Malwarebytes 2.1.6.1022 crashes all the time

[wortelsoft]

On one of my computers Malwarebytes 2.1.6.1022 allways crashes within seconds, version 2.0.3.1025 runs fine.

I've rune the cleaner tool and reinstalled(actualy done this a few times now) but the result is allways the same. Either installing after clean or upgrading the 2.0.3.1025 gives the same result.

I've attached the log files as requested in the faqs.
 

 

Probleemhandtekening:
  Gebeurtenisnaam van probleem:    APPCRASH
  Naam van de toepassing:    mbam.exe
  Versie van toepassing:    1.0.2.929
  Tijdstempel van toepassing:    552d3ec4
  Naam van foutmodule:    mbam.exe
  Versie van foutmodule:    1.0.2.929
  Tijdstempel van foutmodule:    552d3ec4
  Uitzonderingscode:    c0000005
  Uitzonderingsmarge:    001aedba
  Versie van besturingssysteem:    6.3.9600.2.0.0.256.103
  Landinstelling-id:    1043
  Aanvullende informatie 1:    5861
  Aanvullende informatie 2:    5861822e1919d7c014bbb064c64908b2
  Aanvullende informatie 3:    a10f
  Aanvullende informatie 4:    a10ff7d2bb2516fdc753f9c34fc3b069

Lees de onlineprivacyverklaring:
  http://go.microsoft.com/fwlink/?linkid=280262

Als de onlineprivacyverklaring niet beschikbaar is, lees dan onze offlineprivacyverklaring:
  C:\WINDOWS\system32\nl-NL\erofflps.txt
 

Addition.txt

FRST.txt

CheckResults.txt

[AdvancedSetup]

If you look at the Event Logs section near the bottom of the Addition.txt log you'll see that you're having multiple errors. Not sure if this is due to conflict or damage from a possible infection.

 

I would try to fully disable Kaspersky (temporarily set all the services to disabled and reboot) - see if that helps or not and let us know.. You're also having writing errors for a function of the shadow copy service.

It may simply be that Kaspersky is being too strict - not sure at this point.

 

Fully disable KAV and let us know. Re-enable once done testing.

[wortelsoft]

I've uninstalled KAV and reinstalled MBAM that didn't help. After that ran a SFC /scannow that found some errors related to MS updates corrupting some files. After using DISM and SFC again those files are fixed. Used hte clean tool again installed mbam again still no luck. Shadow copy errors can either come from Acronis true image or cobian backup not being able to reach my nas. I'm now running mbam anti rootkit see if that finds something.

[wortelsoft]

The root kit scanner didn't find anything. Installed KAV again and installed MBAM 2.0.3.1025 as that works, only it nags about that there is a new version availlable. KAV is now running a full scan. I'm thinking about installing a spare harddrive and do a clean windows install on that to see if my windows is corrupt.

[AdvancedSetup]

It's possible that there is something there in the software/hardware and driver mix that our latest version driver just does not like. If you want to try the clean Windows install and let me we can do that, or I can point our QA team here and see if they can help look into it further though I'm not sure what time frame that would be. A clean Windows install if you have the means would probably be much faster.

 

Let me know which way you'd like to go.

 

Thanks

[wortelsoft]

Found the problem the Hyper-V installation got corrupted somehow after uninstalling. I installed the MBAM upgrade --> MBAM worked --> installed Hyper-V again all still working. Running a scan now. I've scanned my computer a lot the last days. Esset online, Hitman pro, Kaspersky internet security MBA 2.0.x, Now the latest MBAM, MS Security esentials. All found nothing but a few tracking cookies and a left over from a search toolbar.

[AdvancedSetup]

Great, glad to hear you were able to locate and correct the issue. Yeah, did not look like an infection but there was also not an obvious reason why it was crashing or not running.

 

Let me go ahead then and give you a closing speech to clean up and remove the tools used.

 

 

At this time there are no more signs of an infection on your system.
However if you are still seeing any signs of an infection please let me know.

Let's go ahead and remove the tools and logs we've used during this process.

Most of the tools used are potentially dangerous to use unsupervised or if ran at the wrong time.
They are often updated daily so if you went to use them again in the future they would be outdated anyways.

The following procedures will implement some cleanup procedures to remove these tools.
 
Download Delfix from here and save it to your desktop. (you may already have this)

• Ensure Remove disinfection tools is checked.
• Click the Run button.
• Reboot
  

Any other programs or logs that are still remaining, you can manually delete. (right click.....Delete)
IE: RogueKiller.exe, RKreport.txt, RK_Quarantine folder, C:\FRST folder, FRST-OlderVersion folder, MBAR folder, etc....AdwCleaner > just run the program and click uninstall.


 
If there are any other left over Folders, Files, Logs then you can delete them on your own.
 
Please visit the following link to see how to delete old System Restore Points. Please delete all of them and create a new one at this time.
How to Delete System Protection Restore Points in Windows 7 and Windows 8

Remove all but the most recent Restore Point on Windows XP


As Java seems to get exploited on a regular basis I advise not using Java if possible but to at least disable java in your web browsers
How do I disable Java in my web browser? - Disable Java

A lot of reading here but if you take the time to read a bit of it you'll see why/how infections and general damage are so easily inflicted on the computer. There is also advice on how to prevent it and keep the system working well. Don't forget about good, solid backups of your data to an external drive that is not connected except when backing up your data. If you leave a backup drive connected and you do get infected it can easily damage, encrypt, delete, or corrupt your backups as well and then you'd lose all data.
Nothing is 100% bulletproof but with a little bit of education you can certainly swing things in your favor.

• How Malware Spreads - How did I get infected
• Best Practices for Safe Computing - Prevention of Malware Infection
• Avoiding those unwanted free applications
• A close look at how Oracle installs deceptive software with Java updates
• IAC / Ask.com toolbars
• Malwarebytes Unpacked Blog
  

If you're not currently using Malwarebytes Premium then you may want to consider purchasing the product which can also help greatly reduce the risk of a future infection.