hopper15 Posted October 19, 2015 ID:996554 Share Posted October 19, 2015 I've been having this problem the last four days or so especially when I check for updates The 3 Diagnostic Logs are below.Addition.txtFRST.txtCheckResults.txt Link to post Share on other sites More sharing options...
kevinf80 Posted October 19, 2015 ID:996645 Share Posted October 19, 2015 Hello and welcome,P2P/Piracy Warning: If you're using Peer 2 Peer software such as uTorrent, BitTorrent or similar you must either fully uninstall them or completely disable them from running while being assisted here.Failure to remove or disable such software will result in your topic being closed and no further assistance being provided.If you have illegal/cracked software, cracks, keygens etc. on the system, please remove or uninstall them now and read the policy on Piracy. Download attached fixlist.txt file (end of reply) and save it to the Desktop, or the folder you saved FRST into.NOTE. It's important that both FRST and fixlist.txt are in the same location or the fix will not work.Run FRST and press the Fix button just once and wait.The tool will make a log on the Desktop (Fixlog.txt) or the folder it was ran from. Please post it to your reply. Next, Please open Malwarebytes Anti-Malware. On the Settings tab > Detection and Protection sub tab, Detection Options, tick the box "Scan for rootkits". Under Non-Malware Protection sub tab Change PUP and PUM entries to Treat detections as Malware Click on the Scan tab, then click on Scan Now >> . If an update is available, click the Update Now button. A Threat Scan will begin. With some infections, you may or may not see this message box. 'Could not load DDA driver' Click 'Yes' to this message, to allow the driver to load after a restart. Allow the computer to restart. Continue with the rest of these instructions. When the scan is complete, click Apply Actions. Wait for the prompt to restart the computer to appear, then click on Yes. After the restart once you are back at your desktop, open MBAM once more.To get the log from Malwarebytes do the following: Click on the History tab > Application Logs. Double click on the scan log which shows the Date and time of the scan just performed. Click Export > From export you have three options: Copy to Clipboard - if seleted right click to your reply and select "Paste" log will be pasted to your reply Text file (*.txt) - if selected you will have to name the file and save to a place of choice, recommend "Desktop" then attach to reply XML file (*.xml) - if selected you will have to name the file and save to a place of choice, recommend "Desktop" then attach to reply Please use "Copy to Clipboard, then Right click to your reply > select "Paste" that will copy the log to your reply… Post those logs, also give update on any remaining issues or concerns... Thank you, Kevin Fixlist.txt Link to post Share on other sites More sharing options...
hopper15 Posted October 20, 2015 Author ID:996655 Share Posted October 20, 2015 The 2 logs are attached below. But once again I got the message "Malwarebytes has stopped working" in the middle of a threat scan about 45 minutes ago. I had to restart malwarebytes and do a second threat scan so I could export the log. This issue wasn't happening until I updated to V2.2.0.1024.Fixlog.txtMalware Threat Scan.txt Link to post Share on other sites More sharing options...
kevinf80 Posted October 20, 2015 ID:996729 Share Posted October 20, 2015 Go here :- https://forums.malwarebytes.org/index.php?/topic/146017-mbam-clean-removal-process-2x/ Follow those instructions to make a clean install of Malwarebytes, after uninstalling Malwarebytes ensure to run mbam-clean.exe before the fresh install.. Next, Run a threat scan after the clean install and update, see if Malwarebytes responds any better, also post the new log... Thank you, Kevin.. Link to post Share on other sites More sharing options...
hopper15 Posted October 20, 2015 Author ID:996758 Share Posted October 20, 2015 Go here :- https://forums.malwarebytes.org/index.php?/topic/146017-mbam-clean-removal-process-2x/ Follow those instructions to make a clean install of Malwarebytes, after uninstalling Malwarebytes ensure to run mbam-clean.exe before the fresh install.. Next, Run a threat scan after the clean install and update, see if Malwarebytes responds any better, also post the new log... Thank you, Kevin.. I did a clean uninstall and reinstall this past weekend. Malwarebytes still was crashing so that really didn't resolve this issue. Link to post Share on other sites More sharing options...
kevinf80 Posted October 20, 2015 ID:996770 Share Posted October 20, 2015 Can you do once more please as requested... Thank you.. Link to post Share on other sites More sharing options...
hopper15 Posted October 20, 2015 Author ID:996811 Share Posted October 20, 2015 Okay. All finshed with clean uninstall and reinstall. You should know malwarebytes crashed again when I was clicked activation to enter my activation ID and Key.Malware Threat Scan Oct 20.txt Link to post Share on other sites More sharing options...
kevinf80 Posted October 20, 2015 ID:996817 Share Posted October 20, 2015 Please download RogueKiller and save it to your desktop from the following link: http://www.bleepingcomputer.com/download/roguekiller/Quit all running programs. For Windows XP, double-click to start. For Vista,Windows 7/8/8.1/10, Right-click on the program and select Run as Administrator to start and when prompted allow it to run. Read and accept the EULA (End User Licene Agreement) Click Scan to scan the system. When the scan completes select "Report",in the next window select "Export txt" the log will open as a text file post that log... Also save to your Desktop for reference. log will open. Close the program > Don't Fix anything! Thank you, Kevin.. Link to post Share on other sites More sharing options...
hopper15 Posted October 20, 2015 Author ID:996827 Share Posted October 20, 2015 Here you go. RogueKiller Scan.txt Link to post Share on other sites More sharing options...
hopper15 Posted October 20, 2015 Author ID:996874 Share Posted October 20, 2015 Kevin do you think this problem is with my PC or is it an issue with V2.2.0.1024? Link to post Share on other sites More sharing options...
kevinf80 Posted October 20, 2015 ID:996883 Share Posted October 20, 2015 Do you have Avast free or premium, if the free version can you uninstall Avast, ensure Defender is active then see how Malwarebytes responds... Link to post Share on other sites More sharing options...
hopper15 Posted October 20, 2015 Author ID:996888 Share Posted October 20, 2015 I have avast free. You want me to uninstall Avast and reinstall? Plus turn on Windows defender? Link to post Share on other sites More sharing options...
kevinf80 Posted October 20, 2015 ID:996899 Share Posted October 20, 2015 Remove Avast, do not re-install. Ensure Defender is active, we need AV protection. See if Malwarebytes responds ok with Avast removed... Link to post Share on other sites More sharing options...
hopper15 Posted October 20, 2015 Author ID:996900 Share Posted October 20, 2015 Ok, I'll see what happens. Link to post Share on other sites More sharing options...
kevinf80 Posted October 20, 2015 ID:996901 Share Posted October 20, 2015 Thank you.... Link to post Share on other sites More sharing options...
hopper15 Posted October 21, 2015 Author ID:996933 Share Posted October 21, 2015 Thank you.... I uninstalled Avast and ensured Defender was turned on and sorry to say no luck. Malwarebytes crashed when I manually checked for updates a few minutes ago. It's unfortunate I can't roll back to V2.1.8. Everything was running great on my system. Link to post Share on other sites More sharing options...
kevinf80 Posted October 21, 2015 ID:996975 Share Posted October 21, 2015 Thanks for the update, I want you to run one more scan, if the scan is clean continue and run system in clean boot mode... Please read carefully and follow these steps.Download TDSSKiller from here http://support.kaspersky.com/downloads/utils/tdsskiller.exe and save it to your Desktop. Doubleclick on to run the application.The "Ready to scan" window will open, Click on "Change parameters" Place a checkmark next to Verify Driver Digital Signature and Detect TDLFS file system, (Leave "Service & Drivers" and "Boot Sectors" ticked. Click OK. Select "Start Scan"If an infected file is detected, the default action will be Cure, click on Continue.If a suspicious file is detected, the default action will be Skip, click on Continue.It may ask you to reboot the computer to complete the process. Click on Reboot Now.If no reboot is require, click on Report. A log file should appear. Please copy and paste the contents of that file here. If a reboot is required, the report can also be found in your root directory, (usually C:\ folder) in the form of "TDSSKiller.[Version]_[Date]_[Time]_log.txt". Please copy and paste the contents of that file here. Next, If TDSSKiller is clean contine as follows... Set your system to run in a "Clean Boot" mode, basically all none MS services are disabled. Go to the following link: https://support.microsoft.com/en-gb/kb/929135 Follow those instructions and run your system in clean boot. When in that mode run Malwarebytes and see if there is any difference... Thank you, Kevin... Link to post Share on other sites More sharing options...
hopper15 Posted October 21, 2015 Author ID:997024 Share Posted October 21, 2015 For some reasonTdsskiller is not allowing me to copy and paste the contents of the Report log. Here were the scan results. 2 ThreatsSuspicious- My Dell Client Framework(Unsignedfile.multi,generic)Suspicious-WyseReomoteAccess(Unsignedfile.multi,generic) Link to post Share on other sites More sharing options...
hopper15 Posted October 21, 2015 Author ID:997027 Share Posted October 21, 2015 For some reason Tdsskiller is not allowing me to copy and paste the contents of the Report log. Here were the scan results. 2 ThreatsSuspicious- My Dell Client Framework(Unsignedfile.multi,generic)Suspicious-Wyse Remote Access(Unsignedfile.multi,generic) Link to post Share on other sites More sharing options...
kevinf80 Posted October 21, 2015 ID:997037 Share Posted October 21, 2015 If those two unsigned entries are all that was flagged continue and try your system in "Clean Boot" mode, see if Malwarebytes responds any better... Thank you, Kevin.. Link to post Share on other sites More sharing options...
hopper15 Posted October 21, 2015 Author ID:997041 Share Posted October 21, 2015 Yeah I just did a clean boot and just did a threat scan. The scan attached below finished in 19 minutes which is a lot faster than usual even though I didn't scan for rookits this time. Malwarebytes seems to be responding much quicker after the clean boot. Maybe a certain or a few microsoft services are causing malwarebytes to crash.Threat Scan after Clean Boot.txt Link to post Share on other sites More sharing options...
hopper15 Posted October 21, 2015 Author ID:997044 Share Posted October 21, 2015 BTW I couldn't copy and paste the report log from TDSSKiller after the scan. But I have the attachment below of the report Should I keep on my computer on selective startup or return to normal starup?TDSSKiller.3.1.0.5_21.10.2015_07.59.02_log.txt Link to post Share on other sites More sharing options...
hopper15 Posted October 21, 2015 Author ID:997049 Share Posted October 21, 2015 No Malwarebytes crashes so far with my sytem on selective startup. Link to post Share on other sites More sharing options...
kevinf80 Posted October 21, 2015 ID:997059 Share Posted October 21, 2015 Well if Malwarebytes reacts as expected in clean boot we need to see what was causing the previous problem.... In clean boot all none MS services are disabled, the next step is to see if we can find the none MS service at fault. To do that follow the instructions again, hide all MS services, all none MS services are currently disabled, unhide the top half of none MS services, reboot your system. Run Malwarebytes, does it still behave correctly. If so it means the problem could be in the bottom half of none MS sevices.... Follow the instructions again, hide all MS services. Enable the remaining none MS sevices and reboot, run Malwarebytes and see how it responds... Let me know the results..... If MB crashes we at least know the problem service is one of the bottom half none MS services. So it is a chasing game, disable all bottom half again, then enable one at a time, ensure to re-boot each time... Kevin... Link to post Share on other sites More sharing options...
hopper15 Posted October 21, 2015 Author ID:997094 Share Posted October 21, 2015 Well if Malwarebytes reacts as expected in clean boot we need to see what was causing the previous problem.... In clean boot all none MS services are disabled, the next step is to see if we can find the none MS service at fault. To do that follow the instructions again, hide all MS services, all none MS services are currently disabled, unhide the top half of none MS services, reboot your system. Run Malwarebytes, does it still behave correctly. If so it means the problem could be in the bottom half of none MS sevices.... Follow the instructions again, hide all MS services. Enable the remaining none MS sevices and reboot, run Malwarebytes and see how it responds... Let me know the results..... If MB crashes we at least know the problem service is one of the bottom half none MS services. So it is a chasing game, disable all bottom half again, then enable one at a time, ensure to re-boot each time... Kevin... Exactly. Link to post Share on other sites More sharing options...
Recommended Posts