V1.35 Protection Module Not working? Need Help!

[Steve1209]

Hi All,

This might actually be a continuation of a problem (maybe I have a Malware or Virus?) from V1.34. I'm using XP PRO SP3+ all updates installed! Using Malwarebytes' V1.35 and didn't know how to follow up on a previous post at V1.34.

Here is my problem, my protection TAB states protection module enabled, I have checked; Check for updates automaticaly and a time, that does NOT work. Run Quickscan automatically at a time, that doesn't work. I went to SERVICES.MSC and the Malwarebytes service is started & Automatic.

I've done the following:

1. Uninstalled old version of Malwarebytes & rebooted.

2. Ran the Uninstaller pgm listed in the forum & rebooted.

3. Uninstalled all Malwarebytes registry entries VIA REGEDIT and rebooted (I just learned how to do this from a friend)

4. Removed the Malwarebytes Folder from Program files and rebooted

5. Ran CrapCleaner and removed all temp files & all regisry entries and rebooted

6. Downloaded V1.35 and went thru the install & rebooted.

I enabled the protection module after entering my Registration information but the auto download & quickscan times still do NOT work, can anyone direct me on what to look at, what to change, is this a malware? I can manually Update Malwarebytes and run a FULL SCAN & find nothing...

Hope someone can figure this one out!!

Thanks,

Steve

[GT500]

Here is my problem, my protection TAB states protection module enabled, I have checked; Check for updates automaticaly and a time, that does NOT work. Run Quickscan automatically at a time, that doesn't work. I went to SERVICES.MSC and the Malwarebytes service is started & Automatic.

The scheduled tasks have nothing to do with the protection module. They are scheduled with the Windows Task Scheduler. Take a look at this article on troubleshooting scheduled tasks.

[Steve1209]

The scheduled tasks have nothing to do with the protection module. They are scheduled with the Windows Task Scheduler. Take a look at this article on troubleshooting scheduled tasks.

Hi GT500,

Thanks, I'm posting a screenshot of my scheduler, I have the update set to run at 6PM and the scan to run at 7PM, the task service is started & running. After 7PM tonight I'll report back with another screenshot BUT I doubt either of the two Malwarebytes' services will have run although they are scheduled & the malwarebytes service is also started & running in services.

Linking code copied to clipboard

I'll be back after 7PM with another screenshot so you can see the task still NEVER ran.

Thanks much for the help so far!!

Steve

[GT500]

Is your computer logged in normally at the time the scheduled tasks are supposed to run?

[Steve1209]

Yes it is

[Steve1209]

GT500,

OK it's now about 6:02PM here in FL USA and here is another screenshot of my scheduler, the 6PM scheduled update never ran.

Linking code copied to clipboard

I verified this by looking at Malwarebytes' update screen and Database version & it's still yesterdays version V1916. Hope this screenshot shows up

Linking code copied to clipboard

Thanks again for any further direction

Steve

[Steve1209]

Hi GT500,

OK the scheduled 7PM SCAN also did not work, which I figured would be the case but wanted to wait and show you the results.

Linking code copied to clipboard

The MBAM service is started & running:

Linking code copied to clipboard

The task scheduler service is started & running:

Linking code copied to clipboard

Where can I look from here? I don't know what else to try, any idea's?

Does anyone else have any suggetions on where to look?

Thanks again for any help,

Steve

[GT500]

Did none of the troubleshooting steps from Microsoft work?

[Steve1209]

GT500,

I went thru that checklist and everything looks like it should, it's just the Malwarebytes' tasks don't ever run. Other tasks that are scheduled run fine. I can manually update and scan Malwarebytes' just fine, I don't get it...

[GT500]

Delete those scheduled tasks, and then open MBAM and set them again.

[Steve1209]

OK GT500,

Deleted those 2 scheduled tasks, then went back into the main malwarebytes' & set them to run at 4PM and 5PM since it is almost 4PM here

Linking code copied to clipboard

[Steve1209]

Didn't run, the date changed for next run time 4-1 of the update but nothing was downloaded, looking at Malwarebytes' still at Database 1922 with yesterdays date on it.

Linking code copied to clipboard

[Steve1209]

I'm sure this does not come as a surprise to anyone the Malwarebyes' Quickscan also never ran as scheduled at 5PM, what could possibly be blocking these Scheduled Tasks, they are definitely scheduled properly, I've looked them over 6 ways over & over. Could some registry entry be blocking them? Some virus or Malware? I'm stumped and still would like anyones input to solve this one...

Thanks much,

Steve

Linking code copied to clipboard

[GT500]

I assume the account they are scheduled to run under has admin rights?

[Steve1209]

Yes I'm the admin count and only user.

[Steve1209]

OK, I waited another day in hopes the auto update or quick scan taskes would run, they did NOT. I typoed a little this morning, I'm the administrative account on this computer, I have no user accounts created, I'm the administrator and only user.

Is there something else I could run like a HJThis log or anything to solve this?

Thanks,

Steve

[GT500]

I don't think a HijackThis log would help.

Do your event logs show any errors?

BTW: You don't have to wait for scheduled events to happen. Just change the computer's clock to 1 minute before the scheduled event.

[Steve1209]

Hey GT500,

I looked at events logs for application/system and see nothing around the time of those events...Anything else to try?

Yhanks,

Steve

[Steve1209]

Hi GT500,

I KNOW this problem has something to do with ONLY my computer so I'm NOSING around in the area's you have mentioned up to this point looking for something only on my computer.

So here is one, when I go to SERVICES.MSC and look at the MBAMservice and click on the TAB dependancies I see something called MBAMProtector as a dependancy to running MBAMservice (the MBAMService is started so I'm not sure this is important), I did a search for that & did NOT find it anywhere on my system is that a normal dependancy?

Linking code copied to clipboard

[DaChew]

http://technet.microsoft.com/en-us/sysinte...s/bb896653.aspx

You might do a little exploring with this tool, processexplorer

[Steve1209]

Hi DaChew,

YIKES I downloaded & Installed that sysinternals, I tried some things on it BUT I don't have a clue where even to BEGIN with that or how it could do to help me troubleshoot my problem????

[DaChew]

You could start with the File command and Save as and copy and paste a list of the running processes into this thread?

I am just suggesting an alternate approach to your unique problem.

[Steve1209]

Thanks DaChew for your assistance,

Process PID CPU Description Company Name

System Idle Process 0 85.38

Interrupts n/a 0.77 Hardware Interrupts

DPCs n/a Deferred Procedure Calls

System 4

smss.exe 820 Windows NT Session Manager Microsoft Corporation

csrss.exe 876 Client Server Runtime Process Microsoft Corporation

winlogon.exe 908 Windows NT Logon Application Microsoft Corporation

services.exe 952 0.77 Services and Controller app Microsoft Corporation

ati2evxx.exe 1156 ATI External Event Utility EXE Module ATI Technologies Inc.

svchost.exe 1172 Generic Host Process for Win32 Services Microsoft Corporation

wmiprvse.exe 3792 WMI Microsoft Corporation

unsecapp.exe 2320 WMI Microsoft Corporation

svchost.exe 1260 Generic Host Process for Win32 Services Microsoft Corporation

svchost.exe 1356 Generic Host Process for Win32 Services Microsoft Corporation

spoolsv.exe 1540 Spooler SubSystem App Microsoft Corporation

sched.exe 1584 Antivirus Scheduler Avira GmbH

a2service.exe 2356 a-squared Service Emsi Software GmbH

a2service.exe 2380 a-squared Service Emsi Software GmbH

schedul2.exe 2420 Acronis Scheduler 2 Acronis

avguard.exe 2444 Antivirus On-Access Service Avira GmbH

AppleMobileDeviceService.exe 2460 Apple Mobile Device Service Apple Inc.

mDNSResponder.exe 2496 Bonjour Service Apple Inc.

CTSVCCDA.EXE 2532 Creative Service for CDROM Access Creative Technology Ltd

DkService.exe 2560 Diskeeper Service Diskeeper Corporation

dlcicoms.exe 2692 Printer Communication System

IAANTmon.exe 2764 RAID Monitor Intel Corporation

jqs.exe 2832 Java Quick Starter Service Sun Microsystems, Inc.

mbamservice.exe 2912 Malwarebytes' Anti-Malware Malwarebytes Corporation

NBService.exe 3000 Nero BackItUp Nero AG

NMSAccessU.exe 3032

IoctlSvc.exe 3072 PLFlash DeviceIoControl Service Prolific Technology Inc.

svchost.exe 3100 Generic Host Process for Win32 Services Microsoft Corporation

svchost.exe 3132 Generic Host Process for Win32 Services Microsoft Corporation

MsPMSPSv.exe 3192 WMDM PMSP Service Microsoft Corporation

CALMAIN.exe 3392 Canon Camera Access Library 8 Canon Inc.

iPodService.exe 3484 iPodService Module Apple Inc.

alg.exe 3968 Application Layer Gateway Service Microsoft Corporation

AAWService.exe 328 10.00 Ad-Aware Service Application Lavasoft

lsass.exe 964 LSA Shell (Export Version) Microsoft Corporation

ati2evxx.exe 1700 ATI External Event Utility EXE Module ATI Technologies Inc.

explorer.exe 1916 0.77 Windows Explorer Microsoft Corporation

TrueImageMonitor.exe 392 Acronis True Image Monitor Acronis

TimounterMonitor.exe 408 Monitor for Acronis True Image Backup Archive Explorer Acronis

schedhlp.exe 420 Acronis Scheduler Helper Acronis

gnotify.exe 460 Gmail Notifier Google Inc.

iTunesHelper.exe 476 iTunesHelper Module Apple Inc.

avgnt.exe 556 Antivirus System Tray Tool Avira GmbH

AdMunch.exe 1808 Ad Muncher Murray Hurps Corp Pty Ltd

jusched.exe 1648 Java Platform SE binary Sun Microsystems, Inc.

weatherpulse.exe 676 Weather Pulse Tropic Designs

COOLTI~1.EXE 680 0.77 Scrolling Stock Ticker www.CoolTick.com

aim6.exe 732 AIM AOL LLC

aolsoftware.exe 1572 AOL AOL LLC

LuckyReminder.exe 800

ctfmon.exe 852 CTF Loader Microsoft Corporation

SUPERAntiSpyware.exe 1028 0.77 SUPERAntiSpyware Application SUPERAntiSpyware.com

tclock2.exe 1320 Customize Taskbar Ver1.2.0 Two_toNe

iexplore.exe 1036 Internet Explorer Microsoft Corporation

iexplore.exe 760 0.77 Internet Explorer Microsoft Corporation

iexplore.exe 1536 Internet Explorer Microsoft Corporation

procexp.exe 3512 Sysinternals Process Explorer Sysinternals - www.sysinternals.com

MOM.exe 468 Catalyst Control Center: Monitoring program Advanced Micro Devices Inc.

CCC.exe 1964 Catalyst Control Centre: Host application ATI Technologies Inc.

avnotify.exe 4060 Notification Tool Avira GmbH

[DaChew]

I can see that my "lean and mean" power user speech will fall on deaf ears.

[Steve1209]

DaChew,

Does that mean I have too many things running for Malwarebyte's to schedule properly? I don't fully understand what you mean?

Thanks,

Steve