Enabling Self Protection Gave Immediate BSOD - Can't Reinstall

[Ex_Brit]

MBAM Premium 2 was running fine and updating fine and not fiinding any problems until I decided to activate self protection in Settings and immediately my machine blue screened. The BSOD said something about chameleon.sys.  Rebooted to Safe Mode w/Networking and uninstalled.  Rebooted again to that mode, tried install, failed, several notices popped up, tried Chameleon, all 13 times and all failed similarly.   I can't have any malware as I have only just reinstalled Vista Ultimate SP2 with All Access Total Protection from McAfee active and protecting already and I've certainly not done anything that would would be considered risky.  So I'm wondering if perhaps there's a server down somewhere that isn't linking up properly with the installer?

I'm wondering if your protection module may clash with McAfee's?

Right now I'm operating without any MBAM as it wont install.   Unfoetunately I had no restore points to fall back on either which is unfortunate.

[Ex_Brit]

Darn it, I can't edit my appalling grammar....oh well.  Apologies.

[Ex_Brit]

Please ignore, despite the warning that self protection must be turned off before running the MBAM Clean tool, it actually worked so the SP must not have actually turned on when it BSOD'd.  So now it has reinstalled OK and I've activated my license once more.

 

Still find the BSOD business rather odd.

[Firefox]

Glad you got it re-installed. If you still have your crash dumps you can upload then for review.

[Ex_Brit]

Gladly if they still exist.  Where would I find those?

[Firefox]

If one was created you would find it here: %SystemRoot%\MEMORY.DMP

If one is not there, if you like and if you can replicate the issue I can give you instructions on how to create one.

[Ex_Brit]

I'd rather not repro it if you don't mind as I'm rather busy right now.  With hidden and sys files showing all I can see in the Windows folder is  a minidump folder and there's a small file inside that, is that it?

[Ex_Brit]

Belay that, I found it.  Will post back shortly.

[Ex_Brit]

OK hope it uploads as it's huge.

[Ex_Brit]

Sorry it's over 300mb in size so can't upload.   How does one edit a post here?

[Firefox]

You are not allowed to edit your posts until you reach a certain amount... (due to previous abuse from others)

Please upload the file to WeTransfer of the crash dumps (in zip/rar format)

Upload File(s) to WeTransfer:

• Visit WeTransfer.com
• Click on I Agree

  

• Click on the icon on the lower left indicated in the below image

  

• Select the Link option

  

• Click on +Add Files

  

• Browse to the location of the file and double-click on it or click once on it and select Open

  

• Click on Transfer

  

• Once the transfer completes, click on Copy link

  

• Once you receive the Copied! message as indicated below, paste the link into your next reply

  

[Ex_Brit]

Hope it works http://we.tl/PBgd43VScH

[Firefox]

Yes that worked, the developers have already received the files for analysis. Any progress will be reported here.

Thanks for taking the time to post them.

[Ex_Brit]

Thanks for your help ;-)

[Firefox]

Your quite welcome, glad I could help...

[Firefox]

The DEV's would like a little more info if you don’t mind…

 

Can you look at your system event logs, and look about the time when this happened and see if there are any events logged for chameleon or anything related to Malwarebytes.

 

You also mentioned that you just reinstalled Vista SP2 - was it updated (Windows update) prior to the crash?

 

Also, can you verify what version of mbamchameleon.sys is there? (c:\windows\system32\drivers\mbamchameleon.sys - look at properties->details)

 

Thanks

[Ex_Brit]

The DEV's would like a little more info if you don’t mind…

 

Can you look at your system event logs, and look about the time when this happened and see if there are any events logged for chameleon or anything related to Malwarebytes.

 

Yes quite a lot

 

You also mentioned that you just reinstalled Vista SP2 - was it updated (Windows update) prior to the crash?

 

Fully up to date in all aspects.

 

Also, can you verify what version of mbamchameleon.sys is there? (c:\windows\system32\drivers\mbamchameleon.sys - look at properties->details)

 

I'm afraid it isn't much help but as I just installed MBAM again and up-dated it it should be the latest, no?

 

 

 

Thanks

[Ex_Brit]

Picture is what I'm trying to post....

[Firefox]

Yes it should be the latest but can you provide the info for the file version anyway? Also can you provide the info in the event logs? You can either export or save them to a file and upload if you don't mind...

[Ex_Brit]

There isn't any file version showing, just a date. I was trying to post a picture, but am not using online picture storage so can't.

 

Date modified 25/04/2014 is only germane info in there.

[Firefox]

if you take a picture all you have to do is save it on you computer, then to attach it here simply click on the More Reply Options and attach it. For example this is what we want. (the below image is my file version)

[Ex_Brit]

Here goes, sorry I didn't see that option.  I was looking at the symbols at the top of the composing window.

[Ex_Brit]

and once again it doesn't attach.  Of course I've had to wait ages to repost.

[Ex_Brit]

OK here goes trying the other way and note that I do not like using online storage but this is courtesy of Photobucket

 

[Firefox]

Were you able to export or save your event logs?