Threat scan canceled?!

[vanquish]

Hi,

malwarebytes is having a problem where it will freeze once time collapsed hits 11 seconds, i went ahead and decided to uninstall it via control panel and then re-installed it from the website. The same thing happened again so i uninstalled it with the MBAM Clean Removal Process 2x 

 

I re-installed it via the website only for the same thing to happen again  

 

 Malwarebytes Anti-Malware Home (Premium) 2.1.8.1057 

 I am running windows 7 home premium 64-bit operating system

 

Reading one of the replies the staff said to include a export of this log so i have incase it could solve the problem quicker

EXPORT MBAM LOG.txt

[daledoc1]

Hello and :
 
That protection log doesn't tell us much to help with troubleshooting.
 
We would need to see a SCAN log (see below) -- but there may not be a log if the scan did not run to completion.
 
ALSO, please read the following and attach to your next reply the 3 requested logs - Diagnostic Logs (the 3 logs are: FRST.txt, Addition.txt and CheckResults.txt)
 
Thanks,
------------------

How to get SCAN logs or PROTECTION logs:
(Export log to save as a txt file for posting in the forum when requested)

• Open MBAM.
• Click on the HISTORY tab > APPLICATION LOGS.
• Double-click on the SCAN LOG which shows the date and time of the scan just performed (or the one you are asked to post), OR on the PROTECTION LOG showing the detection you are reporting (or the one that you are asked to post).
• Click EXPORT.
• Click TEXT FILE (*.txt)
• In the "Save File" dialog box which appears, click on DESKTOP.
• In the FILE NAME box, type a name for your saved scan or protection log.
• A message box named "File Saved" should appear, stating that "Your file has been successfully exported".
• Click OK.
• Please attach the saved log to your next reply here in this thread.

[vanquish]

Thank you for the fast response!  

 

I have tried running each scan threat, custom and Hyper at least twice and i am still not able to get a scan log from it i am only able to get a protection log 

 

is there any other information i could give that might help?

[daledoc1]

Hi:

 

Please read the following and attach to your next reply the 3 requested logs - Diagnostic Logs (the 3 logs are: FRST.txt, Addition.txt and CheckResults.txt)

 

Thanks,

[vanquish]

Here are the 3 files

Addition.txt

FRST.txt

CheckResults.txt

[daledoc1]

Hi:
 
Preliminary review of the logs show a few things.
 
First, the system needs to be rebooted to complete the MBAM installation:

Pending File Rename Operations:
================================
If any Malwarebytes Anti-Malware items are listed below, the user must reboot to complete a Malwarebytes Anti-Malware upgrade installation.
Pending File Rename Operations:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\
    PendingFileRenameOperations    REG_MULTI_SZ    \??\C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamext.dll.old

 

That may or may not resolve your issue with running the scans.

 

Also, however, the logs are flooded with many application and system errors:
 

=================== Event log errors: =========================

Application errors:
==================
Error: (09/09/2015 08:25:44 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: The program FRST64.exe version 7.9.2015.0 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.

Process ID: 18e0

Start Time: 01d0eb3538dbc784

Termination Time: 0

Application Path: C:\Users\Darius\Downloads\FRST64.exe

Report Id: 891008c3-5728-11e5-b0ec-c6c626a8bfc1

Error: (09/09/2015 05:09:29 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (09/09/2015 02:27:12 PM) (Source: Office 2013 Licensing Service) (EventID: 0) (User: )
Description: Subscription licensing service failed: -1073418154

Error: (09/09/2015 02:18:11 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (09/09/2015 06:59:38 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (09/08/2015 03:21:01 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (09/08/2015 07:34:57 AM) (Source: Office 2013 Licensing Service) (EventID: 0) (User: )
Description: Subscription licensing service failed: -1073418154

Error: (09/08/2015 07:26:12 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (09/07/2015 08:01:13 PM) (Source: Office 2013 Licensing Service) (EventID: 0) (User: )
Description: Subscription licensing service failed: -1073418154

Error: (09/07/2015 03:18:09 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003


System errors:
=============
Error: (09/09/2015 06:33:03 PM) (Source: Microsoft-Windows-HAL) (EventID: 12) (User: )
Description: The platform firmware has corrupted memory across the previous system power transition.  Please check for updated firmware for your system.

Error: (09/09/2015 05:08:15 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: The previous system shutdown at 17:06:33 on ‎09/‎09/‎2015 was unexpected.

Error: (09/09/2015 03:03:54 PM) (Source: Disk) (EventID: 11) (User: )
Description: The driver detected a controller error on \Device\Harddisk1\DR1.

Error: (09/09/2015 03:03:53 PM) (Source: Disk) (EventID: 11) (User: )
Description: The driver detected a controller error on \Device\Harddisk1\DR1.

Error: (09/09/2015 03:03:53 PM) (Source: Disk) (EventID: 11) (User: )
Description: The driver detected a controller error on \Device\Harddisk1\DR1.

Error: (09/09/2015 03:03:52 PM) (Source: Disk) (EventID: 11) (User: )
Description: The driver detected a controller error on \Device\Harddisk1\DR1.

Error: (09/09/2015 02:39:49 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)
Description: Installation Failure: Windows failed to install the following update with error 0x80240020: Upgrade to Windows 10 Home.

Error: (09/09/2015 02:16:48 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: The previous system shutdown at 07:47:59 on ‎09/‎09/‎2015 was unexpected.

Error: (09/09/2015 07:00:06 AM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: application-specificLocalLaunch{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT AUTHORITYLOCAL SERVICES-1-5-19LocalHost (Using LRPC)

Error: (09/09/2015 06:58:22 AM) (Source: EventLog) (EventID: 6008) (User: )
Description: The previous system shutdown at 22:34:51 on ‎08/‎09/‎2015 was unexpected.

 
The damage may or may not be due to malware.
But the sort of work needed to diagnose and repair this damage cannot be performed here in this particular section of the forum.

Such work is conducted in a special forum area reserved for that purpose, or at the help desk.

 

FIRST: I suggest that you might want to backup all your data to external hard drives or media.

Then, for expert assistance, I suggest that you please follow the advice in this pinned topic: Available Assistance For Possibly Infected Computers.
It explains the options for free, expert help >>AND<< the suggested, preliminary steps to expedite the process.

>>As you have already run FRST, please read the pinned topic mentioned above.  Then attach the same logs to a new, separate post in the malware removal section.

A malware analyst will assist you with looking into your issue.

Thanks,

[vanquish]

Ok thank you very much for trying, the problem has not been resolved i will take your advice and head to Available Assistance For Possibly Infected Computers.

 

Thanks again

[mal123456]

Was thinking I might have been infected too !  Ran a malwarebytes scan for the first time in  a week or so ... and every time, whether threat scan or custom scan .. it was cancelled within 15 seconds .. but I was not informed what had cancelled it !

 

I soon had an idea of the likely culprit, assuming it was not because of malware ..

 

This post is to assist others who might experience what I did.  Have been using AVG for years ... but have since removed it /changed my antivirus company.  I believe the latest program update to AVG is no longer compatible with MB ..it is working again, now that AVG has gone !

[daledoc1]

Hello and , @mal123456:
 

 

You wrote:

Was thinking I might have been infected too !  Ran a malwarebytes scan for the first time in  a week or so ... and every time, whether threat scan or custom scan .. it was cancelled within 15 seconds .. but I was not informed what had cancelled it !
 
I soon had an idea of the likely culprit, assuming it was not because of malware ..
 
This post is to assist others who might experience what I did.  Have been using AVG for years ... but have since removed it /changed my antivirus company.  I believe the latest program update to AVG is no longer compatible with MB ..it is working again, now that AVG has gone !

 
The issue you report (and the security program on your system) are different from those reported by the OP.
AFAIK There is no known compatibility problem between MBAM and AVG.

And minor performance issues are generally resolved by setting mutual exclusions, without the need to uninstall the anti-virus.
 
We would be happy to help you, but it would be preferable (and less confusing) to do so in a new, separate thread, for one-one-one assistance.
Please start your own NEW, SEPARATE topic using this clickable button.
The staff and experts will be able to more easily provide both you and the OP with individual help to get you both up and running.

Thanks for your patience and understanding,