Jump to content

Grenpara

Honorary Members
 View Profile  See their activity

  • Posts

    157

  • Joined

  • Last visited

 Content Type 

Posts posted by Grenpara

    Malware Question

    in Resolved Malware Removal Logs

    Posted

    11 hours ago, AdvancedSetup said:

    In theory you don't need any exclusions. However, from time to time sometimes a conflict does come up because both of us are always doing updates to try and stay ahead of threats. If you do run into any issues though please let us know and we'll glad to help.

    Thank you for the kind words about our Support too.

    I'll see if I can track down the VSS issue with a better suggested fix and get back to you. If I don't reply back within 48 hours though please send me a PM

    Ron

     

    Hey Ron,

    I had typed a massive message for you and somehow it did not take so I retype some of it.
    The issue of VSS may not be broken, it seems backup tools can forbid/lock vss so Windows Restore features do not work.
    My system seems to have 2 backup tools One I did install and one that was here.
    Also  if you look at this link 

    Quote

    https://support.unitrends.com/UnitrendsBackup/s/article/000002767

    It explains about VSS issues  and that link you supplied me yesterday also gave me some info.
    I spent till 6am on system reading many websites because of the link you gave me.
    And I ran a CMD elevated prompt to get some info which is below:

    Quote

    C:\WINDOWS\system32>vssadmin list writers
    vssadmin 1.1 - Volume Shadow Copy Service administrative command-line tool
    (C) Copyright 2001-2013 Microsoft Corp.

    Writer name: 'Task Scheduler Writer'
       Writer Id: {d61d61c8-d73a-4eee-8cdd-f6f9786b7124}
       Writer Instance Id: {1bddd48e-5052-49db-9b07-b96f96727e6b}
       State: [1] Stable
       Last error: No error

    Writer name: 'VSS Metadata Store Writer'
       Writer Id: {75dfb225-e2e4-4d39-9ac9-ffaff65ddf06}
       Writer Instance Id: {088e7a7d-09a8-4cc6-a609-ad90e75ddc93}
       State: [1] Stable
       Last error: No error

    Writer name: 'Performance Counters Writer'
       Writer Id: {0bada1de-01a9-4625-8278-69e735f39dd2}
       Writer Instance Id: {f0086dda-9efc-47c5-8eb6-a944c3d09381}
       State: [1] Stable
       Last error: No error

    Writer name: 'System Writer'
       Writer Id: {e8132975-6f93-4464-a53e-1050253ae220}
       Writer Instance Id: {81131efd-63f5-45da-b054-3633797788c8}
       State: [1] Stable
       Last error: No error

    Writer name: 'ASR Writer'
       Writer Id: {be000cbe-11fe-4426-9c58-531aa6355fc4}
       Writer Instance Id: {4d5733b5-d058-4db0-b8bf-f6526a3d31d5}
       State: [1] Stable
       Last error: No error

    Writer name: 'Shadow Copy Optimization Writer'
       Writer Id: {4dc3bdd4-ab48-4d07-adb0-3bee2926fd7f}
       Writer Instance Id: {ea909f58-3ef1-4e5c-a91e-d8aff8deed40}
       State: [1] Stable
       Last error: No error

    Writer name: 'Registry Writer'
       Writer Id: {afbab4a2-367d-4d15-a586-71dbb18f8485}
       Writer Instance Id: {62ea1ba9-6712-4911-bb98-35129fe28f03}
       State: [1] Stable
       Last error: No error

    Writer name: 'MSSearch Service Writer'
       Writer Id: {cd3f2362-8bef-46c7-9181-d62844cdc0b2}
       Writer Instance Id: {d5ed2de6-08f1-454d-88d2-4c985ba426ae}
       State: [1] Stable
       Last error: No error

    Writer name: 'WMI Writer'
       Writer Id: {a6ad56c2-b509-4e6c-bb19-49d8f43532f0}
       Writer Instance Id: {58d4dde8-8e6f-4ed6-a9e1-8615f09beed8}
       State: [1] Stable
       Last error: No error

    Writer name: 'COM+ REGDB Writer'
       Writer Id: {542da469-d3e1-473c-9f4f-7847f01fc64f}
       Writer Instance Id: {24749bb7-2efa-469c-b4bc-36af454c01e3}
       State: [1] Stable
       Last error: No error

     

    For the link I posted about it seems that multiple VSS writers can cause the same issue.
    And that quote above is a list of current vss writers on the system.
     

    Then on several sites it also seems Several Windows 10 builds have same problem often.
    I checked and I have one of the bad builds 17134, and several other builds have same problem.
     

    So Thou I thought malware had somehow did this it could very well be one of many reasons.
     

    That does not explain the cd/dvd drive opening and closing but multiple scans find no malware or virus.
    I think one of Windows update I got recently screwed up or caused issue with Kaspersky.
    As I said Kaspersky was blocking even its own site.
    Now with Bitdefender which I don't know jack about I can access all normal sites again and my web is not cut off.

    If computer starts acting strange again I will post back here, but so far so good.

     

    Thanks again for the help.
    I will await any other vss info if you find some but right now not to worried.
    Fred

    Malware Question

    in Resolved Malware Removal Logs

    Posted

    Just now, AdvancedSetup said:

    You can use TreeSize to find out what folders hold the most data and what it is.

    https://www.jam-software.com/treesize_free/

     

    Hey Ron,

    First I really want to thank you for your help with this matter and from past matters with old pc's.
    You and others go far beyond great support and help and what you do is what makes you the most trusted Companies I have ever used.
    When I bought MBAM years ago I never thought about support but only the product.
    Now I don't know what I or others would do without you, so Thank You truly.

    I will get treesize and run it to get a clear picture of files and data.
     

    I got Bitdefender Total Security installed and it already scanned my "c:" drive and shows as clean.
    DO I need to add any exceptions for It or for Malwarebytes into exception lists?

    Thanks in advance
    Fred

     

     

    Malware Question

    in Resolved Malware Removal Logs

    Posted

    1 minute ago, AdvancedSetup said:

    I'm thinking that Kaspersky was blocking and causing issues for some reason. Hopefully, you don't run into that same issue with Bitdender

    Okay then, go ahead and download and install your Bitdefender since you've paid for it. Get it installed and updated and run a scan with it and let me know if you have any issues.

    We can look at fixing the VSS issue as we go along. If possible I'd look at trying to clean up and get more free space if you're a heavy data user and down to 30GB

     

     

    Hello Ron,

     

    Ok I will download and install bit defender.
     

    As for space I have nothing on "c:"or very little.
    During initial setup of computer I made d: drive the data drive for everything.
    So even text files docs, downloads, all go on d: and f: is my gaming drive.
     

    As for VSS, I could always get a backup program just in case to make backups.
    Or if we are lucky fix vss.
    Right now after all the steps you gave me and that FRST fix my "c:" drive is up to 37.9gb free out of 118gb drive

     

    Thanks in advance
    Fred

     

    Malware Question

    in Resolved Malware Removal Logs

    Posted

    1 minute ago, AdvancedSetup said:

    It's not a matter of an infection. You're reporting odd behaviors that don't really make sense as to what would cause it.

    How is the computer running in general? Reboot it a few times and browse the Web, etc. and let me know how the computer is running and if you're still having any issues or not.

    Thanks

     

     

     

    Hey Ron,

    Right now with Kaspersky off the system everything is running fine.
    Firefox is off the system and I am in edge:

    Drives are running normal and I have access to sites the Kaspersky was blocking.
    Even today Microsoft forced some updates on me and it took them fine.
    Dvd/bluray drive has not been opening or closing by itself today (knock on wood).

    Microsoft site, Kaspersky and others I can access fine again as well as the web.

    I contacted ASUS as computer is only a few weeks old and they suggest a full factory reset.
    If I go that route I have to uninstall my software as I need the licenses free to reinstall the software.
    I would also have to disconnect 1 hdd installed on the system and switch back the bluray to factory dvd drive so restore sees same hardware for windows.

    But right now as I type the only thing that seems broken or goofy now is the restore point problem.

    What would you suggest?

     

    Thanks in advance
    Fred

     

    Malware Question

    in Resolved Malware Removal Logs

    Posted

    1 minute ago, AdvancedSetup said:

     

    Wanted to automate a fix but looks like I'll need to research it more. This is one fix, but for an older version of Windows

     

    https://support.microsoft.com/en-us/help/940184/error-message-when-you-run-the-vssadmin-list-writers-command-on-a-wind

     

     

    Ok, So now that were at this point.

    Is system clean of malware/virus?

    If so is it safe to put virus protection back on system?

    I decided to switch away from Kaspersky and Purchase bitdefender.
    I did not install it or download it yet.

    Or should I wait until issue is fixed?

    Thansk

    Malware Question

    in Resolved Malware Removal Logs

    Posted

    3 hours ago, AdvancedSetup said:

    How is the computer running today?

    Please download MiniToolBox save it to your desktop and run it.

    Checkmark the following check-boxes:

    • Flush DNS
    • Report IE Proxy Settings
    • Reset IE Proxy Settings
    • Report FF Proxy Settings
    • Reset FF Proxy Settings
    • List content of Hosts
    • List IP configuration
    • List Winsock Entries
    • List last 10 Event Viewer log
    • List Installed Programs
    • List Devices
    • List Users, Partitions and Memory size.
    • List Minidump Files

     


    Click Go and post the result (Result.txt). A copy of Result.txt will be saved in the same directory the tool is run.

    Note: When using Reset FF Proxy Settings option Firefox should be closed.

     

     

    Oh and that mtb.txt I posted is the Result.txt you asked for that MiniToolBar made.
    I guess they changed the name of it.

    Thanks
    Fred

    Virus Protection

    in General Windows PC Help

    Posted

    17 minutes ago, exile360 said:

    If they have some actual data/test results showing specific incompatibilities between the two products I'm sure that Malwarebytes' QA team would love to see it, but otherwise I would say they're just being cautious.  It's standard procedure for most AV vendors to just claim incompatibility just in case some issue exists that they are unaware of and they assume that all products work the way theirs does, scanning items on access/on creation to determine if they are threats which could actually lead to real conflicts and performance issues, but Malwarebytes doesn't work that way and has been deliberately designed not to conflict with third party AV programs and the QA team at Malwarebytes thoroughly tests each release to ensure that it is compatible, and ESET is among the products they test (so is Kaspersky) so if there were an issue with compatibility they'd have an FAQ or KB entry about it, but they don't because there is none.  The two products work just fine together on every OS that Malwarebytes supports from XP all the way up to the latest version of Windows 10.

    Hey,

     

    Ok Thanks for the feedback and info.
    As soon as I am done with repairs/checks in other thread I will take a look at them.
    I checked the link Ron Posted in this thread so I have been reading it while I wait.

    Thanks again for the help and info.
    Fred

    Virus Protection

    in General Windows PC Help

    Posted

    38 minutes ago, AdvancedSetup said:

    I am already helping you in the Malware Removal forum. Please do not install any other antivirus at this time until we're done @Grenpara

    https://www.howtogeek.com/225385/what’s-the-best-antivirus-for-windows-10-is-windows-defender-good-enough/

     

    Thanks

     

    Hey Ron,

     

    No Worries I am doing nothing but searching on this site.

    Nothing else is being run or installed but what you tell me to in other thread.

     

    Thanks

    Fred

    Virus Protection

    in General Windows PC Help

    Posted

    16 minutes ago, exile360 said:

    I'm actually not aware of any conflicts between Malwarebytes and ESET.  In fact, until recently I was actually using this combination on my own system for a number of years (now I'm just using Malwarebytes, primarily due to the fact that I can't afford both and I trust Malwarebytes on its own to keep me safe).

    Hey exile360,

    I was not aware of ESet only but I was in chat with them when I asked about using their protection and Malwarebytes.
    That's when the rep said I would have to disable Malwarebytes if I used their software.

    I have been with Kaspersky so long I never really needed to find another.
     

    Thanks
    Fred

    Virus Protection

    in General Windows PC Help

    Posted

    3 minutes ago, pondus said:

    The one you like best ....

     

    Hello,

     

    Thanks for fast reply to my question.
    I know some virus software have problems with Malwarebytes PRo which is why I asked.
    Plus I have used Kaspersky for a long time so I want to chose the one that has least problems with Malwarebytes.

    I thought Eset product but they told me I have to disable Malwarebytes for good if I use their software.
    So I am really unsure what works best with Malwarebytes. There was a list on site long time agao but my searches on forum does not find it.

    I need something as right now I am only running Malwarebytes PRo 3 so need something.

     

    Thanks

    Fred

    Malware Question

    in Resolved Malware Removal Logs

    Posted

    Ok really going to bed after this message.

    I copies first line from vssdiag and it says the following

    Quote

    Volume Shadow Copy Service error: Unexpected error querying for the IVssWriterCallback interface.  hr = 0x80070005, Access is denied.
    .
    This is often caused by incorrect security settings in either the writer or requestor process.


    Operation:
       Gathering Writer Data

    Context:
       Writer Class Id: {e8132975-6f93-4464-a53e-1050253ae220}
       Writer Name: System Writer
       Writer Instance ID: {8ddecee2-1662-4517-9799-ad103f160352}
       

    Then I copied one of the other lines and one says the following

    Quote

    Volume Shadow Copy Service error: Error calling a routine on a Shadow Copy Provider {b5946137-7b9f-4925-af80-51abd60b20d5}. Routine details IVssSnapshotProvider::IsVolumeSupported() failed with 0x8000ffff [hr = 0x8000ffff, Catastrophic failure
    ].


    Operation:
       Check If Volume Is Supported by Provider
       Add a Volume to a Shadow Copy Set

    Context:
       Execution Context: Coordinator
       Provider ID: {b5946137-7b9f-4925-af80-51abd60b20d5}
       Volume Name: \\?\Volume{9a3441fb-4375-432b-9073-3bc4388055a8}\
       Execution Context: Coordinator

     

    Ok now I go to bed talk later and thanks

    Fred

    Malware Question

    in Resolved Malware Removal Logs

    Posted

    So

    2 minutes ago, Grenpara said:

    Hey,

     

    Ok I opened additions.txt found the vss and entered time and date and lots comes up when I run vssdiag.

    This is what I see and I hovered over one of the lines.

     

    Thanks

    Fred

    VSSDiag.jpg

    Sorry one more I saw a different line in the diag so here is its picture.

     

     

    VSSDiag 2.jpg

    Malware Question

    in Resolved Malware Removal Logs

    Posted

    3 minutes ago, AdvancedSetup said:

    Sounds good. It's about 12:20 am here. I'll check back on you again some time tomorrow.

    Ron

     

    Hey Ron,

     

    Well that did not take long at all.

    So FRST ran deleted lots of stuff and then appears to have run chkdsk and then restarted.

    I then ran vssdiag and it finds nothing.

    I get message "No relevant entries found. Please check manually on host or inside VMs"

     

    Not sure whats up with that.

    Thanks in advance
    Fred

    Talk later in the day.

    Malware Question

    in Resolved Malware Removal Logs

    Posted

    Hey Ron,

     

    Ok I removed Kaspersky Secure Connection (did not know it didn't uninstall with Kaspersky).

    I will run the other instructions as soon as I do restart as it need to after KSC was removed.
    I will then run the VSSdiag after that is done.

    I have to take my mother to doctor in the morning so I will respond as result as soon as I am back.
    its 2 am here so I will start the process and let it run all night.

    Thanks again for the help.
    Fred

     

Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.