jhill

I disabled freeramxp and it didn't help. So I disabled all of the following (using only the logon tab in autoruns: autorun eater, Diagent, logmein, quick time task, winpatrol, logitech, carbonite, alt tab and free download manager. Still get mbam spikes even though everything else is idle. They are not quite as high 45-50 range but still are happening at same frequency. Attaching a new autoruns log AutoRuns2.zip

Hi exile, I uninstalled tuneup utilities. AFter restart, no change. Mbamservice.exe continues to spke theCPU constantly. Nothing else is going over 2 or 3 percent, most are 0. thank you, J

ok, here it is. thank you AutoRuns.zip

I have attached a screenshot of the spikes as seen with task manager. all of the spikes are mbamservice. nothing else goes above 3 or 4 % (other than system idle process of course).

Hello, I too have been having the same problem with MBAMservice spiking my cpu every few seconds and causing a real slowdown. I followed the above thread. Turning off ipblocking does not seem to help. I have uninstalled and resinstalled as per your instructions above. I have listed MBAM in the exceptions of windows firewall (but that is all) and I have added all of the entries in your list above into the exceptions of avira antivir (both under scan and under Guard). I put the entire list into file objects under guard, and under processes only mbam.exe and mbamservice.exe. I am running windows xp sp3 on a pentium 4 1.99Mhz with 2.0 GB RAM. If I let my computer be idle and just watch the task manager, MBAM continues to spike the cpu into the 70s and 80s very briefly every few seconds. Any more suggestions? thank you, J

thank you. I will try it.

Is there an application which can let one know what application is attempting to reach an IP address that malwarebytes is blocking? thank you.

so it would seem! it was the first topic. thank you.

I have used it for years without a problem

Today Malwarebytes keeps identifying the following file as infected (from the log): Registry Data Items Infected: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Userinit (Trojan.PWS) -> Data: c:\windows\system32\userinit.exe -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Userinit (Trojan.PWS) -> Data: system32\userinit.exe -> Quarantined and deleted successfully. Each time I have removed it, and it comes back. I uploaded the userinit.exe file to kaspersky online virus test which passed it, and my antivira software says it is a clean file. Is this a false positive or do I need to do something else? thanks.