Jump to content

Malwarebytes crashing durning updates


Recommended Posts

I'm running win 8.1 64bit and malwarebytes is crashing durning updates

tried few repairs suggested by malwarebytes staff and still nothing

 

Faulting application name: mbam.exe, version: 1.0.0.532, time stamp: 0x53518532
Faulting module name: MSVCR100.dll, version: 10.0.40219.325, time stamp: 0x4df2be1e
Exception code: 0x40000015
Fault offset: 0x0008d6fd
Faulting process ID: 0x11a8
Faulting application start time: 0x01cf8a3875bc803d
Faulting application path: C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
Faulting module path: C:\Program Files (x86)\Malwarebytes Anti-Malware\MSVCR100.dll
Report ID: b570d2a5-f62b-11e3-bec1-20689da9bb2b
Faulting package full name: 
Faulting package-relative application ID: 
 
Please help, I run out of ideas :)
 

 

 

Addition.txt

CheckResults.txt

FRST.txt

Link to post
Share on other sites

Hello and :welcome:

Let's try this first (so we can get version 2.x back on cleanly and get the logs while 2.x is installed)....

Thank You,

Firefox

Link to post
Share on other sites

No if the logs are from the latest build, then please wait for someone from staff reviews your logs and gives you further guidance.

Thanks

EDIT: Also its quite possible its crashing because you have mbam.exe to run in compatibility mode. You may try removing it.

Please remove these items from the keys listed below especially the Malwarebytes ones:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\appCompatFlags\Layers
C:\Program Files (x86)\TOSHIBA\TOSHIBA VIDEO PLAYER\SMILauncher.exeREG_SZ ~ HIGHDPIAWARE
C:\Program Files (x86)\TOSHIBA\TOSHIBA VIDEO PLAYER\SMIPlayer.exeREG_SZ ~ HIGHDPIAWARE
C:\Program Files (x86)\TOSHIBA\TOSHIBA VIDEO PLAYER\SMIPlayerMCE.exeREG_SZ ~ HIGHDPIAWARE

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\appCompatFlags\Layers
C:\Users\DES\Documents\Companies\Malwarebytes' Anti-Malware\Malwarebytes Anti-Malware\unins000.exeREG_SZ $ Win8RTM
C:\Users\DES\Desktop\ComboFix.exeREG_SZ ~ WIN7RTM
C:\Users\DES\Desktop\procexp.exeREG_SZ ~ RUNASADMIN
C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exeREG_SZ ~ WIN7RTM

Link to post
Share on other sites

Hello Bers,

 

As a sidebar, I would caution you that Combofix is not to be used unless under the guidance of a trained expert, and that it is not for use on WIN 8 systems.

And as Firefox noted, placing Malwarebytes Anti-Malware in as in compatibility mode is not advised.  It is actually counter productive.

 

I need for you to save Fixal.zip to the Desktop.  Then extract ( unzip) the content to the Desktop.

Then do a Right-click on Fixal.reg and select Merge and allow merging into the registry.

 

( by the way, delete combofix.exe if you still have it around).  Thanks.

 

Also know that Process Explorer does not need to be run in compatibility mode ( either).

 

 

Next, let us do this.

 

First, ( but only if the program is running) lets shutdown the realtime Malwarebytes Anti-Malware. Go to the desktop Taskbar. See the blue-color MBAM icon in the notification area.
Do a Right-click on it with your mouse, and select EXIT.

I have attached a zip file which you need to Save to your system.

Once saved, unzip it to extract all contents.   which will be 2 files.
Next, double-click on **net_replacement.bat** file.
It should run fairly quickly in a command-prompt window.

Once that is done, restart the Anti-Malware and let me know if it works normally.

 

I would be also curious to know if you do a daily Windows Shutdown at end of day.   Then a new start each morning.

Fixal.zip

Netconf-batch-file.zip

Link to post
Share on other sites

Again thank you so much for quick reply

 

No if the logs are from the latest build, then please wait for someone from staff reviews your logs and gives you further guidance.

Thanks

EDIT: Also its quite possible its crashing because you have mbam.exe to run in compatibility mode. You may try removing it.

Please remove these items from the keys listed below especially the Malwarebytes ones:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\appCompatFlags\Layers
C:\Program Files (x86)\TOSHIBA\TOSHIBA VIDEO PLAYER\SMILauncher.exeREG_SZ ~ HIGHDPIAWARE
C:\Program Files (x86)\TOSHIBA\TOSHIBA VIDEO PLAYER\SMIPlayer.exeREG_SZ ~ HIGHDPIAWARE
C:\Program Files (x86)\TOSHIBA\TOSHIBA VIDEO PLAYER\SMIPlayerMCE.exeREG_SZ ~ HIGHDPIAWARE

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\appCompatFlags\Layers
C:\Users\DES\Documents\Companies\Malwarebytes' Anti-Malware\Malwarebytes Anti-Malware\unins000.exeREG_SZ $ Win8RTM
C:\Users\DES\Desktop\ComboFix.exeREG_SZ ~ WIN7RTM
C:\Users\DES\Desktop\procexp.exeREG_SZ ~ RUNASADMIN
C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exeREG_SZ ~ WIN7RTM

Firefox - I removed those entries from registry and still nothing

 

Hello Bers,

 

As a sidebar, I would caution you that Combofix is not to be used unless under the guidance of a trained expert, and that it is not for use on WIN 8 systems.

And as Firefox noted, placing Malwarebytes Anti-Malware in as in compatibility mode is not advised.  It is actually counter productive.

 

I need for you to save Fixal.zip to the Desktop.  Then extract ( unzip) the content to the Desktop.

Then do a Right-click on Fixal.reg and select Merge and allow merging into the registry.

 

( by the way, delete combofix.exe if you still have it around).  Thanks.

 

Also know that Process Explorer does not need to be run in compatibility mode ( either).

 

 

Next, let us do this.

 

First, ( but only if the program is running) lets shutdown the realtime Malwarebytes Anti-Malware. Go to the desktop Taskbar. See the blue-color MBAM icon in the notification area.
Do a Right-click on it with your mouse, and select EXIT.

I have attached a zip file which you need to Save to your system.

Once saved, unzip it to extract all contents.   which will be 2 files.
Next, double-click on **net_replacement.bat** file.
It should run fairly quickly in a command-prompt window.

Once that is done, restart the Anti-Malware and let me know if it works normally.

 

I would be also curious to know if you do a daily Windows Shutdown at end of day.   Then a new start each morning.

Maurice your solution worked for me thanks so much, YOU ARE GREAT

any reasons why it happened ? why malwarebytes just stopped updating ?

yes usually I shutting down laptop frequently 

Link to post
Share on other sites

Hello,

 

Good to know that it is fine now.  Cases like yours are in the minority.   Root cause not very clear.  But it is something of a one-off thing.

You may delete the FRST.exe and the zip files and .reg file I had you use.

 

Suggestions:

Take a look inside the program. Start the Anti-Malware. Click on the Settings icon at the top bar up at top.
Then click the **Advanced Settings** button at the left.
Be sure all top 3 lines on that window are check-marked ( selected ).

Now a couple of changes for each of the Update task & the Threat scan task in the Scheduler.
Click on **Automated Scheduling** button.

Locate and click once on **Check for Updates** line and press Edit. Then press the Advanced button at bottom left.
Slide the window up so you can see all of it. {press the mouse on the very top bar and slide UP }
A few changes are needed.
Look at the "starting time" of the task and use some good time when you know that your computer will be on & powered & that Windows would be on at that time.
Look at the line in Schedule Options. UN-check "Show notification after successful update".

In the Frequency and Settings. Select Hourly and I suggest using the Recurrence at 4 hours.
In the Recovery Options put a check-mark on "Recover missed tasks" and select 1 hour
When done, press the OK button.

Locate and click once on the Threat Scan line and press Edit.Then press the Advanced button at bottom left.
Slide the window up so you can see all of it. {press the mouse on the very top bar and slide UP }

In the Schedule Options, put a check-mark on the line Terminate program when no threats are found
{when no malwares are detected you want the scheduled task to close}.

In the Frequency and Settings block.
You should have Daily and the recurrence set to 1 day.
now UN-check the line Check for updates before scanning {{that line should be always off otherwise the task may not run at the time set. It maybe run +/- 15 minutes of that period.}

In the Recovery Options put a check-mark on "Recover missed tasks" and select 1 hour
When done, press the OK button.

When completely done, close the window.

I wish you well.
 

Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
 Share

  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.