Malwarebytes crashing/stopped working on fresh installation

[Saraya]

Hello all,

 

I have started a new build, Windows 7 64x. I have no other anti-virus programs installed.

 

My MBAM has failed to launch and has stopped working, after installation.

 

I assumed at first it was a botched install, and ran the MBAM Clean program to which it finished it's processes and checks. When it tried to run MBAM, it crashed as usual.

 

 

Attached is my Checkresults

CheckResults.txt

[daledoc1]

Hello and , Saraya:

 

Sorry you are having problems with MBAM crashing.
 
In addition to the mbam-check log, please also follow the instructions below and reply back here with both of the DDS logs attached to your next reply.
 
They will help the staff to identify the cause of the problem and the possible solution(s).
 
Thanks!
 
daledoc1
 
-----------------------

DDS Instructions

Download DDS from one of the locations below and save it to your Desktop:
dds.scr
dds.com


Temporarily disable any script blocker if your Anti-Virus/Anti-Malware has it.
How To Temporarily Disable Your Anti-virus, Firewall And Anti-malware Programs

Once it is downloaded, you can disconnect from the Internet and disable your Ant-Virus temporarily if needed.
Then double click dds.scr or dds.com to run the tool.
Click the Run button if prompted with an Open File - Security Warning dialog box.
A black DOS console should open and run for a moment.

• When done, DDS will open two (2) logs:
  • DDS.txt
  • Attach.txt

• Save both reports to your desktop
• Please attach both of the following logs to your next reply: DDS.txt and Attach.txt
  You can ignore the note about zipping the Attach.txt file in most cases.

[Saraya]

Hello, as requested.

attach.txt

dds.txt

[AdvancedSetup]

The computer appears to be infected looking at the Event Logs.
 
I would suggest following the advice from the topic here Available Assistance for Possibly Infected Computers and having one of the Experts assist you with looking into your issue.  Basically open a new post in the requested forum and post these logs there and then wait for someone to assist you further.


Thanks
 
 
 

==== Event Viewer Messages From Past Week ========.11/12/2013 09:34:32, Error: Service Control Manager [7001]  - The HomeGroup Provider service depends on the Function Discovery Provider Host service which failed to start because of the following error:  The service cannot be started, either because it is disabled or because it has no enabled devices associated with it.09/12/2013 13:16:17, Error: Microsoft-Windows-WER-SystemErrorReporting [1001]  - The computer has rebooted from a bugcheck.  The bugcheck was: 0x00000124 (0x0000000000000000, 0xfffffa8004e7d038, 0x00000000b2000040, 0x0000000000000800). A dump was saved in: C:\Windows\MEMORY.DMP. Report Id: 120913-17347-01.09/12/2013 12:00:16, Error: Service Control Manager [7024]  - The HomeGroup Listener service terminated with service-specific error %%-2147023143.07/12/2013 17:35:32, Error: Service Control Manager [7001]  - The Computer Browser service depends on the Workstation service which failed to start because of the following error:  The service cannot be started, either because it is disabled or because it has no enabled devices associated with it.07/12/2013 15:14:56, Error: Service Control Manager [7001]  - The Computer Browser service depends on the Server service which failed to start because of the following error:  The dependency service or group failed to start.07/12/2013 15:13:42, Error: Microsoft-Windows-DistributedCOM [10005]  - DCOM got error "1068" attempting to start the service fdPHost with arguments "" in order to run the server: {D3DCB472-7261-43CE-924B-0704BD730D5F}07/12/2013 15:13:42, Error: Microsoft-Windows-DistributedCOM [10005]  - DCOM got error "1068" attempting to start the service fdPHost with arguments "" in order to run the server: {145B4335-FE2A-4927-A040-7C35AD3180EF}07/12/2013 15:13:06, Error: Service Control Manager [7001]  - The HomeGroup Provider service depends on the Function Discovery Provider Host service which failed to start because of the following error:  The dependency service or group failed to start.07/12/2013 15:13:05, Error: Microsoft-Windows-DistributedCOM [10005]  - DCOM got error "1084" attempting to start the service WSearch with arguments "" in order to run the server: {9E175B6D-F52A-11D8-B9A5-505054503030}07/12/2013 15:13:05, Error: Microsoft-Windows-DistributedCOM [10005]  - DCOM got error "1084" attempting to start the service WSearch with arguments "" in order to run the server: {7D096C5F-AC08-4F1F-BEB7-5C22C517CE39}07/12/2013 15:13:04, Error: Microsoft-Windows-DistributedCOM [10005]  - DCOM got error "1084" attempting to start the service EventSystem with arguments "" in order to run the server: {1BE1F766-5536-11D1-B726-00C04FB926AF}07/12/2013 15:12:58, Error: Microsoft-Windows-DistributedCOM [10005]  - DCOM got error "1084" attempting to start the service ShellHWDetection with arguments "" in order to run the server: {DD522ACC-F821-461A-A407-50B198B896DC}07/12/2013 15:12:50, Error: Service Control Manager [7026]  - The following boot-start or system-start driver(s) failed to load:  discache spldr Wanarpv607/12/2013 15:09:46, Error: Service Control Manager [7001]  - The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error:  The dependency service or group failed to start.07/12/2013 15:09:45, Error: Microsoft-Windows-DistributedCOM [10005]  - DCOM got error "1068" attempting to start the service netprofm with arguments "" in order to run the server: {A47979D2-C419-11D9-A5B4-001185AD2B89}07/12/2013 15:09:45, Error: Microsoft-Windows-DistributedCOM [10005]  - DCOM got error "1068" attempting to start the service netman with arguments "" in order to run the server: {BA126AD1-2166-11D1-B1D0-00805FC1270E}07/12/2013 15:09:29, Error: Service Control Manager [7026]  - The following boot-start or system-start driver(s) failed to load:  AFD CSC DfsC discache NetBIOS NetBT nsiproxy Psched rdbss spldr tdx Wanarpv6 WfpLwf07/12/2013 15:09:27, Error: Service Control Manager [7001]  - The Workstation service depends on the Network Store Interface Service service which failed to start because of the following error:  The dependency service or group failed to start.07/12/2013 15:09:27, Error: Service Control Manager [7001]  - The TCP/IP NetBIOS Helper service depends on the Ancillary Function Driver for Winsock service which failed to start because of the following error:  A device attached to the system is not functioning.07/12/2013 15:09:27, Error: Service Control Manager [7001]  - The SMB MiniRedirector Wrapper and Engine service depends on the Redirected Buffering Sub Sysytem service which failed to start because of the following error:  A device attached to the system is not functioning.07/12/2013 15:09:27, Error: Service Control Manager [7001]  - The SMB 2.0 MiniRedirector service depends on the SMB MiniRedirector Wrapper and Engine service which failed to start because of the following error:  The dependency service or group failed to start.07/12/2013 15:09:27, Error: Service Control Manager [7001]  - The SMB 1.x MiniRedirector service depends on the SMB MiniRedirector Wrapper and Engine service which failed to start because of the following error:  The dependency service or group failed to start.07/12/2013 15:09:27, Error: Service Control Manager [7001]  - The Network Store Interface Service service depends on the NSI proxy service driver. service which failed to start because of the following error:  A device attached to the system is not functioning.07/12/2013 15:09:27, Error: Service Control Manager [7001]  - The Network Location Awareness service depends on the Network Store Interface Service service which failed to start because of the following error:  The dependency service or group failed to start.07/12/2013 15:09:27, Error: Service Control Manager [7001]  - The IP Helper service depends on the Network Store Interface Service service which failed to start because of the following error:  The dependency service or group failed to start.07/12/2013 15:09:27, Error: Service Control Manager [7001]  - The DNS Client service depends on the NetIO Legacy TDI Support Driver service which failed to start because of the following error:  A device attached to the system is not functioning.07/12/2013 15:09:27, Error: Service Control Manager [7001]  - The DHCP Client service depends on the Ancillary Function Driver for Winsock service which failed to start because of the following error:  A device attached to the system is not functioning.07/12/2013 15:07:24, Error: Service Control Manager [7000]  - The AtiDCM service failed to start due to the following error:  Access is denied.07/12/2013 13:42:05, Error: Service Control Manager [7023]  - The Windows Time service terminated with the following error:  The system cannot find the file specified.07/12/2013 13:37:55, Error: volmgr [46]  - Crash dump initialization failed!.==== End Of File ===========================

[Saraya]

At the time many of those services were disabled intentionally - majority note date of 07/12.

And while some have been restarted, the results are the same.

[Saraya]

At the time many of those services were disabled intentionally - majority note date of 07/12.

And while some have been restarted, the results are the same.

 

I meant to add that I've ran virii check anyways and have found nothing.

[AdvancedSetup]

Well if you're not willing to allow someone to assist you in going through scanning looking for both malware and issues then there simply is no way anyone can assist you.

 

It takes scans and logs to see what's going on so it's up to you.

[Saraya]

Hmm that's an unfortunate stance to take. There's no proof of foul play - a handful of disabled services that are isolated to Home Group and Function Discovery (which I disabled intentionally), is not an indication of a virus.

Your conclusion and opinion is of course welcome - however I have given a fair rebuttal. Opening a new support ticket is for all intents and purposes may be a waste of that other person's time. I also browsed the 'infected' forums and found nothing of similar description to my problem. Most were a case of crashes or hangs when trying to access certain features within MBAM.

 

 

Do you have any other suggestions given the information I provided as requested? 

[AdvancedSetup]

I don't see how or where you're coming from.  Go to anyone of the thousands of forums on the Internet and seek help with a software or hardware problem and any "Expert" is going to ask you to run tools so they can see what's going on.  If you pay Microsoft and ask them for help one of the very first things they ask you to do is run a tool that gathers thousands of pieces of information to see what's going on.   We are not sitting at your computer and able to run tools or look at logs so we need you to do it for us? 

 

If you want I can give you some computer problems and simply ask you to tell me how to fix them but I won't give you any real information and see how well you can answer and fix my issues.

 

If you feel it's a waste of time then again that's your choice but no one can help you without logs.  I will not continue with this discussion further though as that is a waste of time, either post in the requested forum as requested or we won't be able to assist you period.

 

Thank you again.

[David H. Lipman]

I meant to add that I've ran virii check anyways and have found nothing.

 

There is no such thing as a "virii check" as there isn't anything computer related that is "virii".  Therefore there is no "virii" that can be found.

[Saraya]

There is no such thing as a "virii check" as there isn't anything computer related that is "virii".  Therefore there is no "virii" that can be found.

 

Thanks David, viri(I know, not accepted in English language) or viral is rather what I should have said - but if you couldn't figure out that I was speaking in a plural sense then I do not know what to say.

 

I don't see how or where you're coming from.  Go to anyone of the thousands of forums on the Internet and seek help with a software or hardware problem and any "Expert" is going to ask you to run tools so they can see what's going on.  If you pay Microsoft and ask them for help one of the very first things they ask you to do is run a tool that gathers thousands of pieces of information to see what's going on.   We are not sitting at your computer and able to run tools or look at logs so we need you to do it for us? 

 

If you want I can give you some computer problems and simply ask you to tell me how to fix them but I won't give you any real information and see how well you can answer and fix my issues.

 

If you feel it's a waste of time then again that's your choice but no one can help you without logs.  I will not continue with this discussion further though as that is a waste of time, either post in the requested forum as requested or we won't be able to assist you period.

 

Thank you again.

 

Your first statement is unwarranted. Nowhere were any negative comments given about the requirement to have to provide logs or information. 

You're out of line and your mannerism from the start has been nothing but dismissive rather than supportive. 

 

Additionally, you looked at one small log that shows a clustered set of services disabled(which have been explained to you why) and immediately concluded it was a virus with no explanation as to why or even a hint of 'I've seen this before, I know it may seem like a long shot, but speak to our malware experts...'

 

It's funny you should mention seeking help on forums and the word Microsoft in the same breath. Microsoft forums are notorious for 'expert' users who drop in to give 'advice' but when you read what they actually put it's only loosely related to what the problem is actually about. They're more concerned with getting up their post count and looking knowledgeable than actually helping. Apparently disagreeing with your opinion is a one way ticket to rude responses.

 

 

I'm going to do as you suggested and in return I expect you will honor the effort and be right back here trying to assist, should it not be an infection, yes? 

[AdvancedSetup]

Thank you, I have replied to your topic in the removal forum and we can do any steps required to get the program working so I'll go ahead and close this topic now and we'll just work in your other topic.