MBAMSWISSARMY update

[kgash]

Recently MBAMSwissArmy service is being installed at about 6 am each day. I leave my computer in Sleep mode over night and I now find that it has been woken automatically.

Is this normal for a Service to be installed each day? Can I stop or reschedule this activity?

Thanks for any help.

[AdvancedSetup]

If it's happening every day then I'd say yes you probably have a scheduled scan enabled at around that time. If you like we can take a closer look at your system to provide further feedback.

 

Please read the following and post back the 3 requested logs.
 
Diagnostic Logs
 
Thank you
 

[kgash]

Thank you for your response. Here are the log files.

Addition.txt

FRST.txt

CheckResults.txt

[AdvancedSetup]

Yes, it does look like you have one set for the morning. You can edit it if you like or leave it alone as it seems to be working.

 

You do have an old version of Java installed so I would recommend that you uninstall it. If possible I'd try to run the computer without Java but if you do have to use it then make sure it's always up to date as it often gets compromised.

 

I would also recommend removing ALL compatibility entry settings if at all possible. It's best to run programs without any compatibility settings if you can. If the program just will not run correctly without them then okay but otherwise try to run without them. The Directory Opus for sure should be removed as that can potentially cause unexpected behaviors on the system.

 

 

 

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\appCompatFlags\Layers

    C:\Program Files (x86)\DisplayFusion\DisplayFusion.exe
    C:\Program Files\GPSoftware\Directory Opus\dopus.exe
    C:\Program Files (x86)\Innovative Solutions\Advanced Uninstaller PRO\uninstaller.exe
    C:\Program Files (x86)\Innovative Solutions\Advanced Uninstaller PRO\monitor.exe
    C:\Program Files (x86)\Innovative Solutions\Advanced Uninstaller PRO\LoaderRunOnce.exe


HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\appCompatFlags\Layers

    C:\Program Files (x86)\Innovative Solutions\Advanced Uninstaller PRO\uninstaller.exe
    C:\Program Files (x86)\Innovative Solutions\Advanced Uninstaller PRO\monitor.exe
    C:\Program Files (x86)\Innovative Solutions\Advanced Uninstaller PRO\LoaderRunOnce.exe



 

 

[kgash]

Thanks again for your quick analysis and response. I would like to edit the time for the SwissArmy update but I can't seem to find a way to do it in Settings or Advanced Settings.

 

Also, I didn't realize I had programs running with Compatibility settings. If I delete the Registry entries, will these programs still run?

[daledoc1]

Hi:

 

Until AdvancedSetup returns, as far as editing the scan schedule:

 

 I would like to edit the time for the SwissArmy update but I can't seem to find a way to do it in Settings or Advanced Settings.

 

The process would be to EDIT the time of the scheduled daily scan in the scheduler settings.

 

Hope this helps,

[AdvancedSetup]

Yes your programs will still run just fine by removing those Registry entries.

[KenW]

You could try to uninstall Directory Opus to test. I had it running on 4 machines with XP, 7, and now 8.1 and it never caused a problem.

[kgash]

I deleted the compatibility mode registry entries and all the programs run fine.

 

I still have the problem of the computer waking from sleep in the early AM to update MBAMSwissArmy. I followed the instructions given by Spam Hunters and the computer woke this morning at 0512. Attached is a screenshot of the setting.

 

Thanks

[daledoc1]

Hi:

 

Until AdvancedSetup returns, could you please re-run mbam-check and post a new checkresults.txt log?

 

Also it might help to have today's protection log, too.

You can either copy/paste it into your next reply (using the "copy to clipboard" button and then pasting it), or (as AdvancedSetup would prefer), export it to a .txt file and then attach it:

Dashboard > History > Application Logs > click on today's protection log to view it, then > export to .txt file and save it to your desktop.

Please let us know if you need help with any of that.

 

Thanks for your patience,

[kgash]

I have been away for a couple of days so I could not respond. Although I don't know why, the issue appears to have been resolved in the interim. 

 

I started using mainframe computers in 1966 and as soon as desktop kits were available continued on from there. Over the years, I have had numerous occasions to consult help desks, user forums and other support sources and I must say that the responses I received from you guys have been the best I can remember. You understood the problem I presented and provided relevant answers promptly and accurately. Thank you.

 

I am an unofficial neighborhood pc guru and since many of the calls I respond to concern some type of malware, I always try to convince my "clients" that system protection is best if it is automatic, effective, unobtrusive and easy to install. I always recommend that they use a combination of Microsoft Security Essentials (Defender) and MWB paid version.

 

Thanks again.