ArKay99

Hello exile360, and thanks for responding so quickly. I found that link in the automated reply from my post. I would have gone there first, but there was no apparent link to do that until the automated reply came up and it was in the "Reveal hidden contents" button. I've filled out the form and submitted the content of my post to the ticket. If I've not seen the link you provided, my bad, but I guess it should be made more apparent... jmho.

My apologies if this isn't the correct place to get this resolved, as my explanation below will show. If this is not the proper place, could it be moved to the proper place, as I only have one day left on my subscription. I responded to the Renew Now notice last week. I clicked the button in the popup (when I start the machine). It showed the renew price of $24.95 for a 1 year subscription for one device. It took me to the store where my Shopping cart showed that and offered the payment options of one of 4 credit cards and PayPal. I clicked on PayPal and it looked like it was working, only to pop up what seems to look like the PayPal window but instead of a nicely formatted graphics output it is old style text, text links, and old style buttons. If I click on the OK button, nothing happens. If I click on the 'Agree and Continue" button it shows a little wait cursor and then a few seconds later brings me back to the Secure Checkout page but with the addition text showing "The fields in red must be completed before you can continue" (I'm paraphrasing because I don't remember exactly the wording) however, there are no fields, and no red indicators. When I click on Customer Support link at the bottom of the page I just go into an endless wait state with a spinner and no resolution. The process is the same when I use the renew button in the MWB app. I thought there might be a problem with the site on either end at the time, so I thought I'd wait and it would get fixed. This morning, MWB shows I have one day left on my subscription and I went to renew and I'm having the same issues. What concerns me further is that I've made numerous attempts to PayPal attempting to new, and am wondering if these attempts will be charged to me upon finally getting the problem resolved. Any help would be appreciated, as I really do wish to continue using MWB. However, if I lose the update price and have to redo all my exceptions (many) I will have to reconsider.

The problem has been resolved. I downloaded and installed the most recent version with the version of MB-Clean I had downloaded 3 days ago and it's all working correctly now. Thanks for the quick fix!

It is fixed now. I had uninstalled before I came to the forum fearing I or MWB had been compromised. I used the version of MB-Clean I dl'd 3 days ago to dl and install the new version and it's up and running with no issues. Thanks for the quick fix!

Maybe they hired the guy that got fired from the Hawaii notice?

Hi, it looks like I've got the problem lot's are experiencing. 3 days ago I had a problem with my computer shutting down because of a bios misconfiguration and processing some video files with Movie Maker. After that was resolved I started to get the pop about web protection not on and I couldn't turn it back on. I downloaded the MB-Clean tool and used it to do a clean removal and reinstall of MWB 3.3.1 yesterday and it appeared to fix the problem. About 15 mins ago, while on the web doing some searches I got a low memory warning and then a BSOD. After the dump and reboot I opened Task Manager and watched the processes window and saw MWB eating memory at about 32 megs every update until I had about 1/2 my memory used up. I ended the process but it restarted and commenced the same leakage. So, I ended the process and used MB-Clean to remove MWB and reinstall again. This time it took forever to install and when the welcome screen showed it revealed a standard license. When I input my license key it appeared to accept it but never updated. So, I removed MWB using the Programs and Features selection in Control Panel. I am currently not using MWB until this is resolved. I'm hoping it's a problem with the software and not an attack.

Hi Ron and Devin, I received the new memory and installed it in place of the old memory and the scan completes. I'm humbled to say that I went to a software company to fix my hardware problem. I thank you for your time and patience and apologize for wasting your time and effort.

Hi Devin, I have made the changes to MWB and ran the Custom scan with C: drive and Rookits enabled. It ran about 10 mins and crashed. I then ran mb-check and have attached the resulting zip file as instructed. mb-check-results.zip

Ok, will do.

Hi Ron, I obtained a copy of memtest86 and ran that for a while and it showed some errors in one section of my memory. I've ordered 2 more sticks of the same memory and will replace the one that showed a fail and see if that fixes the problem. Will report back after I install the memory and test.

Hi Ron, I've been working to get you the .DMP file according to your directions. My Memory dump was set to Kernel and there was no choice for Complete memory dump. So I was able to edit the registry and change the CrashDumpEnabled parameter from 2 to one which gave me the choice of Complete Memory. Then I ran the scan configured for Custom and C: and Scan For Rootkits checked. It crashed as soon as it got to the the file system section but didn't trigger a memory dump. What seems to be happening, and this has been consistent, is instead of going to a BSOD, a hard reset is being triggered, because it goes straight to a black screen followed by a boot. What I did next was to find a way through enabling a registry key to give me a BSOD using the key combo of CTRL+ SCROLL LOCK + SCROLL LOCK. I loaded MWB, but didn't run it and triggered the BSOD manually. That is the only way I know of to get the full memory dump which I did get. However, since this was not triggered by the scan, there probably is no way to know if this file contains what is needed to find the error. The last bit of difficulty I'm having regarding this is the .DMP file is 16 gig, and WeTransfer will only do up to 2 gig., so it won't let me initiate the upload. I have Dropbox, but that has a 2 gig limit also. My apologies, but I have not been able to get you the files in the configuration you requested. Is there another means to accomplish this?

Thanks for all your help so far. It's greatly appreciated.

Hi Ron, I've attached the fixlog.txt after running the new version of FRST64.exe with fixlist.txt, both on the desktop. Fixlog.txt

Hi Ron, I did a System Restore Point. Also I've zipped and uploaded the files you requested. Then proceeded to edit the registry according to your list. There were a few entries that were not there, or were different than the item in the list. I've notated them here. In your list: [HKEY_CURRENT_USER\Software\Microsoft\Windows\Windows Error Reporting\Debug] "StoreLocation"="C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppCrash_mbamservice.exe_3075d91cb6d3cf7cbee23fe121933a621bf66fb0_0467d883" In my registry: [HKEY_CURRENT_USER\Software\Microsoft\Windows\Windows Error Reporting\Debug] "StoreLocation"="C:\Users\ArKay99\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppCrash_Explorer.EXE_e9cf5a57f9bf35ec61e8535fedf14cbf86df1_14f17c40" In your list: [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\eventlog\System\mbamchameleon] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\eventlog\System\mbamchameleon] "EventMessageFile"="C:\Windows\system32\drivers\mbamchameleon.sys" In my registry: No entries for either. In your list: [HKEY_USERS\S-1-5-21-502676559-664533377-4181304041-1000\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\bc0d9b25_0] @="{0.0.0.00000000}.{4d8c1f1e-27c3-4572-8d8a-13ebd4ffe405}|\Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\mbam.exe%b{00000000-0000-0000-0000-000000000000}" In my registry: Only Default and value not set In your list: [HKEY_USERS\S-1-5-21-502676559-664533377-4181304041-1000\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\bc0d9b25_0] @="{0.0.0.00000000}.{4d8c1f1e-27c3-4572-8d8a-13ebd4ffe405}|\Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\mbam.exe%b{00000000-0000-0000-0000-000000000000}" In my registry: Only Default and value not set In your list: [HKEY_USERS\S-1-5-21-502676559-664533377-4181304041-1000\Software\Microsoft\Windows\Windows Error Reporting\Debug] "StoreLocation"="C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppCrash_mbamservice.exe_3075d91cb6d3cf7cbee23fe121933a621bf66fb0_0467d883" In my registry: C:\Users\ArKay99\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppCrash_Explorer.EXE_e9cf5a57f9bf35ec61e8535fedf14cbf86df1_14f17c40 I have not edited or done anything else with the above entries. I have not downloaded or run the FRST with the fixlist.txt parameters. I am awaiting further instructions or the 'go ahead' from you based on the differences in the registry. AppCrash_mbamservice.exe_3075d91cb6d3cf7cbee23fe121933a621bf66fb0_0467d883.zip MBAMService.exe.2168.zip

Hi Ron, I've completed the tasks as outlined in your response above. MWB is now not installed at this time. FRST.txt Addition.txt mb-clean-results.txt SystemLook.txt