MBAM v.1.6 Update Hangs Up in Mid-Scan

[Salar]

I updated to Version 1.6, and a few minutes into a quick scan starts, it hangs up and I get this error message: "Malwarebytes Anti-Malware has encounteed a problem and needs to close." I did the cleanup and re-install following the directions in the pinned "Possible Updating Issues" post in the general anti-malware forum, and it did not fix the problem. Here are my DDS logs:

dds.txt:

.

DDS (Ver_2011-08-26.01) - NTFSx86

Internet Explorer: 8.0.6001.18702

Run by Owner at 16:51:20 on 2012-01-02

Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.2047.1384 [GMT -5:00]

.

AV: AVG Anti-Virus Free Edition 2012 *Enabled/Updated* {17DDD097-36FF-435F-9E1B-52D74245D6BF}

.

============== Running Processes ===============

.

C:\WINNT\system32\svchost -k DcomLaunch

svchost.exe

C:\WINNT\System32\svchost.exe -k netsvcs

C:\WINNT\system32\svchost.exe -k WudfServiceGroup

svchost.exe

svchost.exe

C:\WINNT\Explorer.EXE

C:\WINNT\system32\spoolsv.exe

C:\WINNT\system32\SK9910DM.EXE

C:\WINNT\GWMDMMSG.exe

C:\WINNT\system32\atwtusb.exe

C:\Program Files\Seagate\SeagateManager\FreeAgent Status\StxMenuMgr.exe

C:\Program Files\AVG\AVG2012\avgtray.exe

C:\WINNT\system32\ctfmon.exe

C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe

C:\Program Files\Windows Media Player\WMPNSCFG.exe

C:\Program Files\HP\BM\Patch\NVTBM.exe

svchost.exe

C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe

C:\Program Files\AVG\AVG2012\avgwdsvc.exe

C:\Program Files\Flip Video\FlipShare\FlipShareService.exe

C:\Program Files\Seagate\SeagateManager\Sync\FreeAgentService.exe

C:\WINNT\system32\svchost.exe -k hpdevmgmt

C:\Program Files\Java\jre6\bin\jqs.exe

C:\WINNT\System32\svchost.exe -k HPZ12

C:\WINNT\system32\nvsvc32.exe

C:\Program Files\PCPitstop\PCPitstopScheduleService.exe

C:\WINNT\System32\svchost.exe -k HPZ12

C:\WINNT\System32\svchost.exe -k imgsvc

C:\Program Files\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe

C:\WINNT\system32\SearchIndexer.exe

C:\Program Files\AVG\AVG2012\AVGIDSAgent.exe

C:\Program Files\AVG\AVG2012\avgnsx.exe

C:\Program Files\AVG\AVG2012\avgrsx.exe

C:\Program Files\AVG\AVG2012\avgcsrvx.exe

.

============== Pseudo HJT Report ===============

.

uSearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8

uStart Page = hxxp://forecast.weather.gov/MapClick.php?lat=44.49993368729936&lon=-72.96398162841797&site=btv&smap=1&unit=0&lg=en&FcstType=text

uSearchURL,(Default) = hxxp://www.google.com/search?q=%s

mURLSearchHooks: H - No File

BHO: {02478D38-C3F9-4efb-9B51-7695ECA05670} - No File

BHO: HP Print Enhancer: {0347c33e-8762-4905-bf09-768834316c61} - c:\program files\hp\digital imaging\smart web printing\hpswp_printenhancer.dll

BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll

BHO: AVG Safe Search: {3ca2f312-6f6e-4b53-a66e-4e65e497c8c0} - c:\program files\avg\avg2012\avgssie.dll

BHO: {4E7BD74F-2B8D-469E-8CB0-AB60BB9AAE22} - No File

BHO: Spybot-S&D IE Protection: {53707962-6f74-2d53-2644-206d7942484f} - c:\progra~1\spybot~1\SDHelper.dll

BHO: Java Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll

BHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - c:\program files\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll

BHO: HP Smart BHO Class: {ffffffff-cf4e-4f2b-bdc2-0e72e116a856} - c:\program files\hp\digital imaging\smart web printing\hpswp_BHO.dll

TB: {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - No File

TB: {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - No File

TB: {4E7BD74F-2B8D-469E-8CB0-AB60BB9AAE22} - No File

TB: {A057A204-BACC-4D26-9990-79A187E2698E} - No File

TB: {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No File

EB: HP Smart Web Printing: {555d4d79-4bd2-4094-a395-cfc534424a05} - c:\program files\hp\digital imaging\smart web printing\hpswp_bho.dll

EB: &Research: {ff059e31-cc5a-4e2e-bf3b-96e929d65503} - c:\progra~1\mi1933~1\office12\REFIEBAR.DLL

uRun: [ctfmon.exe] c:\winnt\system32\ctfmon.exe

uRun: [spybotSD TeaTimer] c:\program files\spybot - search & destroy\TeaTimer.exe

uRun: [WMPNSCFG] c:\program files\windows media player\WMPNSCFG.exe

mRun: [Hot Key Kbd 9910 Daemon] SK9910DM.EXE

mRun: [GWMDMpi] c:\winnt\GWMDMpi.exe

mRun: [GWMDMMSG] GWMDMMSG.exe

mRun: [atwtusb] atwtusb.exe beta

mRun: [MaxMenuMgr] "c:\program files\seagate\seagatemanager\freeagent status\StxMenuMgr.exe"

mRun: [<NO NAME>]

mRun: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k

mRun: [AVG_TRAY] "c:\program files\avg\avg2012\avgtray.exe"

mRun: [NvCplDaemon] RUNDLL32.EXE c:\winnt\system32\NvCpl.dll,NvStartup

mRun: [Adobe ARM] "c:\program files\common files\adobe\arm\1.0\AdobeARM.exe"

mRun: [APSDaemon] "c:\program files\common files\apple\apple application support\APSDaemon.exe"

mRunOnce: [Malwarebytes Anti-Malware] c:\program files\malwarebytes' anti-malware\mbamgui.exe /install /silent

StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\hpbutt~1.lnk - c:\program files\hp\bm\patch\NVTBM.exe

IE: Google Sidewiki... - c:\program files\google\google toolbar\component\GoogleToolbarDynamic_mui_en_6CE5017F567343CA.dll/cmsidewiki.html

IE: {CD67F990-D8E9-11d2-98FE-00C0F0318AFE}

IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe

IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe

IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\mi1933~1\office12\REFIEBAR.DLL

IE: {DDE87865-83C5-48c4-8357-2F5B1AA84522} - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - c:\program files\hp\digital imaging\smart web printing\hpswp_BHO.dll

IE: {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - {53707962-6F74-2D53-2644-206D7942484F} - c:\progra~1\spybot~1\SDHelper.dll

DPF: DirectAnimation Java Classes - file://c:\winnt\java\classes\dajava.cab

DPF: Microsoft XML Parser for Java - file://c:\winnt\java\classes\xmldso.cab

DPF: {511073AD-BE56-4D43-AE68-93390514385E}

DPF: {739E8D90-2F4C-43AD-A1B8-66C356FCEA35}

DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} - hxxp://fpdownload.macromedia.com/get/flashplayer/current/polarbear/ultrashim.cab

DPF: {99CDFD87-F97A-42E1-9C13-D18220D90AD1}

DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://fpdownload.macromedia.com/get/flashplayer/current/swflash.cab

DPF: {FFB3A759-98B1-446F-BDA9-909C6EB18CC7} - hxxp://utilities.pcpitstop.com/Optimize3/pcpitstop2.dll

Handler: junomsg - {C4D10830-379D-11d4-9B2D-00C04F1579A5} - c:\program files\juno\bin\jmsgpph.dll

Handler: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - c:\program files\avg\avg2012\avgpp.dll

SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\winnt\system32\WPDShServiceObj.dll

SEH: Windows Desktop Search Namespace Manager: {56f9679e-7826-4c84-81f3-532071a8bcc5} - c:\program files\windows desktop search\MSNLNamespaceMgr.dll

.

============= SERVICES / DRIVERS ===============

.

R0 AVGIDSEH;AVGIDSEH;c:\winnt\system32\drivers\AVGIDSEH.sys [2010-9-13 23120]

R0 Avgrkx86;AVG Anti-Rootkit Driver;c:\winnt\system32\drivers\avgrkx86.sys [2010-9-7 32592]

R1 Avgldx86;AVG AVI Loader Driver;c:\winnt\system32\drivers\avgldx86.sys [2010-9-7 230608]

R1 Avgmfx86;AVG Mini-Filter Resident Anti-Virus Shield;c:\winnt\system32\drivers\avgmfx86.sys [2010-9-7 40016]

R1 Avgtdix;AVG TDI Driver;c:\winnt\system32\drivers\avgtdix.sys [2010-11-9 295248]

R2 AVGIDSAgent;AVGIDSAgent;c:\program files\avg\avg2012\AVGIDSAgent.exe [2011-10-12 4433248]

R2 avgwd;AVG WatchDog;c:\program files\avg\avg2012\avgwdsvc.exe [2011-8-2 192776]

R2 BBFat.VxD;BlueBird DSP API;c:\winnt\system32\drivers\BBFat.sys [2002-8-19 7808]

R2 FreeAgentGoNext Service;Seagate Service;c:\program files\seagate\seagatemanager\sync\FreeAgentService.exe [2009-5-1 181544]

R2 mrtRate;mrtRate;c:\winnt\system32\drivers\MrtRate.sys [2003-1-22 34712]

R2 PCPitstop Scheduling;PCPitstop Scheduling;c:\program files\pcpitstop\PCPitstopScheduleService.exe [2010-3-1 86016]

R2 RioPNP;RioPNP;c:\winnt\system32\drivers\RioPnP.sys [2003-1-22 6736]

R2 uCamMonitor;CamMonitor;c:\program files\arcsoft\magic-i visual effects 2\uCamMonitor.exe [2011-7-31 104960]

R3 ArcSoftKsUFilter;ArcSoft Magic-I Visual Effect;c:\winnt\system32\drivers\ArcSoftKsUFilter.sys [2011-7-31 14336]

R3 AVGIDSDriver;AVGIDSDriver;c:\winnt\system32\drivers\AVGIDSDriver.sys [2010-8-19 134608]

R3 AVGIDSFilter;AVGIDSFilter;c:\winnt\system32\drivers\AVGIDSFilter.sys [2010-8-19 24272]

R3 AVGIDSShim;AVGIDSShim;c:\winnt\system32\drivers\AVGIDSShim.sys [2010-8-19 16720]

R3 DCamUSBNovatek;USB2.0 UVC Camera;c:\winnt\system32\drivers\nvtcam.sys [2011-7-31 2696064]

R3 MBAMSwissArmy;MBAMSwissArmy;c:\winnt\system32\drivers\mbamswissarmy.sys [2012-1-2 40776]

S2 gupdate1c9cfd6ade0b7ca;Google Update Service (gupdate1c9cfd6ade0b7ca);c:\program files\google\update\GoogleUpdate.exe [2009-5-8 133104]

S3 epmntdrv;epmntdrv;c:\winnt\system32\epmntdrv.sys [2011-10-1 13192]

S3 EuGdiDrv;EuGdiDrv;c:\winnt\system32\EuGdiDrv.sys [2011-10-1 8456]

S3 gupdatem;Google Update Service (gupdatem);c:\program files\google\update\GoogleUpdate.exe [2009-5-8 133104]

S3 PCDRDRV;Pcdr Helper Driver;\??\c:\atf\qctest\pcdoc\pcdrdrv.sys --> c:\atf\qctest\pcdoc\PCDRDRV.sys [?]

S4 AloPar;AloPar;c:\winnt\system32\drivers\AloPar.sys [2003-2-1 4112]

.

=============== Created Last 30 ================

.

2012-01-02 21:33:15 40776 ----a-w- c:\winnt\system32\drivers\mbamswissarmy.sys

2012-01-02 21:33:15 -------- d-----w- c:\documents and settings\owner\application data\Malwarebytes

2012-01-02 21:32:31 -------- d-----w- c:\documents and settings\all users\application data\Malwarebytes

2012-01-02 21:32:30 20464 ----a-w- c:\winnt\system32\drivers\mbam.sys

2012-01-02 21:32:30 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware

2011-12-24 16:53:11 -------- d-----w- c:\documents and settings\owner\application data\Neuratron

.

==================== Find3M ====================

.

2011-11-23 13:25:32 1859584 ----a-w- c:\winnt\system32\win32k.sys

2011-11-12 09:16:43 414368 ----a-w- c:\winnt\system32\FlashPlayerCPLApp.cpl

2011-11-04 19:20:51 916992 ----a-w- c:\winnt\system32\wininet.dll

2011-11-04 19:20:51 43520 ----a-w- c:\winnt\system32\licmgr10.dll

2011-11-04 19:20:51 1469440 ----a-w- c:\winnt\system32\inetcpl.cpl

2011-11-04 11:23:59 385024 ----a-w- c:\winnt\system32\html.iec

2011-11-01 16:07:10 1288704 ----a-w- c:\winnt\system32\ole32.dll

2011-10-28 05:31:48 33280 ----a-w- c:\winnt\system32\csrsrv.dll

2011-10-25 13:33:08 2192768 ----a-w- c:\winnt\system32\ntoskrnl.exe

2011-10-25 12:52:03 2069376 ----a-w- c:\winnt\system32\ntkrnlpa.exe

2011-10-24 19:29:02 94208 ----a-w- c:\winnt\system32\QuickTimeVR.qtx

2011-10-24 19:29:02 69632 ----a-w- c:\winnt\system32\QuickTime.qts

2011-10-18 11:13:22 186880 ----a-w- c:\winnt\system32\encdec.dll

2011-10-10 14:22:41 692736 ----a-w- c:\winnt\system32\inetcomm.dll

2011-10-07 10:23:48 230608 ----a-w- c:\winnt\system32\drivers\avgldx86.sys

.

============= FINISH: 16:52:03.20 ===============

Still looking for help on this.

attach.zip

[Maurice Naggar]

Hi,

Next, please run a free online scan with the ESET Online Scanner

Note: You will need to use Internet Explorer for this scan.

1. Tick the box next to YES, I accept the Terms of Use.
   
2. Click Start
   
3. When asked, allow the ActiveX control to install
   
4. Click Start
   
5. Make sure that the options Remove found threats and the option Scan unwanted applications is checked
   
6. Click Scan
   Wait for the scan to finish
   
7. Use Notepad to open the logfile located at C:\Program Files\EsetOnlineScanner\log.txt
   
8. Copy and paste that log as a reply to this topic
   

Next, download my Security Check from here or here.

• Save it to your Desktop.
  
• Double click SecurityCheck.exe and follow the onscreen instructions inside of the black box.
  
• A Notepad document should open automatically called checkup.txt; please post the contents of that document.
  

Let me know how things are running now and what issues remain.

[Maurice Naggar]

Due to the lack of feedback this topic is closed to prevent others from posting here. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.

Other members who need assistance please start your own topic in a new thread. Thanks!