Jump to content

BillH99999

Honorary Members
 View Profile  See their activity

  • Content Count

    650

  • Joined

  • Last visited

Posts posted by BillH99999

  1. Posted

    @AdvancedSetup

    Thanks for getting back to me.  You didn't say whether I should do this on Ethernet or WiFi.  These are the results on WiFi.  If you want me to do them on Ethernet, let me know.

    The reg query results:

    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip6\Parameters
        DisabledComponents    REG_DWORD    0x8

    I will send the other results by private message right away. 

    Thanks,
    Bill

  2. Posted

    Strange.  I was blocked numerous times on Saturday before adding the site to my whitelist.  I took it out of my whitelist just now and was able to reach the site without any problems.  Any ideas why this might happen?

  4. Posted

    @AdvancedSetup

    Thanks for all your help.  I really appreciate your efforts.  I look forward to hearing back with any thoughts others on the team might have. 

    I can live with using WiFi instead of Ethernet if I have to.  Using the 5 gHz WiFi connection gives me about 280 mbps download speed compared to about 600 using Ethernet.  It is still fast although 1/2 as fast as Ethernet.  

    If I could get Malwarebytes and Family Historian to work on my Ethernet connection that would be ideal.

    Thanks again and have a nice weekend!

    Bill

  5. Posted · Edited by BillH99999

    41 minutes ago, AdvancedSetup said:

    Make a new System Restore Point then see if installing this version corrects the issue or not

    https://www.oreilly.com/library/view/lua-quick-start/9781789343229/b9f5f696-15a5-4445-9eb7-5fea563e9592.xhtml

     

    Sorry, I can't do this.  Family Historian does not support and will not run plugins using the newer versions of LUA.  This is a sore point with many users and we have asked Family Historian to update their software to use a newer version of LUA, but so far they have not done so.  I think that LUA is embedded somehow in the Family Historia program itself or something like that.

    I still have the same question I guess.  What does this have to do with the errors in Malwarebytes and why does it work fine when using WiFi instead of Ethernet?

    Thanks,
    Bill

  8. Posted

    The latest version of Family Historian is about 2 years old.  It allows the use of plugins written in an old version of LUA.  I don't know how old it is.  I've been running Family Historian with these plugins for years without any problem.

    Does the age of LUA matter in relation to the problems I'm experiencing.?  I am also getting errors in Malwarebytes which is not old at all.  Also, the errors just started in the last week or two in both Family Historian and Malwarebytes.  The same programs ran without problems before that. 

    Also I don't get the errors while connected via WiFI instead of Ethernet running the same programs.

    Doesn't this seem to indicate a problem with my Ethernet rather than with the programs?  I've been connect most of the day via WiFi and everything has run fine without any problems.

    As for what else I'm running.  This hasn't changed either and is the same whether connected via WiFi or Ethernet.  I usually have Family Historian, Thunderbird, Google Chrome, Firefox, Google Drive, Dropbox, Malwarebytes, Norton 360, SuMO, Greenshot, SyncBack SE, Roboform,  Killer Control Center, Logitech Mouse/Keyboard Controller (can't think of the name right now), and Canon U Network Scanner Selector running.  I might also occassionaly have another program running like Excel or Word or IrfanView.

    All of these would have been running when I wasn't having the problem also.

    Thanks,
    Bill

  9. Posted · Edited by BillH99999

    @AdvancedSetup

    The errors I'm seeing in Malwarebytes are the same as in my initital posting in this thread.

    The other software is Family Historian which is a genealgy software.  The errors I am seeing there are attached.

    It is the same network.  The problem occurs when I connect using Ethernet.  No errors occur when I connect using WiFi.

    I would be happy to supply any logs you would like in Windows if that would help.  I just don't know how to access them.

    Thanks,
    Bill

     

    image1.jpg

    image2.jpg

  11. Posted · Edited by BillH99999

    @AdvancedSetup

    While working on something else today I came across another program experiencing intermittent COM errors related to not being able to connect to a server or no internet connection available.  This is weird because I am streaming TV and surfing the web without problems at the same time.

    So I thought maybe the problem is in my connection... maybe really short interruptions in connectivity or something.  I am normally connected to my network using Ethernet.  I disconnected the cable and connected via WiFi and the errors in my other program stopped.  So I loaded Malwarebytes 4.1.0  1.0.931 and opened the UI.  I did a scan and got no errors.  I did a check for updates and got no errors.  So I updated to 4.1.2  1.0.990.  It installed fine and now will open fine and when I attempt a check for updates there is no error.

    So I guess maybe the problem is in my Ethernet connection some how.  Weird that it just started the other day when nothing had been updated on the computer related to Ethernet.  I guess the problem could be in the Ethernet adapter, in the cable, or in the router/gateway or something.  Not sure how to debug that.  Any ideas on where to start?

    It is also weird that the problem only seems to impact Malwarebytes and one other program as far as I can determine.

    I'd really rather use Ethernet as I get about 450-550 Mbps using Ethernet but only about 40-80 using WiFi.

    Thanks,
    Bill

     

     

  13. Posted · Edited by BillH99999

    32 minutes ago, AdvancedSetup said:

    Please see the following link and let me know if that corrects the Killer error

    https://support.killernetworking.com/knowledge-base/cannot-be-installed-with-errors/

     

    The VSS driver says all is working well for the Volume Shadow Copy service - so that's good.

     

    I ran the uninstaller and then the installer.  The driver installed fine.  The control center would not install from the MS store using Chrome, but I was able to get it using Firefox.  So all seems to be good now with the latest driver from Killer, 2.2.1471 UWD.

    I'm glad VSS is OK now as well.

    Thanks,
    Bill

  14. Posted

    7 minutes ago, AdvancedSetup said:

    No, no. Please do not uninstall Acronis.

    There is an option in Acronis to turn off their Ransomware protection is all. If you removed Acronis please go ahead and reinstall it.

    In Control Panel, Programs, Uninstall

    There should be just an entry for the following

    Acronis Ransomware Protection

    That is the only one we want to remove. Not the full Acronis backup progam

     

    Sorry, I wasn't clear.  I don't have the full program.  All I have is the Ransomware Protection.  That is what I uninstalled.

    Bill

  15. Posted · Edited by BillH99999

    1 hour ago, AdvancedSetup said:

     

    Post back the FIXLOG.txt file once completed.

     

     

    Here are the logs.

    At what point should I reinstall MB?  What version... 4.1.0.167-1.0.931 which would open for me before (but not update) or 4.1.2.175-1.0.990 (which would not open for me).

    I feel very naked without the MB protection.

    Thanks,
    Bill

    Fixlog.txt

  16. Posted · Edited by BillH99999

    1 hour ago, AdvancedSetup said:

    Please double-check and make sure Controlled Folder Access in Windows Defender is not blocking valid programs or paths.

    https://www.howtogeek.com/329532/how-to-protect-your-files-from-ransomware-with-windows-defenders-controlled-folder-access/

    https://www.windowscentral.com/how-enable-controlled-folder-access-windows-10-fall-creators-update

    You also appear to be running Acronis Ransomware protection. It is very possible that it may conflict with Norton or Malwarebytes. Since you already run good Security software I'd suggest probably turning that feature off in Acronis or really checking to verify there is no conflict whatsoever.

    HKLM-x32\...\Run: [Acronis Ransomware Protection] => C:\Program Files (x86)\Acronis\Ransomware Protection\ARPTray.exe [670736 2018-12-14] (Acronis International GmbH -> Acronis International GmbH)

     

    I am not running Windows Defender and have never used this feature of WD to my knowledge.  I looked via the group policy editor as described in the link and Control Folder Access is listed as "Not Configured".  

    I remember now that I tried Windows Defender from 10/7 till 11/3 last year while trying to decide if I'd renew Norton.  I didn't like it as well as Norton so I reinstalled Norton and disabled WD.  I notice now that the date on the Kindle block by Controlled Folder Access was on 10/11/2019 so that would have been during that brief time I had WD enabled.  Sorry I didn't remember this earlier... another senior moment.

    I have been running MB and Acronis side by side for several years without any problem.  I have removed it for now, but will probably re-install it if we ever get MB working again.

    Thanks,
    Bill

  17. Posted

    50 minutes ago, AdvancedSetup said:

    Please download and run the following  Volume Shadow Copy Service (VSS), Diagnostic Tool, from Acronis and see if it can detect and repair any issues.

    Acronis VSS Doctor

    Free tool for diagnosing and repairing Volume Shadow Copy Service issues. Download link on the bottom of the page.
    Download - Acronis VSS Doctor

    In many cases, it can correct the issues on its own. If not, then it will give details on what may be causing the issues. Please save the report in text format and post back that log on your next reply.


    You can also try the tool from Macrium Reflect if the Acronis tool did not work.

    Macrium Reflect Volume Shadow Copy Service (VSS) Repair Tool


    Once you've run the repair tool you need to restart your computer.
    Then check your Event Logs to see if the error was corrected. You can post new logs from FRST which will also show the Event Log entries 

    If you don't have System Restore enabled then please take this time to enable it. If possible choose 10% of your C drive to store Restore Points.

    System Restore disabled or greyed out? Turn On System Restore in Windows 10
     

    Thank you

     

    I ran Acronis and it didn't seem to fix things although I am not sure how to interpret the results.  I have attached the report.

    I downloaded and ran Macrium as well.  Then I rebooted.  I am not sure how to check the Event Logs so have attached the FRST logs.

    System restore is enabled and set to 10%.

    Thanks
    Bill

    AcronisVSSDoctorReport_2020-07-30-18-32-02.txt FRST.txt Addition.txt

  18. Posted

    41 minutes ago, AdvancedSetup said:

    The logs show your driver or control center is from 2019 - It may be the latest, but please go ahead and double check and see if there are any newer drivers for your network card

    Killer Control Center -> C:\Program Files\WindowsApps\RivetNetworks.KillerControlCenter_2.0.2369.0_x64__rh07ty8m5nkag [2019-05-31] (Rivet Networks LLC) [Startup Task]

    https://support.killernetworking.com/software/

     

    I downloaded and installed the latest driver available from Dell Support.  It is Version: 2.2.1453 Last Updated Date: 09 Jul 2020.   It said the install was successful.

    After installing this I get an error when I boot up saying "Issue detected, please go to KillerNetworking.com to download latest driver/software".  

    I did this.  They had version 2.2.1471 available.  This also got an error... "Killer Performance Suite UWD cannont be installed with Killer Ethernet Performance Suite" and the install failed.

    So at this point I am getting the error at boot up and I have no control center software that will run.  

    I don't know what version driver is actually installed as Device Manager says it is version 9.0.0.50 dated 1/14/2020.

    At this point I'm not sure how to fix this.  I can't roll back to a previous version of the driver as that option is grayed out.

    Thanks, Bill

  21. Posted · Edited by BillH99999

    Well... now I think I've messed up.  I thought before trying other things I would see if a clean install of MB might help.

    I ran the support tool and did a clean install and told it to install the latest version.  Unfortunately this failed with an error.

     

    image1.jpg.0c6b4e99b6d0e44151a8f62648a82a76.jpg

    So I ran another clean and this time told it not to install the latest version.  I then installed 4.12.175-1.0.990 from the downloaded installer  This had a problem also.  The UI never loaded.  at the end of the install so I don't know what happened.   The Malwarebytes service and Malwarebytes Tray Application were both running.  So I tried clicking on the icon in the tray to open the UI, nothing happened.  It never opened.  I waited over 5 minutes because I know it can take a long time.

    So I tried again.  I ran another clean and said not to install the latest version.  I installed 4.1.0.157-1.0.931.  This installed and the UI opened at the end of the install.  When I tried Check for Updates, I got the same error as in my original post.

    So, what do you want me to do at this point?

    Sorry.

    By the way, I don't care that much about the browser history.  I can live without it.

    Thanks,
    Bill

     

     

     

  23. Posted · Edited by BillH99999

    2 hours ago, AdvancedSetup said:

    Hello @BillH99999

    I have moved your topic to the malware removal forum where we can run some scripts and clean stuff more. Nothing too bad but a few items we should look at cleaning up.

    System errors:
    =============
    Error: (07/30/2020 08:13:22 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
    Description: The Brave Update Service (brave) service failed to start due to the following error:
    The system cannot find the file specified.

    **** I don't know what this is.  I had installed the Brave browser some time ago, but uninstalled it.  Is this part of that?  I don't see any way to uninstall the Brave Update Service.  How do I do that?

    Windows Defender:
    ===================================
    Date: 2019-10-11 22:19:38.980
    Description:
    C:\Users\wrhen\AppData\Local\Amazon\Kindle\application\Kindle.exe has been blocked from modifying D:\My Documents by Controlled Folder Access.
    Detection time: 2019-10-12T05:19:38.979Z
    Path: D:\My Documents
    Process Name: C:\Users\wrhen\AppData\Local\Amazon\Kindle\application\Kindle.exe
    Security intelligence Version: 1.303.1483.0
    Engine Version: 1.1.16400.2
    Product Version: 4.18.1909.6

    **** I don't use Windows Defender and have it turned off.  Why would it be blocking Kindle.exe?  What is Controlled Folder Access?

    As you can also see, it's not  Malwarebytes alone that is or was having issues connecting and finding their update server.

    Date: 2019-07-23 16:44:37.335
    Description:
    Windows Defender Antivirus has encountered an error trying to update security intelligence.
    New security intelligence Version:
    Previous security intelligence Version: 1.285.74.0
    Update Source: Microsoft Malware Protection Center
    Security intelligence Type: AntiVirus
    Update Type: Full
    Current Engine Version:
    Previous Engine Version: 1.1.15600.4
    Error code: 0x80070645
    Error description: This action is only valid for products that are currently installed.

    **** Again, I don't use Windows Defender.  Why is it trying to update?  

    Date: 2019-07-23 16:44:30.781
    Description:
    Windows Defender Antivirus has encountered an error trying to update security intelligence.
    New security intelligence Version:
    Previous security intelligence Version: 1.285.74.0
    Update Source: Microsoft Update Server
    Security intelligence Type: AntiVirus
    Update Type: Full
    Current Engine Version:
    Previous Engine Version: 1.1.15600.4
    Error code: 0x80240017
    Error description: An unexpected problem occurred while checking for updates. For information on installing or troubleshooting updates, see Help and Support.

    **** Again, I don't use Windows Defender.  Why is it trying to update?  

    You have 2 firewall blocks for Intel which would seem odd.
    FirewallRules: [{08603F14-415E-4920-890F-29101D11A9F0}] => (Block) C:\Program Files\Intel\SUR\QUEENCREEK\x64\esrv_svc.exe (Intel(R) Software Development Products -> )
    FirewallRules: [{81952D5D-8C50-4EA2-905A-0A9129EDA606}] => (Block) C:\Program Files\Intel\SUR\QUEENCREEK\x64\esrv_svc.exe (Intel(R) Software Development Products -> )

    I have no idea what these are or how they are blocked by Windows Defender which I have off. 

    What is this software used for? It is 5 years old. Are you still actively using it? Looks like it may be for your Canon Printer?
    HKLM-x32\...\Run: [IJNetworkScannerSelectorEX] => C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe [235624 2015-01-09] (Canon Inc. -> CANON INC.)

    ****  I don't normally use this but it is for the scanning portion of my Canon printer and unless causing a problem would probably leave it.  Is it causing any problem?

    It looks like you have Push Notifications enabled on Chrome

    Are you sure you have not enabled or allowed Push Notifications on your browser?

    https://blog.malwarebytes.com/security-world/technology/2019/01/browser-push-notifications-feature-asking-abused/

    Turn notifications on or off - Google Chrome

    Web Push notifications in Firefox

    CHR Notifications: Default -> hxxps://app.gotowebinar.com; hxxps://calendar.google.com; hxxps://ticktick.com; hxxps://www.toodledo.com

    **** I guess I'm not sure if this is really a problem or not.  I have just left this setting on the default "Ask Before Sending" and have never been "asked".  Don't I want apps to be able to send me notifications?  

    You have a Host Intrusion Prevention driver from McAfee loading on the system but I don't see any McAfee products listed as being installed
    Did you install this as part of some other special install or were you even aware it was still there running from an old installation of McAfee?

    S3 HipShieldK; C:\WINDOWS\System32\drivers\HipShieldK.sys [226984 2018-05-02] (McAfee, Inc. -> McAfee, Inc.)

    **** I was not aware it was there.  The computer came with McAfee preloaded, but I uninstalled it.  I use Norton 360.  Can I uninstall it somehow?

     

     

    Please disable Norton 360 and Exit out of Malwarebytes and run the following repair script.

    ...

    snip

    ...

    I will start doing the recommended fix right now and get back to you.

    Thanks,
    Bill

     

  25. Posted

    I uninstalled Bonjour and rebooted.  iTunes still works.🙂

    I tried opening MB 3 or 4 times and I didn't get the 'unable to contact license server" error, but it may come back.  As you can see from my earlier posts I thought it was gone once before, but it came back.  Not sure why.

    I am still getting the error when clicking on "check for updates".

    Thanks
    Bill

×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.

  I accept