't start until I log into Windows.

    5a4313c978a0c_MBv3_2_2mbamtray_exeCrashPEThreeProcessesLoadLoginEDITED01Oct2017.png.e28951faf98620e6c89c5b3adfd30db8.png

    The only way that I can consistently prevent mbamtray.exe from crashing on my system is to disable Settings | Protection | Startup Options | Start Malwarebytes at Windows Startup and then launch Malwarebytes manually AFTER my system has booted up and AFTER I have logged into my Windows user account.
    ----------
    32-bit Vista Home Premium SP2 * Firefox ESR v52.5.2 * NS Premium v22.11.2.7 * MB Premium v3.3.1.2183-1.0.262

    Well, that's also interesting.  It only affects automatic startup but not manual startup?  Bet the people who make Malwarebytes could use that info.

  10. On 12/24/2017 at 8:40 AM, dprout69 said:

    I don't have Norton and it does the same thing

     

    On 12/23/2017 at 11:00 PM, lmacri said:

    Hi MadDemon64:

    I haven't proven that Norton is involved, but when I monitor my system with Sysinternal's Process Explorer I can see that mbamtray.exe and the second instance of my Norton executable nsbu.exe (i.e., the instance of nsbu.exe owned by the logged in USER that manages low-priority tasks like launching of the Norton GUI and background maintenance tasks) both wait to load into memory after a system restart until I log into my Windows account - see <here> for sample data.  Right now my best guess is that mbamtray.exe will sometimes crash if it has to compete for system resources also used by nsbu.exe and/or other executables that load into memory immediately after the USER logs in to Windows.

    There is also a known conflict between the anti-exploit modules of Norton v22 and MB v3, although I don't know if that could affect the launch of mbamtray.exe. The 06-Dec-2017 change log for the latest MBAE v1.11 build 45 at https://www.malwarebytes.com/support/releasehistory/ says "Fixed a conflict with Norton Security", but the 07-Dec-2017 change log for the Component Update Package v.1.0.262 <here> doesn't mention whether that fix was actually included in CU package v1.0.262.
    ----------
    32-bit Vista Home Premium SP2 * Firefox ESR v52.5.2 * NS Premium v22.11.2.7 * MB Premium v3.3.1.2183-1.0.262 

    Well, maybe you're on to something here.  Let's try the "delay real-time protection" option and see if that fixes the problem.  If it is indeed crashing because it's fighting for system resources, maybe delaying protection, then maybe delaying the protection until the resources are free might prevent a crash.

    Just a theory, but let's try it.

  11. 3 hours ago, lmacri said:

    Hi MadDemon64:

    Just an FYI that I also use Norton as my AV and continue to see intermittent mbamtray.exe crashes after boot-up since updating to the latest Component Update Package v1.0.262. See my 11-Dec-2017 post # 18 of my thread MB v3.2.2 - System Tray Icon Missing After mbamtray.exe APPCRASH.

    If anything, the conflicts with Norton v22 and MB v3 seem to have gotten worse, not better, since my CU package was updated from v1.0.236 to v1.0.262.
    ----------
    32-bit Vista Home Premium SP2 * Firefox ESR v52.5.2 * NS Premium v22.11.2.7 * MB Premium v3.3.1.2183-1.0.262

    You think it's Norton?

  12. 59 minutes ago, dcollins said:

    @MadDemon64 can you clarify something for me?

    Rebooting your computer allows the tray icon to show up but shutting down and powering back up does not?

    No, it's random.  Sometimes it shows up after shutting down and powering back up, sometimes it doesn't, and the same applies to rebooting.

    Malwarebytes proper always works, but the tray just decides when it wants to and doesn't want to work.

  13. On 12/20/2017 at 8:34 PM, mightaswell said:

    Hi @Arsenal123   I had a similar issue with a Win7 which was fixed with the latest  component package version 1.0.262. You seem to have an earlier version .

    If you open Malwarebytes GUI through the desktop icon , go to "settings" then "Application " and then click on "Install Application Updates" Malwarebytes should update to the latest component package. That did at least fix the no icon on my laptop - it did take a few reboots for the icon to become stable but now works all the  time. It might just help you also. You might need to update to the latest version 3.3.1 first though as Porthos has suggested. 

    I have the same issue that persists even with that component package.

Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.