Malwarebytes crashing durning updates

[Bers]

I'm running win 8.1 64bit and malwarebytes is crashing durning updates

tried few repairs suggested by malwarebytes staff and still nothing

 

Faulting application name: mbam.exe, version: 1.0.0.532, time stamp: 0x53518532

Faulting module name: MSVCR100.dll, version: 10.0.40219.325, time stamp: 0x4df2be1e

Exception code: 0x40000015

Fault offset: 0x0008d6fd

Faulting process ID: 0x11a8

Faulting application start time: 0x01cf8a3875bc803d

Faulting application path: C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe

Faulting module path: C:\Program Files (x86)\Malwarebytes Anti-Malware\MSVCR100.dll

Report ID: b570d2a5-f62b-11e3-bec1-20689da9bb2b

Faulting package full name: 

Faulting package-relative application ID: 

 

Please help, I run out of ideas

 

 

 

Addition.txt

CheckResults.txt

FRST.txt

[Bers]

just to let you know that I have pro license.

 

tried to install 1,75 and is alright, just the problem is with malware 2.x

[Firefox]

Hello and

Let's try this first (so we can get version 2.x back on cleanly and get the logs while 2.x is installed)....

• Please uninstall your current version of MBAM and reinstall the latest build - MBAM Clean Removal Process 2x
• If that does not correct the issue, then please read the following and post back the requested logs - Diagnostic Logs
• NOTE: There is an FAQ section with valuable information located here - Common Questions, Issues, and their Solutions

Thank You,

Firefox

[Bers]

Thanks for a quick answer FIREFOX

 

logs which I attached are from the system where latest build of malwarbytes is installed.

should I run mbam-clean again ? tried to do this few times already

[Firefox]

No if the logs are from the latest build, then please wait for someone from staff reviews your logs and gives you further guidance.

Thanks

EDIT: Also its quite possible its crashing because you have mbam.exe to run in compatibility mode. You may try removing it.

Please remove these items from the keys listed below especially the Malwarebytes ones:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\appCompatFlags\Layers
C:\Program Files (x86)\TOSHIBA\TOSHIBA VIDEO PLAYER\SMILauncher.exeREG_SZ ~ HIGHDPIAWARE
C:\Program Files (x86)\TOSHIBA\TOSHIBA VIDEO PLAYER\SMIPlayer.exeREG_SZ ~ HIGHDPIAWARE
C:\Program Files (x86)\TOSHIBA\TOSHIBA VIDEO PLAYER\SMIPlayerMCE.exeREG_SZ ~ HIGHDPIAWARE

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\appCompatFlags\Layers
C:\Users\DES\Documents\Companies\Malwarebytes' Anti-Malware\Malwarebytes Anti-Malware\unins000.exeREG_SZ $ Win8RTM
C:\Users\DES\Desktop\ComboFix.exeREG_SZ ~ WIN7RTM
C:\Users\DES\Desktop\procexp.exeREG_SZ ~ RUNASADMIN
C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exeREG_SZ ~ WIN7RTM

[Maurice Naggar]

Hello Bers,

 

As a sidebar, I would caution you that Combofix is not to be used unless under the guidance of a trained expert, and that it is not for use on WIN 8 systems.

And as Firefox noted, placing Malwarebytes Anti-Malware in as in compatibility mode is not advised.  It is actually counter productive.

 

I need for you to save Fixal.zip to the Desktop.  Then extract ( unzip) the content to the Desktop.

Then do a Right-click on Fixal.reg and select Merge and allow merging into the registry.

 

( by the way, delete combofix.exe if you still have it around).  Thanks.

 

Also know that Process Explorer does not need to be run in compatibility mode ( either).

 

 

Next, let us do this.

 

First, ( but only if the program is running) lets shutdown the realtime Malwarebytes Anti-Malware. Go to the desktop Taskbar. See the blue-color MBAM icon in the notification area.
Do a Right-click on it with your mouse, and select EXIT.

I have attached a zip file which you need to Save to your system.

Once saved, unzip it to extract all contents.   which will be 2 files.
Next, double-click on **net_replacement.bat** file.
It should run fairly quickly in a command-prompt window.

Once that is done, restart the Anti-Malware and let me know if it works normally.

 

I would be also curious to know if you do a daily Windows Shutdown at end of day.   Then a new start each morning.

Fixal.zip

Netconf-batch-file.zip

[Bers]

Again thank you so much for quick reply

 

No if the logs are from the latest build, then please wait for someone from staff reviews your logs and gives you further guidance.

Thanks

EDIT: Also its quite possible its crashing because you have mbam.exe to run in compatibility mode. You may try removing it.

Please remove these items from the keys listed below especially the Malwarebytes ones:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\appCompatFlags\Layers
C:\Program Files (x86)\TOSHIBA\TOSHIBA VIDEO PLAYER\SMILauncher.exeREG_SZ ~ HIGHDPIAWARE
C:\Program Files (x86)\TOSHIBA\TOSHIBA VIDEO PLAYER\SMIPlayer.exeREG_SZ ~ HIGHDPIAWARE
C:\Program Files (x86)\TOSHIBA\TOSHIBA VIDEO PLAYER\SMIPlayerMCE.exeREG_SZ ~ HIGHDPIAWARE

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\appCompatFlags\Layers
C:\Users\DES\Documents\Companies\Malwarebytes' Anti-Malware\Malwarebytes Anti-Malware\unins000.exeREG_SZ $ Win8RTM
C:\Users\DES\Desktop\ComboFix.exeREG_SZ ~ WIN7RTM
C:\Users\DES\Desktop\procexp.exeREG_SZ ~ RUNASADMIN
C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exeREG_SZ ~ WIN7RTM

Firefox - I removed those entries from registry and still nothing

 

Hello Bers,

 

As a sidebar, I would caution you that Combofix is not to be used unless under the guidance of a trained expert, and that it is not for use on WIN 8 systems.

And as Firefox noted, placing Malwarebytes Anti-Malware in as in compatibility mode is not advised.  It is actually counter productive.

 

I need for you to save Fixal.zip to the Desktop.  Then extract ( unzip) the content to the Desktop.

Then do a Right-click on Fixal.reg and select Merge and allow merging into the registry.

 

( by the way, delete combofix.exe if you still have it around).  Thanks.

 

Also know that Process Explorer does not need to be run in compatibility mode ( either).

 

 

Next, let us do this.

 

First, ( but only if the program is running) lets shutdown the realtime Malwarebytes Anti-Malware. Go to the desktop Taskbar. See the blue-color MBAM icon in the notification area.
Do a Right-click on it with your mouse, and select EXIT.

I have attached a zip file which you need to Save to your system.

Once saved, unzip it to extract all contents.   which will be 2 files.
Next, double-click on **net_replacement.bat** file.
It should run fairly quickly in a command-prompt window.

Once that is done, restart the Anti-Malware and let me know if it works normally.

 

I would be also curious to know if you do a daily Windows Shutdown at end of day.   Then a new start each morning.

Maurice your solution worked for me thanks so much, YOU ARE GREAT

any reasons why it happened ? why malwarebytes just stopped updating ?

yes usually I shutting down laptop frequently 

[Maurice Naggar]

Hello,

 

Good to know that it is fine now.  Cases like yours are in the minority.   Root cause not very clear.  But it is something of a one-off thing.

You may delete the FRST.exe and the zip files and .reg file I had you use.

 

Suggestions:

Take a look inside the program. Start the Anti-Malware. Click on the Settings icon at the top bar up at top.
Then click the **Advanced Settings** button at the left.
Be sure all top 3 lines on that window are check-marked ( selected ).

Now a couple of changes for each of the Update task & the Threat scan task in the Scheduler.
Click on **Automated Scheduling** button.

Locate and click once on **Check for Updates** line and press Edit. Then press the Advanced button at bottom left.
Slide the window up so you can see all of it. {press the mouse on the very top bar and slide UP }
A few changes are needed.
Look at the "starting time" of the task and use some good time when you know that your computer will be on & powered & that Windows would be on at that time.
Look at the line in Schedule Options. UN-check "Show notification after successful update".

In the Frequency and Settings. Select Hourly and I suggest using the Recurrence at 4 hours.
In the Recovery Options put a check-mark on "Recover missed tasks" and select 1 hour
When done, press the OK button.

Locate and click once on the Threat Scan line and press Edit.Then press the Advanced button at bottom left.
Slide the window up so you can see all of it. {press the mouse on the very top bar and slide UP }

In the Schedule Options, put a check-mark on the line Terminate program when no threats are found
{when no malwares are detected you want the scheduled task to close}.

In the Frequency and Settings block.
You should have Daily and the recurrence set to 1 day.
now UN-check the line Check for updates before scanning {{that line should be always off otherwise the task may not run at the time set. It maybe run +/- 15 minutes of that period.}

In the Recovery Options put a check-mark on "Recover missed tasks" and select 1 hour
When done, press the OK button.

When completely done, close the window.

I wish you well.