f14tomcat

Sorry for the delay. Sunday, and all. I like to make one change at a time, to avoid the inevitable question "Which one fixed it"? 😉 So first I disabled the Ransomware, re-booted, and the issues disappeared. All came up normally, quickly, and correctly. Let it settle for a few minutes, and re-booted again. Same. All back to normal. Enabled Ransomware, re-booted, and all the previous issues came back exactly as before. Again, waited a few and re-booted. Same. Issues were there. I have not changed anything else. No change to UAC nor enabling of Restore Points. Just the Ransomware, which as of now is still enabled, with the issues. If you feel I need to do the other steps, please advise, but this seems to point to Ransomware Protection causing the delay. Regarding the NIC, all current per pic. It is the latest per WHQL and Dell. I would prefer not to update it if not necessary.

Windows 10 Pro 17763.168 (1809) - i7-7700k. This issue occurs only in Pro, not Free. After boot and display of the Welcome screen, there is a noticeable lag at the Welcome screen. Startup sound is delayed by at least 2 seconds. Clicking or pressing enter to get the sign-on box does not appear for several seconds. After entering PW/PIN, there is a lengthy process displayed of "Waiting for Initialize Profile" (not exact words), "Preparing Desktop", etc. Finally goes to Desktop. None of this happened prior to 1.0.508, it was all nearly instantaneous. Setting delay of 15 seconds removes the issue and all was as before this CU. Setting the service to Auto(delayed start) also removes the issue. Both are workarounds. This did not occur on the previous CU. I did have the Beta prior to all this, and it, too, had the same issues. I reverted to Public Release and the issues resolved. But when this CU was installed, the issues returned. I have done clean installs using the mb-clean-3.1.0.1035.1 and the mb-support-1.3.1.553. I have also completely uninstalled it using Revo Uninstaller Pro 4.0.1 and re-installed clean using the latest downloaded today mb3-setup-consumer-3.6.1.2711-1.0.508-1.0.8211, which has the 1.0.508 incorporated. All to no avail. There do not appear to be any other side effects, except this startup issue. Attached is the clean log and mbst-grab-results. Thank you for your help. mbst-clean-results.txt mbst-grab-results.zip

Same 2 detections, this morning, 10/08/2108 . Log attached. MB.txt

Thanks for replicating the error. We'll await either a HotFix, or new release.

Just on review of Reliability History. No notification I could see....except the obvious slight pause with verbose logging, I could see the "Shutting down MalwareBytes Service" briefly.

Had to use the wettransfer link.... https://wetransfer.com/downloads/53b39f18b5e3e1bc082e104d0b7e0b4020180920154758/61293fb38042ef839895d1f8cddfcdde20180920154758/cf1263

Did both a Restart(reboot) and Full Shutdown. No crash dump files produced.

Attachment????

Just tested that. I have UAC disabled, but that shouldn't affect your request. I clicked and quit MBAM, no error. I started MBAM, came up fine, no error.

Just tested several times. The service crash error seems to be occurring at shutdown, not restart/power up. I have verbose logging enabled, and I can see where Windows is shutting down MBAMSERVICE. Previously, I never saw that message, probably because it was so quick. Now, there is a slight hesitation at shutdown, then proceeds to completion. This occurs at the "shutdown phase" of both a Re-boot and full Shutdown. I made note of the times. The last service crash logged was exactly at the time I did a full shutdown. The prior one was exactly at the time I did a Restart (reboot). With the full shutdown, I waited 10 minutes before powering back up to ensure the time gap was accurate and pointed to the shutdown phase.

AdwCleaner[S22].txt

Hello, Arthi. No, I do not not have credential guard enabled. Not running Hyper-V or any other VM on this build. Good news! I have just finished installing MBAM 3.4.0 on the 17093 Insider, and Exploit protection remains enabled! Ran several scans, and restarted several times. All is holding. No changes to Insider settings at all. Something in 3.4.0 is changed/fixed to now be compatible. I will continue to monitor, especially after the next build, which should be Wed/Thu this week. Thank you all for your help. If there is any info I can supply, please let me know. Post here, or email at the email in my registration. Attached 3 screenshots. Thanks, again.....

Thanks, Arthi. Quick update. Just installed Insider Build 17093 released yesterday 2/07/18. No change. In systray, comes up all protected for about 10 seconds, then Exploit pops off.

Any word on this yet? Thanks.

Has any staff replied to this? Here or anywhere else? If so, I missed it. Love to have a link.......

Yep and Yep! MBAM went Ape! Shortly after 11am ET. Every outbound request was blocked. It is now disabled on DT and Lappy till it finishes throwing up! Wow! Defender protect me if you can.............

I even did the MB-Clean without reinstalling. Ran Revo Uninstaller to look for any dust bunnies. It found a few...some images, couple of reg entries. Then DL'd and ran the full installer. It activated without me doing anything. I'll be off for the day shortly, so will check back tomorrow. Thanks to you and all the staff. Let me know if you need any more info. currently at this:

Nope... same as your pic.

Sorry, I've been off for while. I'll have to go check. Thanks.

Still will not stay on. After the clean install: mb-check-results.zip

mb-clean-results.txt Same results. Exploit gets turned off. I made sure it was unchecked before I did the MB-Clean reinstall. I will make another zip file and post. TXT above is the log of the MB-Clean.

I have run the MB-clean. Should I uncheck the option before running the MB-clean again?

Ok, here's the Zip! mb-check-results.zip

Ok, I'm not on the Insider at the moment. Will have to boot into it and get the logs. Be a few minutes. Thanks.