T_Ronalds
-
Posts
16 -
Joined
-
Last visited
Content Type
Events
Profiles
Forums
Posts posted by T_Ronalds
-
-
Several times now, I have been forced to restart my computer at VERY in-opportune times due to a Malwarebytes update. It starts innocently with a notification that an update is available, so I agree to have it installed. But after the update runs, a popup appears saying the computer must be restarted to complete the update. It only has one button: "restart NOW". The message says if I don't restart now, the computer will automatically restart in 10 minutes! There is no other choice, no way to abort or delay the restart. This usually happens when I am VERY involved in a major project with several apps open and I have to scramble to get everything saved and closed before the shutdown! Then after the restart, I have to remember how to put everything back in place to continue working on my projects.
MAJOR P.I.T.A.!!!
Why is there no option for "I'll restart later" or at least to reschedule it? If this continues, I'll have to remember to deactivate MWB or possibly just deinstall it from this computer. Hopefully someone in development department will read this and provide some control to the user instead of arbitrarily restarting my computer without my permission.
-
Here's the scan results. I'm still on Win7 because I'm an old dog that doesn't like new tricks. My wife has Win10 and I hate using that computer. Tiles and transparency. Just follows the trend of software getting more pretty as opposed to more functional. Like web 2.0. Every website has huge 4k images all over the place with corporate-jargon but no content of value anymore. Looks nice on your iPhone though. Whatever happened to content?
SecurityCheck by glax24 & Severnyj v.1.4.0.53 [27.10.17] WebSite: www.safezone.cc DateLog: 15.10.2020 12:59:55 Path starting: D:\Temp\SecurityCheck\SecurityCheck.exe Log directory: C:\SecurityCheck\ IsAdmin: True User: Terry VersionXML: 7.97is-15.10.2020 ___________________________________________________________________________ Windows 7(6.1.7601) Service Pack 1 (x64) Professional Lang: English(0409) Installation date OS: 13.02.2012 23:12:14 LicenseStatus: Windows(R) 7, Professional edition The machine is permanently activated. Boot Mode: Normal Default Browser: C:\Program Files (x86)\Mozilla Firefox\firefox.exe SystemDrive: C: FS: [NTFS] Capacity: [223.2 Gb] Used: [155.4 Gb] Free: [67.8 Gb] ------------------------------- [ Windows ] ------------------------------- [color=red][b]Extended support has ended 14.01.2020, Your operating system may be vulnerable to new types of threats[/b][/color] Internet Explorer 11.0.9600.19504 [color=red][b]Warning! [url=https://www.catalog.update.microsoft.com/Search.aspx?q=KB4537820]Download Update[/url][/b][/color] User Account Control [b]enabled[/b] (Level 2) Notify before download Date install updates: 2020-01-17 01:08:58 Windows Update (wuauserv) - The service is running Security Center (wscsvc) - The service is running Remote Registry (RemoteRegistry) - The service has stopped SSDP Discovery (SSDPSRV) - The service is running Remote Desktop Services (TermService) - The service is running Windows Remote Management (WS-Management) (WinRM) - The service has stopped ------------------------------ [ MS Office ] ------------------------------ Microsoft Office 2007 v.12.0.6612.1000 ---------------------------- [ Antivirus_WMI ] ---------------------------- Malwarebytes (enabled and up to date) --------------------------- [ FirewallWindows ] --------------------------- Windows Firewall (MpsSvc) - The service is running [color=red][b]Disabled the standard profile for Windows Firewall[/b][/color] --------------------------- [ AntiSpyware_WMI ] --------------------------- Malwarebytes (enabled and up to date) Windows Defender (enabled and up to date) ---------------------- [ AntiVirusFirewallInstall ] ----------------------- Malwarebytes version 4.2.1.89 v.4.2.1.89 --------------------------- [ OtherUtilities ] ---------------------------- DivX Setup v.10.8.7.0 [color=red][b]Warning! [url=https://download.divx.com/stable/divx/DivXInstaller.exe]Download Update[/url][/b][/color] GPL Ghostscript v.9.10 [color=red][b]Warning! [url=https://ghostscript.com/download/gsdnld.html]Download Update[/url][/b][/color] [color=blue][b]Uninstall old version and install new one.[/b][/color] Notepad++ (64-bit x64) v.7.8.7 [color=red][b]Warning! [url=https://notepad-plus-plus.org/downloads/]Download Update[/url][/b][/color] Microsoft .NET Framework 4.8 v.4.8.03761 Oracle VM VirtualBox 6.1.2 v.6.1.2 [color=red][b]Warning! [url=https://www.virtualbox.org/wiki/Downloads]Download Update[/url][/b][/color] Zoom v.5.2.1 (44052.0816) [color=red][b]Warning! [url=https://zoom.us/client/latest/ZoomInstaller.exe]Download Update[/url][/b][/color] Cisco WebEx Meetings Microsoft Office Enterprise 2007 v.12.0.6612.1000 [b][color=red]Warning! This software is no longer supported. Please use [url=https://products.office.com/en-us/]latest Microsift Office[/url], [url=https://products.office.com/en-us/office-online/]Office Online[/url] or [url=https://www.libreoffice.org/download/download/]LibreOffice[/url][/color][/b] FileZilla Client 3.47.2.1 v.3.47.2.1 [color=red][b]Warning! [url=https://filezilla-project.org/download.php?show_all=1]Download Update[/url][/b][/color] TeamViewer v.15.10.5 VLC media player v.3.0.11 Microsoft Office 2007 Primary Interop Assemblies v.12.0.4518.1014 [b][color=red]Warning! This software is no longer supported. Please use [url=https://products.office.com/en-us/]latest Microsift Office[/url], [url=https://products.office.com/en-us/office-online/]Office Online[/url] or [url=https://www.libreoffice.org/download/download/]LibreOffice[/url][/color][/b] Microsoft Office 2007 Service Pack 3 (SP3) [b][color=red]Warning! This software is no longer supported. Please use [url=https://products.office.com/en-us/]latest Microsift Office[/url], [url=https://products.office.com/en-us/office-online/]Office Online[/url] or [url=https://www.libreoffice.org/download/download/]LibreOffice[/url][/color][/b] TeamViewer (TeamViewer) - The service is running -------------------------------- [ Arch ] --------------------------------- 7-Zip 19.00 (x64) v.19.00 --------------------------------- [ SPY ] --------------------------------- VNC Server 6.6.0 v.6.6.0.41938 [b][color=red]Warning! RAT![/color][/b]. VNC Viewer 6.20.113 v.6.20.113.42314 [b][color=red]Warning! RAT![/color][/b]. -------------------------------- [ Java ] --------------------------------- Java 8 Update 261 (64-bit) v.8.0.2610.12 --------------------------- [ AppleProduction ] --------------------------- Bonjour v.1.0.106 QuickTime 7 v.7.79.80.95 [b][color=red]Warning! This software is no longer supported.[/color][/b] Please [b][url=https://support.apple.com/HT205771]uninstall it[/url][/b] and use another software. Bonjour Service (Bonjour Service) - The service is running --------------------------- [ AdobeProduction ] --------------------------- Adobe AIR v.32.0.0.89 [color=red][b]Warning! [url=https://get.adobe.com/air/]Download Update[/url][/b][/color] Adobe Flash Player 32 NPAPI v.32.0.0.445 Adobe Flash Player 10 ActiveX v.10.0.32.18 [color=red][b]Warning! [url=http://download.macromedia.com/pub/flashplayer/latest/help/install_flash_player_ax.exe]Download Update[/url][/b][/color] ------------------------------- [ Browser ] ------------------------------- Mozilla Firefox 81.0.2 (x64 en-US) v.81.0.2 Google Chrome v.86.0.4240.75 ----------------------------- [ EmailClient ] ----------------------------- Mozilla Thunderbird 68.12.1 (x64 en-US) v.68.12.1 [color=red][b]Warning! [url=https://www.mozilla.org/en-US/thunderbird/all/]Download Update[/url][/b][/color] Windows Live Essentials v.16.4.3528.0331 [b][color=red]Warning! This software is no longer supported.[/color][/b] Windows Live Mail v.16.4.3528.0331 [b][color=red]Warning! This software is no longer supported.[/color][/b] ------------------ [ AntivirusFirewallProcessServices ] ------------------- C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe v.4.0.0.814 Malwarebytes Service (MBAMService) - The service is running C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe v.3.2.0.920 Windows Defender (WinDefend) - The service is running ---------------------------- [ UnwantedApps ] ----------------------------- Chaos [b][color=red]Warning! Suspected Adware![/color][/b] If this program is not familiar to you it is recommended to uninstall it and execute PC scanning using [url=https://www.malwarebytes.org/mwb-download/]Malwarebytes Anti-Malware[/url] and [url=https://ru.malwarebytes.com/adwcleaner/]Malwarebytes AdwCleaner[/url]. Before uninstallation and scanning it is necessary to consult in the forum where cure is provided for you!!! ----------------------------- [ End of Log ] ------------------------------
-
Time to celebrate - IT WORKS!
I'd like to thank you for your tenacity in getting a solution for this problem. Was it just me or were others having this issue? Bug in the last version? Anyway, thanks again - go have a beer!
-
1
-
-
Installed older version as administrator. Went to successful completion. No reboot required.
Turned off both update options.
Rebooted computer just to check for issues. None so far. Awaiting further instructions!
-
Sorry for the delay, was unaware of your response. So I ran procmon from desktop then ran your link for MB. It started installing then just stopped, no reboot or message. I stopped procmon but didn't see any log file created from it. I configured procmon to log to my d:\temp\ drive and rebooted several times, then restarted procmon and MB install link. It didn't reboot. So I stopped logging in procmon and did a manual reboot, which was followed by the two more MB initiated reboots. Got message again saying MB could not be installed.
I've bundled up all the results in a couple of zips for you at wetransfer.com, here's the link: https://we.tl/t-BhDZB0hc2u
One zip file contains files from c:\windows\temp folder and the other contains files from d:\temp\ (procmon and mbsetup logs). Incidentally, there was an mbamservice.log (WITH an "i" after "mbam") in C:\Windows\temp, nothing without the "i". It's included in the zip.
-
Attached is the zip file from MST. Also, I recall that after the last run when I tried to install MB, the system did not reboot and it did not appear that MB actually was completely installed since it did not appear in my programs menu. So after I ran the attached zip file, I thought I would just do a reboot. After I rebooted (about a minute later) Windows rebooted again, AND AGAIN (the old 3 reboot pattern mentioned earlier). After the 3rd reboot, got the message that MB...will not install on your computer.
So I ran MST again and have attached that more recent zip file for you just in case it makes a difference.
mbst-grab-results BEFORE 3 REBOOTS.zip mbst-grab-results AFTER 3 REBOOTS.zip
-
All went smoothly. When MB was installing, got a quick notification that it wasn't running and that I should start it. The installation dialog went away with no notice that the install was completed though. Here's the mbamiservice log. The process monitor file was too big to attach (355mb) so I put it on my website at deluxdeals.com/Logfile.zip where you can download it from.
-
Downloaded process monitor.
The file mb4-setup-consumer-4.2.0.179-1.0.1025-1.0.28979.exe is on my desktop.
Here are the results of the FRST scan.
-
Installed MW as administrator as instructed. During the install, a notification popped up for a moment saying MW needed to be started. When install finished, got notice to restart, which I did.
The computer restarted THREE TIMES! After the first two restarts, the computer looked like it had completely finished rebooting, then it rebooted again. After the third reboot, got the message "An error has occurred and Malwarebytes will not install on your computer."
Ran support tool, here's the logs.
Sigh....
-
When I clicked FIX, Windows Explorer did a restart, scary! Anyway, here's the log.
-
Ran FRSTEnglish.exe from the download folder and did the search. Search.txt (attached) was not in the desktop but in the same folder the exe was run from.
Ran MSERT and selected full scan (you didn't say which one to run). Log is also attached.
-
Ran the Avast uninstall in safe mode.
Ran support tool as administrator. Advanced | Clean | Ok
After completion it didn't reboot, but said "All Malwarebytes products have been removed from your computer. Do you want to reinstall the latest version of Malwarebytes for Windows?" I replied NO and it never asked for a reboot. I rebooted anyway. Here's the results of the clean:
Quote2020-08-31 14:15:30.924 --------LOGGING STARTED----------
2020-08-31 14:15:30.924 Tool Version: 1.7.0.827
2020-08-31 14:15:30.924 Dll Version: 1.0.0.226
2020-08-31 14:15:30.925 Log Path: D:\Temp\mwbC082.tmp\mbst-clean-results.txt
2020-08-31 14:15:30.927 User Account Type: Administrator
2020-08-31 14:15:30.929 Date/Time Log Created: 2020-08-31 14:15:30.928
2020-08-31 14:15:30.929 Operating System: Windows 7 Service Pack 1 x64
2020-08-31 14:15:30.930
2020-08-31 14:15:30.931 ======================================================
2020-08-31 14:15:30.931 Pre-Reboot Cleanup
2020-08-31 14:15:30.931 ======================================================
2020-08-31 14:15:30.970 OpenService mbamchameleon failed (1060)
2020-08-31 14:15:31.008 Launching process:C:\Program Files\Malwarebytes\Anti-Malware\unins000.exe /VERYSILENT /SUPPRESSMSGBOXES /NORESTART /log="D:\Temp\Mbam3x.log"
2020-08-31 14:15:31.010 Failed to launch C:\Program Files\Malwarebytes\Anti-Malware\unins000.exe /VERYSILENT /SUPPRESSMSGBOXES /NORESTART /log="D:\Temp\Mbam3x.log", reason:(The system cannot find the file specified.(error=2))
2020-08-31 14:15:31.028 File C:\Program Files\Malwarebytes\Anti-Malware\mbaminstallerservice.exe was deleted successfully,
2020-08-31 14:15:31.814 File C:\Program Files\Malwarebytes\Anti-Malware\mbemsg.exe was deleted successfully,
2020-08-31 14:15:31.816 File C:\Program Files\Malwarebytes\Anti-Malware\mbuns.exe was deleted successfully,
2020-08-31 14:15:31.818 Skipped deletion: C:\Program Files\Malwarebytes\Anti-Malware\UIPlugin.dll (File not in clean.json)
2020-08-31 14:15:31.819 Skipped deletion: C:\Program Files\Malwarebytes\Anti-Malware\ (Folder not empty)
2020-08-31 14:15:31.825 Deleted registry key: (SOFTWARE\Malwarebytes)
2020-08-31 14:15:31.828 Deleted registry key: (SOFTWARE\Wow6432Node\Malwarebytes)
2020-08-31 14:15:32.509 LSP Registry key: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\AppId_Catalog\######## Not Found
2020-08-31 14:17:07.500
2020-08-31 14:17:07.502 ======================================================
2020-08-31 14:17:07.504 Install Malwarebytes for Windows
2020-08-31 14:17:07.504 ======================================================
2020-08-31 14:17:07.504 User choice for reinstall prompt (No clicked) -
Microsoft Windows [Version 6.1.7601] Copyright (c) 2009 Microsoft Corporation. All rights reserved. C:\Windows\system32>sfc /scannow Beginning system scan. This process will take some time. Beginning verification phase of system scan. Verification 100% complete. Windows Resource Protection did not find any integrity violations. C:\Windows\system32> -
When I said I deleted MB folders, I meant that after the windows uninstall, I manually deleted the folders left over in Program Files and Appdata.
Now I did a restart. There was no Malwarebytes folder in Program Files nor appdata. Ran MBSetup.exe. After a couple minutes, gave me message saying needed to restart computer, clicked OK. The computer then restarted THREE TIMES as it did before. Each time it rebooted, it completely brought up the desktop before going down again. After the third time, gave me a message "An error has occurred and Malwarebytes will not install on your computer.". Ran the Gather Logs again (attached).
-
Was running MB on Windows 7 for years, then it asked to be updated, so I approved. It ran for a bit then did a restart. THREE TIMES!. Finally it said Not Able to Install on this computer. Deleted MB folders, tried this a couple more times and ran Support Tool, got the same exact results. I surrender. Here's my logs:
MWB Forces computer restart - no way to cancel!
in Malwarebytes for Windows Support Forum
Posted
Glad to hear "they are working on a change". The "INSTALL" button you show is very easy to click and it's also very easy to not read all the disclaimers and warnings that come up on an install screen (especially from a trusted vendor). The word "might" is enough to allow me to pull the trigger. The problem is that once this button is pressed, you're going down! There could be a message after the install that MWB will NOT be running until the restart is done, but the choice should be up to the user if they want to gamble.