Jump to content

jsljustin

Honorary Members
  • Posts

    46
  • Joined

  • Last visited

Everything posted by jsljustin

  1. Thank you exile360, you've gone way beyond the normal "call of duty" so to speak, so thanks again. I did contact ExpressVPN support, and they are now aware that ExpressVPN seems to cause conflicts with Malwarebytes and causes freezing and high CPU usage. It remains to be seen if they will, or are able to address this issue. I have used ExpressVPN in the past (but not recently until last week), and didn't have any noticeable problems that I can recall before now. Anyway, thanks again for all your help.
  2. Hi exile360, just an update for you - it definitely seems like ExpressVPN was the culprit. Today, not a single freeze at all, whereas I normally got 3 or 4 in a day. So for whatever reason, the ExpressVPN installation was giving me the freezing. Thanks again for your time and help, it is much appreciated, and this thread may be considered solved. Thanks, Justin
  3. Yes, I think you/I are right. I did uninstall expressVPN a little while ago, and will reboot my windows machine, and see how it goes. I must thank you for your help, I probably should've suspected ExpressVPN was causing problems, as I only installed it about a week ago and it has only been the past week that I have had freezes and CPU maxxing out. Actually, salesman or not, thank you for the recommendation on the Malwarebytes Privacy. I checked out the link you gave, and the prices are quite reasonable. I might consider it for my VPN, as I trust Malwarebytes. ExpressVPN gives me very good speeds, but then they are not someone that I know I can trust (or not), whereas Malwarebytes is a trusted company to me if not most people. I might trial Malwarebytes and see how it goes. I will try and update you here after a while as to whether this issue is solved, although I suspect that uninstalling ExpressVPN will likely have done the trick. Thanks again. Justin
  4. Hi exile360, thank you very much for the rapid assessment. Actually, now that I think of it, these problems of freezing seemed to start about a week ago, when I first installed expressVPN. With avast, I have used it happily alongside malwarebyes, but noting that I don't use any of Avast's web / online scanners, I have only ever set up Avast as a file shield, I have always done this, and used Malwarebytes as protection at the browser / web level, and never had problems like this. But it may well be ExpressVPN causing the problems. I actually disabled all ExpressVPN services, and so as far as I could tell, nothing to do with ExpressVPN was active or running at all, but there must be something with it that is causing MBAM to use max CPU, and so I think I will uninstall ExpressVPN and see if that fixes the issue. Thank you. Justin
  5. Hi, thank you for the quick reply. I've attached the file here as requested. Thanks. mbst-grab-results.zip
  6. Hi all, have been noticing that my Windows desktop is freezing, managed to catch the CPU usage at the end of the latest freeze and Malwarebytes was using almost all the CPU at this time. Please advise as to why this latest version of Malwarebytes (4.2.0) is causing my CPU to be maxxed out from time to time and for my desktop to freeze. Thank you.
  7. Just download the latest build from the website, I am pretty sure it is already a version that has the fix. Then update it from within the software. https://www.malwarebytes.com/ I deactivated then uninstalled MBAM3, then rebooted, reinstalled, re-activated then updated. So far all is working just fine here. As for your license, you *should* be ok, but if not, just email malwarebytes support and they will help you out.
  8. Hi all, I too got hit by the high memory issue with MBAM3. I finally figured out that it was a mbam issue after many program and pc crashes and freezes... Kudos for mbam staff getting a fix. Here is a suggestion: some sort of alerts for paid users? It could be via email (opt in), or even better, is it difficult to implement an alert notification system from within mbam3 itself? At the moment, I only get notifications regarding protection settings, or if malware is detected or blocked. Why not have a built in alert system, with actual popups on-screen, for critical issues like the memory issue we had today? The issue without notifications like this is what happened to me: I had the issue, and even with mbam3 updating itself automatically to a fixed version didn't fix it. I needed to disable stuff and then restart, but how was I to know to do all this? I only found out as I was about to put in a bug report here, only then to read about the issue and how to fix it. An inbuilt notification popup, such as "there is a critical issue with malwarebytes. Please upgrade to version XX.XX then turn off web protection, disable mbam in services.msc, then reboot". That way I could have saved a day of me thinking my computer or software had major issues. Good idea? Anyway, thanks for the fix. Cheers - Justin.
  9. The other issue is random loss of internet connectivity, at least at the level of my email client and my browser. Just for reference, I use Mailbird Pro for a desktop email client (gmail via IMAP), and Firefox Quantum 57 (57.0.4 as of now). For about a month it was looking like it was my broadband service provider (100Mbit optic fibre service), but today as I was having the other issues with mbam3, I again noticed loss of service. The loss of service is short lived (at most lasting a minute at a time, mostly less than this). It sometimes affects all loaded webpages (pages time out / cannot connect to server) or webpages partially load, with images and content failing to load, or sometimes it hits style sheet loading (css files) and so pages look like a webpage from the early 1990's, with only html rendered. When it happened today, I quickly shut down mbam3 and refreshed the page, and it came good straight away. Normally, when a page fails to load or load properly, it takes a minute before a refresh will make the page load again. It not only affects my browser, but remote images in my mail client also fail to load. However, I can ping any server from a command prompt no problems at all. I can do more testing at my end to see if I can reliably conclude it is mbam causing these temporary losses of connectivity at the email / browser level (eg I can turn off mbam all together for a day and see - I get the problem somewhat randomly anywhere from 1 to 5 times a day). I read in another thread in these forums that (for a firefox fix) it was suggested to turn off the "Enable self-protection module" in mbam3 settings - is this relevant advice to try? And if so, would this setting also impact my mail client, which doesn't need or even know about firefox at all. Ideas? Thanks.
  10. Ok thanks Porthos, will do. By the way, I stumbled upon another major issue that until today I thought was an issue with my broadband provider, but it is looking like MBAM. I don't want to start another topic so soon, but should I leave it until tomorrow, and maybe then open a new topic, or just edit this thread title?
  11. Thanks Porthos, I actually discovered this in another thread I was reading just now, at about the same time you replied, but thanks. Is it a new feature? I don't recall mbam3 manual scans maxxing out the CPU before. Anyway, is a good feature I guess, at least with an option to lower mbam's priority as well.. As for the other two issues, maybe it is just a one off, no harm done I guess, as the scan I did earlier showed nothing detected, and the issue of the real-time protection not turning on, it is working fine now, but worst case scenario is I can deactivate my license and reinstall mbam3 from scratch. That fixes a lot of things.. On a completely off-topic side note, I am finding the last few Windows 10 updates have been nightmarish.. I don't know how MS can expect everyone else (software developers and driver developers) to keep up.. I have had BSOD's trying to update every time, even had to go back to a clean install just to get update 1709 to take without Blue Screening, reverting and then trying to reinstall.. Anyway, enough of my rambling... Thanks for your help. Justin. Edit - was posting, didn't see your later reply. If it persists as an issue (i.e. if mbam3 reverts to free without reason or warning), I'll post back and take your advice and analyse further. I guess I was kinda hoping someone would say "oh yes, the 'reverting to free' problem. Yes we know about that. Do this."
  12. Hi all, running Mbam Premium version 3.3.1.2183 on Windows 10 Home version 1709 OS build 16299.125 64bit. Just now I decided to run an extra manual scan, and noticed that it was running in free mode, with all real-time ability obviously disabled. For how long? I have no idea. It could have been in free mode for weeks, I have no idea. But I had definitely entered my license details when I set up this particular Windows 10 partition instance, which was from memory 2 months ago, and was definitely running the paid, activated form last time I checked. That is concerning if, for whatever reason, mbam 3 decides to silently revert to a free version without warning. I've never seen this before, and so I've trusted mbam3 lately to be basically set and forget, until the paid version gives me any sort of notification, which means I don't interact with mbam3 at all unless I get notifications. But of course I wasn't getting any, as mbam3 slipped quietly out of its premium activated state and into free version. Also, two other issues. Upon reactivating mbam3, I decided to do a manual scan (as planned). Nothing detected at all, which is good, but the CPU hit was high, in excess of 70% CPU usage throughout. At 70% usage, that is enough to stall everything else on my machine, and makes it impractical to do anything other than the scan. Lastly, I had trouble turning on real-time web protection at first, but it seems to be sticking for now. This is just a general report of these issues. I am aware of all the other steps that I can take (logs etc) to give to tech support, but I'm tired right now, and so am just putting this up as a first step to see what everyone else says. Thanks - Justin
  13. Just for your info/help, I was having similar problems: and MBAM staff and I think that my BSOD's and farflt.sys might be coincidence as well.. I came to the conclusion like you that it may be a fault with the November Windows Feature Update. All my drivers are up-to-date, but who knows? The past two windows updates have given me problems. Hope that helps.
  14. Hi Bob, yes, it might well be just a coincidence - the 2 bugchecks that event viewer was able to catch were preceded both times by farflt.sys being registered a second or two before. Anyway, sorry if I have had you and MBAM devs barking up the wrong tree. Will let you know if I have further issues. Thanks again!
  15. I read in another thread that a fix for this is on the way. I thought that my browser (Firefox 57 Quantum) had been taken over, have had 267 detections all from *.symcd.com. I get this from sites that definitely shouldn't have a problem, such as trusted banking sites etc. But a fix I think is coming. Edit - sorry Dashke - posted too late
  16. Hi Bob, I just tried that - by exiting Malwarebytes, checking via a cmd prompt as you said, then restarting MBAM, but no BSOD. Maybe it is just coincidence that farflt.sys and the BSOD's I got happened at about the same time? But note also that the crashes started occuring when I upgraded to the latest Windows (Windows Feature Update 1709). So I am stumped as to what to do. My system has been stable ever since you requested the full memory dump from a BSOD. Maybe the trick is to not want a BSOD, and then one will happen, lol, as wanting a BSOD seems to make them disappear
  17. Hi Bob, no worries at all! It has been many days now without a BSOD at all, I am wondering if it only gets triggered when trying to register / install the farflt.sys driver? In which case, should I uninstall MBAM 3 premium and then reinstall it again, to see if I can trip up a BSOD? If so, is there a preferred way to uninstall MBAM 3, or is via control-panel OK? Also, I have set my dumps to a full memory dump, but I am worried as sometimes dumps don't get written - if there is any problem, sometimes the dump file doesn't get written at all (volmgr issues). Anyway, what do you think? Thanks - Justin.
  18. Hi Bob, yes, I can set my virtual memory size to automatic, it won't need to be any set size, I just have it set to the recommended (around 2GB) as this avoids the crazy high CPU usage bug. I'll set it up now and set the dump to a full memory dump. But it will require that I get another BSOD, which may or may not happen, as Windows 10 seems to be somewhat "adaptive" and seems to adjust things if BSOD's are occuring (that has been my experience, anyway). The only other concern is that sometimes memory dumps don't get written, for whatever reason. But I will try and get a BSOD and full memory dump for you. I will PM you with a link if/when I have what you need. Thanks.
  19. Hi again tetonbob, please find attached a minidump file for (I think) the first of the two BSOD that seemed to be caused by farflt.sys. It does point to memory (memory management) as the cause, but looking at parameter 1 suggests "a corrupt PTE has been detected". You probably would know better than me, but my understanding is that this parameter value can often come about due to page faults or hard page faults. I actually got similar BSOD not that long ago when trying to update to the latest Windows 10 update, so I did run memtest86 (not memtest86+ which gives false positives at test #7 when using multicore CPU's) - ran it for 19 passes on a known good stick (4GB) to test the motherboard Ram slot 1 - came back with no errors. Then I ran it for 15 hours (8 passes) on the two 8GB sticks (16GB) of ram that I normally use and am using now, again it came back with no errors at all. Let me know how you go. Thanks - Justin. 111017-5890-01.zip
  20. Hi tetonbob, I've attached the event viewer log for you. Note that it is the event viewer log for Windows > System, this is the log that is relevant and shows the bugcheck events. I tried setting the memory dump settings to a full dump, but it requires me to set my pagefile to 16GB which is not the recommended value. I have the pagefile set to the recommended settings for the reason that setting it to 16GB (Automatic management) causes a well known issue where the CPU can run at 99% continuously. I will post back shortly with the minidump file, see how you go with that. If only absolutely necessary, I can set the pagfile to 16GB and set the dumps to a full memory dump. As for reproducing the problem, that might be tricky. The BSOD occurred twice today so far, only on booting into windows, but it doesn't do it every time. Thanks. JustinL_EventLog.zip
  21. Hi tetonbob, I got the crashes before I even had a chance to go over all the windows 10 settings, so the windows 10 default was in place (automatic memory dumps). Also, one BSOD failed to write the memory dump (volmgr failure due to whatever reason). I've attached the mb-check-results.zip file after following the instructions per your link above. I will get a dump file to you as soon as I can, note that it is a minidump, not a full kernel dump, due to the settings in windows 10 being at their defaults. Note that an examination of the dump file is not all the evidence. Careful examination of event viewer has shown me that two of the BSOD occurred immediately after the farflt.sys driver was registered in event viewer as installed (within 1 second a bugcheck error was generated in event viewer). Thanks. mb-check-results.zip
  22. Sorry, I meant to say in "Event Viewer" I was able to notice that within 1 second of farflt.sys being installed, a bugcheck was listed (in event viewer).
  23. Hi all, just reinstalled Windows 10, and have had several BSOD (Blue Screens, or Bugchecks). Am running Windows 10 1709 (Fall 2017 feature update). All blue screens have shown that within a second of farflt.sys being installed (kernel mode driver), which appears to be a Malwarebytes driver component, I get a system crash (BSOD). Am running Malwarebytes Premium Version 3.3.1.2183. Analysis of 2 of the 3 BSOD (1 failed to write the dump to disk) give memory management errors, but I already tested my memory over 3 days using memtest86, and tested 2 different slots and 3 different sticks of ram, and after 19 passes on 1 4GB stick and 8 passes on 2X8GB sticks, all came back with no errors. Plus, the BSOD all occurred immediately (within 1 second) of farflt.sys being installed, which suggests to me that this component is a fault. I also suspect that this driver is not installing properly due to the BSOD's, hence the reason why it keeps trying. Any help on this? I read in another thread to disable ransomware protection, but I thought I'd ask for advice and/or have this reported to see if we can get a fix for it. Thanks - Justin
  24. Hi geekGirl999, yes, good points. Unfortunately, Windows update keeps re-downloading the Fall creator update for me in the background, the best I can do at the moment is kick it forward by snoozing it for 3 days. I did rule out Avast AV and MBAM 3 - at least, I still got BSOD's with both of these uninstalled, but the update seemed to get further along before Blue Screening with AV and MBAM uninstalled. I agree that we are defacto beta-testers for the Windows 10 enterprise users - they get the updates after all the bugs that we get to find get ironed out :-) I am fairly confident that this update has caused some sort of conflict either with software or drivers on my system, but unfortunately I still am at a point where I have to test my hardware now as well, as I am out of ideas and options.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.