conflict- freeze and window's start

[techron]

Hi,

I pretty familiar with Malwarebytes, and use it nearly daily at work. We resell the full version at our shop, and i've install both versions on a lot of personal computers.

We also use Trend Anti-Virus (usually Internet Security). On most systems, they will work together if you make exceptions in the Trend firewall for mbamgui and mbamservice. However, on this machine (Emachine running XP Home), Trend will lock up every time if both are set to run at startup. (malwarebytes is starting first, as it takes less time to become active).

If I turn either off in the msconfig/startup, the system will run. If i start MalwareBytes after the system is running (trend has finally loaded), they will both work. I have uninstalled and reinstalled both of them with no change. to my knowledge (from full scans with both) there is no malware on the machine.

If there is not a "fix" for this, is there anyway to create a batch file that would delay the mbamgui startup for 60 seconds and put it in the startup?

The software makers might want to consider adding a delay feature to future versions of the software, as I'm sure this could be happening with other antivirus solutions as well.

Any insight would be helpful, as I am running into various issues like this nearly every week.

Thanks,

Techron

[GT500]

You can issue the command net start mbamservice (or something similar) in a batch file to start the service, but there is no command for waiting in a batch file (that I have ever been able to find, at least). You may be able to use something like WinPatrol to do a delayed launch of the batch file, or even a delayed launch of the net command, but that might be the best you can do.

[AdvancedSetup]

You can do a few things. Easiest thing to do without installing anything is use a batch file and ping something before you move on.

This will stop it from loading for 10 seconds

PING 196.196.196.196 -n 10 -w 1000 >NUL

You could also download some timer off the Web.

You can also use VBScript and sleep it before shelling out and running it.

WScript.Sleep 10000

[Swandog46]

We are releasing a new version soon that we hope will resolve this conflict, as well.

[techron]

We are releasing a new version soon that we hope will resolve this conflict, as well.

The batch file never seemed to work. I had 2 people helping me with it, and it would never get the mbamgui running. We tried it right from the run line, and couldn't get it to work. It wouldn't run alone, and we noticed in the msconfig that it had the tag /starttray - dos didn't recognise the command, so it never worked right.

we finally went into the registry at "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" and assumed that things would run alphebetically - making mbamgui run before Trend (UfSeAgnt.exe). Just to experiment, we changed the name of the entry to "aUfSeAgnt.exe." This seemed to work - all things would run, and the system would work for awhile. We could open both programs, and the rest of windows worked OK. However, at different times - whenever we would put in a jumpdrive, or other things - trend would start to run in the system tray, and the system would totally lock up.

Basically, we ended up turning off Malwarebytes in the startup, and told the customer a fix was on the way, and we would notify him. We refunded the labor time, but left Malwarebytes on the system so he could start and manually scan at any time till we find a solution. So, at this point, I would have to consider this one unresolved.

We have had both products working on many other systems, so there must be some glitch left in windows from previous malware removal or something that we have not found.

Thanks for the help, though we didn't resolve the conflict, I did learn a lot.

Malwarebytes must be doing something different in the startup than just starting mbamgui and mbamservice to get the whole thing going...

Thanks,

Ron

[GT500]

You should leave mbamgui.exe in your run items. Just worry about manually starting the MBAMService.

[Swandog46]

Windows never guarantees the order of startup items listed in the same registry key.

[Mike_136]

Hi,

I pretty familiar with Malwarebytes, and use it nearly daily at work. We resell the full version at our shop, and i've install both versions on a lot of personal computers.

We also use Trend Anti-Virus (usually Internet Security). On most systems, they will work together if you make exceptions in the Trend firewall for mbamgui and mbamservice. However, on this machine (Emachine running XP Home), Trend will lock up every time if both are set to run at startup. (malwarebytes is starting first, as it takes less time to become active).

If I turn either off in the msconfig/startup, the system will run. If i start MalwareBytes after the system is running (trend has finally loaded), they will both work. I have uninstalled and reinstalled both of them with no change. to my knowledge (from full scans with both) there is no malware on the machine.

If there is not a "fix" for this, is there anyway to create a batch file that would delay the mbamgui startup for 60 seconds and put it in the startup?

The software makers might want to consider adding a delay feature to future versions of the software, as I'm sure this could be happening with other antivirus solutions as well.

Any insight would be helpful, as I am running into various issues like this nearly every week.

Thanks,

Techron

Hi,

Just resolved this same problem with the help of Malwarebytes excellent Tech support (Tom Mercado).

I got the same 'freeze' using ESET v4 on an AMD Athlon 3200+ system running XP SP3.

Solution is to add a delay to the mbam gui when it starts with windows. Keep it configured to start protection with windows, however, add the following registry key as follows:

* Navigate to HKEY_LOCAL_MACHINE\SOFTWARE\Malwarebytes' Anti-Malware and click once on the Malwarebytes' Anti-Malware folder to highlight it

* Right-click in the white space on the right and highlight New and select DWORD Value

* Name the value "delayguistart" (no quotes) and then press Enter

* Double-click on the delayguistart entry you just created and click the circle next to Decimal and type 60 for the value

* That will cause MBAM to delay itself 60 seconds before starting

I found out that there was NO need to add any exclusions to the ESET anti-virus scanner.

To fully test the system for potential freezes, using this 60 second delay (longer may be needed perhaps) simply add a command file ("restart.cmd") to the Windows 'Start Up' folder with the following command line:

SHUTDOWN -r -t 120

This restarts the PC every 2 minutes after Windows login, allowing you to leave it running unattended - assuming there's no Windows account login screen at restart.

To interupt the shutdown-restart cycle, RUN the command line SHUTDOWN -a (from the START_RUN command). Remove from 'Start Up' folder when satisfied the chosen delay works.

Cheers

Mike

[techron]

Thanks - I will use this in the future. There is another fix in which you make exceptions for all the core MWB files in the AV (it is posted elsewhere, and works), but this is a much quicker solution, and I will try it in the future. We sell a lot of Trend and MWB, so this will be a fix I pass on to the other techs.

Thanks again!

Techron

[exile360]

Please note that while this may resolve the freeze at startup issue, other conflicts may occur in other situations so when possible it is always advisable to also add exclusions for MBAM's files and processes in your other security software (particularly AV and firewall).

[AdvancedSetup]

Also to add input here. Trend AV is very finicky and needs to have the exclusions setup properly or you'll continue to have issues. Delay alone rarely works as a solution and was initiated mainly to deal with McAfee whom ignores their own internal exemptions on a system startup scan that cannot be disabled yet ignores the exclusions.

[Mike_136]

Also to add input here. Trend AV is very finicky and needs to have the exclusions setup properly or you'll continue to have issues. Delay alone rarely works as a solution and was initiated mainly to deal with McAfee whom ignores their own internal exemptions on a system startup scan that cannot be disabled yet ignores the exclusions.

Hi,

Any advice regarding the need for the typical exclusions for ESET smart security version 4, which I encountered the problem with, albeit just the once?

Am I best off just adding the exclusions? Wasn't sure if you had any experience of these 'freezing' conflicts with ESET, either at Windows start-up or during operation.

I was at an ESET reseller partner conference last month and their VPs were recommending Malwarebytes to run alongside their AV products, so I guessed it was a pretty stable combination, so far just the one problem.

Mike

[AdvancedSetup]

We did have issues with version 3.x but so far the 4.x seems to work okay for most users without exclusions. Though technology and updates happen daily so its possible it can could change which has often been the case with AVG.

[Chris Wardell]

We did have issues with version 3.x but so far the 4.x seems to work okay for most users without exclusions. Though technology and updates happen daily so its possible it can could change which has often been the case with AVG.

I've been having problems with MBAM with Trend Micro Worry Free Business Security (Advanced) - lockups and sometimes windows won't load at all. The most frustrating are the lockups on the workstations that randomly occur. I have 2 people that have no issues at all, and 3 now that this lockup happens to. What I have done is remove Trend and load AVG free edition until I can find a solution. I will try excluding all mbam items within trend to see if that helps. Interestingly enough, I did not have this issue with Trend Micro WFBS(A) v5.0, only when I upgraded to v6.0 did I notice this.

As I feel MBAM catches more than Trend does anyway, the AVG workaround seemed to be fine - but I would still like the clients on their TM product which they pay for at their corp...

[BarryC]

What is the ultimate resolution of this problem. I just paid for Malware and it locks up with Trend Micro Security, even when it is set to load delayed. Actually no lockup unless Malware is set to check real time. I've but the three MB executables in the exemption list for the TM firewall, rebooted, still no help.

Appreciate an update from the staff at Malware. Thanks,

B

[BarryC]

Hi,

I pretty familiar with Malwarebytes, and use it nearly daily at work. We resell the full version at our shop, and i've install both versions on a lot of personal computers.

We also use Trend Anti-Virus (usually Internet Security). On most systems, they will work together if you make exceptions in the Trend firewall for mbamgui and mbamservice. However, on this machine (Emachine running XP Home), Trend will lock up every time if both are set to run at startup. (malwarebytes is starting first, as it takes less time to become active).

If I turn either off in the msconfig/startup, the system will run. If i start MalwareBytes after the system is running (trend has finally loaded), they will both work. I have uninstalled and reinstalled both of them with no change. to my knowledge (from full scans with both) there is no malware on the machine.

If there is not a "fix" for this, is there anyway to create a batch file that would delay the mbamgui startup for 60 seconds and put it in the startup?

The software makers might want to consider adding a delay feature to future versions of the software, as I'm sure this could be happening with other antivirus solutions as well.

Any insight would be helpful, as I am running into various issues like this nearly every week.

Thanks,

Techron

Second post on this topic, I have malwarebytes set to start 5 mins after startup, with Trend Micro Security loading at startup right away. IF real time monitoring is turned on in Malwarebytes, the system will lock, even with all Malwarebytes executable loaded into the exception list in Trend's firewall. This should cause a problem anyway as Trend will ask if you want to allow a program to access the internet.

Has Malwarebytes staff found a fix for this? I am running latest version from April 2010. Please reply.

[The Fixer]

I am also having an identical problem (except for different a/v) with the registered version on a win 7 home premium,system, intel dg31pr mainb. E8400cpu, 2gbddr2, GF9600, with avg free av. The system freezes on boot. I have performed the registry edit to delay the start, the result is that the system does indeed boot but freezes later after a period of normal operation (afk so have no time interval information). I have also excluded the malwarebytes application files from the avg scan.

I am running in manual mode in order to continue using the pc. System is rock solid in manual mode, unusable with protection module loaded.

Is there any news on a fix for this problem? I have several people wanting to signup.

[noknojon]

For avg free av. mixed with paid Malwarebytes - Please read Here in the FAQ section -

Thank You -

[The Fixer]

Thanks for that, I have just followed the instructions there, system still froze while idle. I will check to see if I have made any typo's tomorrow.

[chromebuster]

Hi folks,

Good Lord. An easy solution I've found is great is the use of Win Patrol's delayed start feature. It is much more precise than MSConfig, and it is ten times faster than using a batch, VBS, or other script file, and much easier than phishing in the registry for the correct entry where there is a chance that the wrong one will be clicked.

[The Fixer]

I am also having an identical problem (except for different a/v) with the registered version on a win 7 home premium,system, intel dg31pr mainb. E8400cpu, 2gbddr2, GF9600, with avg free av. The system freezes on boot. I have performed the registry edit to delay the start, the result is that the system does indeed boot but freezes later after a period of normal operation (afk so have no time interval information). I have also excluded the malwarebytes application files from the avg scan.

I am running in manual mode in order to continue using the pc. System is rock solid in manual mode, unusable with protection module loaded.

Is there any news on a fix for this problem? I have several people wanting to signup.

Further to the above, I have setup the exclusions listed for AVG free 9 and added the startup delay. The system now starts ok and runs for a while but freezes solid when trying to resume. Before I registered Mbam and activated the protection module the system was very reliable indeed. I set all power options to 'never' to avoid resume situations, but the system still freezes solid after a period of inactivity. When the system freezes, I can open nothing, nor can I restart the system. I have to press the reset in order to restart - if I hold the start button until psu timeout, the system does not start correctly, whereas a hard reset produces a working restart.

Almost any suggestions welcome !!

[AdvancedSetup]

Please do the following to see if it resolves the issue:

Windows XP:

• Click on Start and select Control Panel
  
• Open Add/Remove Programs
  
• Uninstall Malwarebytes' Anti-Malware
  
• Restart your computer very important
  
• Download and run mbam-clean.exe from here
  
• It will ask to restart your computer, please allow it to do so very important
  
• After the computer restarts, temporarily disable your Anti-Virus and install the latest version of Malwarebytes' Anti-Malware from here
  
  • Note: You will need to reactivate the program using the license you were sent via email if using the Pro version
    
  • Launch the program and set the Protection and Registration. Then go to the UPDATE tab if not done during installation and check for updates.
    Restart the computer again and verify that MBAM is in the task tray if using the Pro version. Now setup any file exclusions as may be required in your Anti-Virus/Internet-Security/Firewall applications and restart your Anti-Virus/Internet-Security applications. You may use the guides posted in the FAQ's here or post to ask and we'll explain how to do it.
    

Windows Vista and Windows 7:

• Click on the Start button and select Control Panel
  
• Click on Programs and Features
  
• Uninstall Malwarebytes' Anti-Malware
  
• Restart your computer very important
  
• Download and run mbam-clean.exe from here
  
• It will ask to restart your computer, please allow it to do so very important
  
• After the computer restarts, temporarily disable your Anti-Virus and install the latest version of Malwarebytes' Anti-Malware from here
  
  • Note: You will need to reactivate the program using the license you were sent via email if using the Pro version
    
  • Launch the program and set the Protection and Registration. Then go to the UPDATE tab if not done during installation and check for updates.
    Restart the computer again and verify that MBAM is in the task tray if using the Pro version. Now setup any file exclusions as may be required in your Anti-Virus/Internet-Security/Firewall applications and restart your Anti-Virus/Internet-Security applications. You may use the guides posted in the FAQ's here or post to ask and we'll explain how to do it.
    

[jeremy whiteman]

i was running into a very similar problem with malwarebytes and TrendMicro WFBS 6 where my after virus definition updates, my client's PCs would either freeze upon the behavior monitoring service restart if the computer was logged on when the updated definitions got pushed out from the server, or upon login the next day if it was a laptop for example that was off-site when the update happened.

This went on for three months...i have numerous users who access their PCs remotely so having freezes happen overnight and on weekends was a very bad thing.

I went around and around with Trend Support (including generating crash dumps and sending them to Trend for analysis) and got some great help here from Jack Lewis in corporate tech support.

to make a long story short (as i don't have all of my notes accessible to me)...i finally got somewhere (i am doing this from memory so don't have all the specifics readily available)

Trend said their behavior monitoring service is being blocked by MBAMProtector (i believe part of mbamservice.exe)...which is causing problems with the service restarting...hence the workstations freeze.

In working with MBAM corporate tech support, we figured out that by disabling the protection module so that it doesn't start with windows...the updates could happen and the PCs wouldn't freeze....a sufficient workaround...I agree that MBAM catches more than trend does...although having on-access scanning enabled for both would be nice...i use MBAM more for scheduled scans anyway...

i continued working with trendmicro who sent me a test behavior monitoring debug pattern to see if with it (and the protection module ENABLED) it will work...it did...

i have reported my findings back to them...and they said they are going to write a hotfix for this...i don't know if it's specifically for me or they will make it public...but i will keep anyone posted who is interested...

I hope this makes sense...i am trying to write it from memory...if anyone has any questions, i'd be happy to answer them.

Thanks

Jeremy Whiteman

[exile360]

That's marvelous news . Thank you Mr Whiteman for reporting your progress to us. This has been a longstanding issue with Trend Micro's products. Now that you've helped them to nail down the issue and they're creating a hotfix it will likely correct these problems for all of our users who have Trend Micro products installed.

Please do keep us posted on any progress you hear from Trend.

Thank you