Malwarebytes evidently freezes Win 10 Pro 64 bit, without BSOD

[dj99]

I have been having this problem from before upgrading from Win 8.1 Pro 64 bit to Win 10 Pro 64 bit.  I'm not sure what is failing when it happens, because the screen will still be there, but I am unable to get into task manager or anything else to diagnose.  Strangely, the mouse moves around, but won't actually activate anything.  I end up shutting the computer down to restart.

 

The reason I'm "blaming" malwarebytes real-time protection, is that when I turn it off, the computer runs for days without the problem.  That is the ONLY difference.

 

I have already performed the mbam-clean procedure and reinstalled.  It has already frozen again.  I would really like to have real-time protection again.

 

FYI, the "self-protection" checkbox is not checked as per the recommended settings.

 

Is there anything I can provide in the way of logs or whatever to help you diagnose what's happening?

 

Thanks in advance!

[usasma]

Are you running any other antivirus other than MBAM?

If so, remove it and see if MBAM does it when it's the only protection.

 

Beyond that, let's try looking at these reports:

1)  Please provide this information (even though you may not be reporting BSOD's) so we can provide a complete analysis (from the Pinned Topic at the top of the forum):  http://www.bleepingcomputer.com/forums/t/576314/blue-screen-of-death-bsod-posting-instructions-windows-10-81-8-7-vista/

2)  Please do the following:
- open Event Viewer (run eventvwr.msc from the "Run" dialog)
- expand the Custom Views category (left click on the > next to the words "Custom Views")
- right click on Administrative Events
- select "Save all Events in Custom View as..."
- save the file as Admin.evtx
- zip up the file (right click on it, select "Send to", select "Compressed (zipped) folder")
- upload it with your next post (if it's too big, then upload it to a free file-hosting service and post a link here).

FYI - If we're looking for Event ID 41 errors (unexplained shutdowns), there's more info on that here:  http://support.microsoft.com/kb/2028504

While waiting for a reply, please monitor your temps with this free utility:  http://www.cpuid.com/softwares/hwmonitor.html

[dj99]

My other anti-virus is Windows Defender.  Does that count?  I'll see if I can shut it off and turn MBAM back on real-time for a test.

 

I will monitor temps, although I do not overclock, it's running no higher than 42C right now, and have a cooler master hyper 212 evo just cuz.

 

I will have to take a bit of time to get you the info you requested.  It will probably be sometime this weekend.

 

Thanks for your reply!

[usasma]

Windows Defender will turn itself off if it detects a problem - so don't worry about it.

BUT, if you remove everything, then you'll have to make sure it turns itself back on (as sometimes it won't).

 

We like to look at the temps just before a crash/freeze.
But if you don't get it then, the program that I suggest will log maximum values.

 

I receive an email when you reply, I'll reply back (if necessary) within 48 hours.

[dj99]

I'm quicker than i thought.

 

OK, so my max temp so far is 52C.

 

Link to files: 

 

https://www.dropbox.com/sh/y8oomld3l6gnw43/AACJGti6LSOvi424jWx5EPmra?dl=0

 

Thanks!

[usasma]

Some disk/storage controller errors in the Admin log

Please run these free hardware diagnostics:  http://www.carrona.org/hwdiag.html

Start with the hard drive tests first.

 

Your UEFI/BIOS (version 2501) dates from 2014.  Please check at the manufacturer's website to see if there are any UEFI/BIOS updates available for your system.  If you are able to install the update through Windows (without booting from an external drive), then go ahead and update it.  WARNING - if the computer might shut down during this procedure, please don't do it, as this may physically damage the computer and prevent it from booting.

You have 7 hard drives.  What is the make/model/wattage and age of your Power Supply?

 

Have you reviewed your installed programs to see if they are compatible w/W10?

Have you reregistered your apps with the Windows Store?  http://www.thewindowsclub.com/re-register-windows-store-apps(keep an eye out for errors during this process).

 

If it still happens after all this, then please do the following again (immediately after the freeze):
- open Event Viewer (run eventvwr.msc from the "Run" dialog)
- expand the Custom Views category (left click on the > next to the words "Custom Views")
- right click on Administrative Events
- select "Save all Events in Custom View as..."
- save the file as Admin.evtx
- zip up the file (right click on it, select "Send to", select "Compressed (zipped) folder")
- upload it with your next post (if it's too big, then upload it to a free file-hosting service and post a link here).


 

[dj99]

A little background - I replaced my motherboard a couple of weeks ago because I thought it was the culprit.  It wasn't.  The problem still occurs upon turning MBAM on in real-time.  I have the latest bios on a brand new motherboard.

 

I used to have 10 hard drives, but I suspected the sata3 controller cards (2) that were driving them.  It didn't change the problem.  I'll eventually plug them back in.

 

I have a Seasonic SS-550HT, and it's 7 years young in a week.   Like I said, I reduced its load by 3 hard drives, and no difference until I turn on MBAM.

 

I just did the reregistering of my apps, and rebooted.

 

I am about to turn MBAM back on again to see what happens.  I will post the event logs again if it fails.

 

Thanks!

[usasma]

Let's see what happens.

The controller errors and the 7 hard drives are a concern - even though you've reduced it from 10.
The PSU is nice, but after 7 years you have to wonder about them

 

Please run the hard drive diagnostics on ALL hard drives:  http://www.carrona.org/hddiag.html

[dj99]

OK.  I got up this morning and the mouse moves around in windows.  I can hover and peek at windows, select windows and change focus to them.  That is all I can do.  There is no response when I try to start task manager.  I can't type anything or get any response.  I end up shutting the computer off and back on again to regain control.  I shut off MBAM again.

 

I have posted the file admin2.zip as you requested.

 

https://www.dropbox.com/s/1wthgmkjrij0vxs/admin2.zip?dl=0

 

Thanks again.

[dj99]

I just saw your message about testing the hard drives.

 

For a test, I can eliminate all the hard drives except for the boot drive which is a newer 480GB SSD, and then enable MBAM.  I'll run diags on the boot drive before that.  When I get more time, I'll test each drive.

 

FYI, I ran memtest86 on my memory overnight before I purchased the replacement motherboard.  There were zero errors.

 

Thanks!

[usasma]

I dunno if this has anything to do with this - but are you using ReadyBoost?

If so, the logfile is full and needs to be emptied.

I'd suggest turning off ReadyBoost while we're testing.

 

There's also a number of "Brother" errors in the Admin logfile

Please uninstall that while we're troubleshooting also.

[dj99]

No readyboost.  There's no need for that anymore, IMHO.  I have an SSD for a boot drive, after all.  In fact, I tried to plug in a flash drive, and under the readyboot tab in its properties, said it can't and won't because the computer is fast enough so no benefit.

 

I'll see about trimming my system down for another test soon.  I also cleared just about every event log.

 

Thanks for your help!

[dj99]

I upgraded Windows 10 Pro 64 bit to build 1511 - 10586.  Ran all night with real-time protection enabled.  Fingers crossed.  It wasn't about me.