Malwarebytes 2.2.0

[JGamez]

Hi everyone so I just recently got a new computer and lately Malwarebytes has been using an abnormal CPU usage and also has been crashing whenever I start it up. The  last program I had unistalled was Avaria Antivirus because Avast ended up giving me a corrupted drive error and I have to reset it. If someone can help me with this issue I have some things to get done today it would be great.

[kevinf80]

Hello and welcome to Malwarebytes,

Please be aware the following P2P/Piracy Warning is a standard opening reply made here at Malwarebytes, we make no accusations but do make you aware of Forum Protocol....

If you're using Peer 2 Peer software such as uTorrent, BitTorrent or similar you must either fully uninstall them or completely disable them from running while being assisted here.Failure to remove or disable such software will result in your topic being closed and no further assistance being provided.If you have illegal/cracked software, cracks, keygens etc. on the system, please remove or uninstall them now and read the policy on Piracy.

 

Next,

 

Please download MBAM-clean and save it to your desktop.

•    Right-click on mbam-clean.exe icon and select Run as Administrator to start the tool.
•    It will ask you to reboot the machine - please do so.
•    Run the cleaner tool again, re-boot when complete. <<<---do not miss this step
  

Download & install the newset MBAM version.

Please download Malwarebytes Anti-Malware

•    Install the progam and select update.
•    Once updated, click the Settings tab, in the left panel choose Detctions & protection and tick Scan for rootkits.
•    In the same tab, under PUP and PUM detections make sure it is set to Treat detections as malware.
•    Click the Scan tab, choose Threat Scan is checked[/b and click Scan Now.
•    If threats are detected, click the Apply Actions button. You will now be prompted to reboot. Click Yes.
•    Upon completion of the scan (or after the reboot), click the History tab.
•    Click Application Logs and double-click the Scan Log.
•    At the bottom click Export and choose Text file.
  

Save the file to your desktop and include its content in your next reply.
 
Next,
 
Download Farbar Recovery Scan Tool and save it to your desktop.

Note: You need to run the version compatible with your system (32 bit or 64 bit). If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.

• Double-click to run it. When the tool opens click Yes to disclaimer.
  (Windows 8/10 users will be prompted about Windows SmartScreen protection - click More information and Run.)
• Make sure Addition.txt is checkmarked under "Optional scans"
• Press Scan button to run the tool....
• It will make a log (FRST.txt) in the same directory the tool is run. Please copy and paste it to your reply.
• The tool will also make a log named (Addition.txt)  Please attach those logs to your reply.
  

 

Post those logs to your reply..

 

Thank you,

 

Kevin...

[JGamez]

Hello and welcome to Malwarebytes,

Please be aware the following P2P/Piracy Warning is a standard opening reply made here at Malwarebytes, we make no accusations but do make you aware of Forum Protocol....

 

 

 

Next,

 

Please download MBAM-clean and save it to your desktop.

 

•    Right-click on mbam-clean.exe icon and select Run as Administrator to start the tool.
•    It will ask you to reboot the machine - please do so.
•    Run the cleaner tool again, re-boot when complete. <<<---do not miss this step

Download & install the newset MBAM version.

Please download Malwarebytes Anti-Malware

•    Install the progam and select update.
•    Once updated, click the Settings tab, in the left panel choose Detctions & protection and tick Scan for rootkits.
•    In the same tab, under PUP and PUM detections make sure it is set to Treat detections as malware.
•    Click the Scan tab, choose Threat Scan is checked[/b and click Scan Now.
•    If threats are detected, click the Apply Actions button. You will now be prompted to reboot. Click Yes.
•    Upon completion of the scan (or after the reboot), click the History tab.
•    Click Application Logs and double-click the Scan Log.
•    At the bottom click Export and choose Text file.

Save the file to your desktop and include its content in your next reply.

 

 

Next,

 

Download Farbar Recovery Scan Tool and save it to your desktop.

Note: You need to run the version compatible with your system (32 bit or 64 bit). If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.

 

• Double-click to run it. When the tool opens click Yes to disclaimer.

  (Windows 8/10 users will be prompted about Windows SmartScreen protection - click More information and Run.)

• Make sure Addition.txt is checkmarked under "Optional scans"
• Press Scan button to run the tool....
• It will make a log (FRST.txt) in the same directory the tool is run. Please copy and paste it to your reply.
• The tool will also make a log named (Addition.txt)  Please attach those logs to your reply.

 

 

Post those logs to your reply..

 

Thank you,

 

Kevin...

Oh sweet Malwarebytes started working again after I ran Malwarebytes clean. Thanks!

[JGamez]

Btw I cannot seem to disable Antimalware Service Excutables do you might now how. I thought I disabled it but it is still hoarding my CPU usage.

[kevinf80]

Can you run FRST as requested?

[JGamez]

Can you run FRST as requested?

[kevinf80]

Do not see any obvious malware/infection in those logs. The service you mention hogging CPU (Antimalware Service) is related to Windows Defender, probably is worth running the system in Clean Boot mode and see if we have an improvement.

 

Go to this link: https://windowsinstructed.com/clean-boot-windows-windows/ set up and run in "Clean Boot" mode. Does that make any difference?

[JGamez]

Toshiba Service Station, System and Compressed Memory, and Antimalware Service Excutables are taking up a lot of CPU usage. IIt did not make a difference and if anything it might be worse.

[kevinf80]

Put your system back in Normal mode, the instructions are in the link for clean boot mode.... Re-boot when settings are changed back. As clean boot (all none MS services disabled) made no improvement whatsoever there maybe malware or infection on your system.

 

Lets run one more indepth scan to ensure your system is definitely clean:

 

Scan with ESET Online Scanner

This step can only be done using Internet Explorer, Google Chrome or Mozilla Firefox.
Temporary disable your AntiVirus and AntiSpyware protection - instructions here.
Please visit ESET Online Scanner website.

Click there Run ESET Online Scanner.

If using Internet Explorer:

• Accept the Terms of Use and click Start.
• Allow the running of add-on.
  

If using Mozilla Firefox or Google Chrome:

• Download esetsmartinstaller_enu.exe that you'll be given link to.
• Double click esetsmartinstaller_enu.exe.
• Allow the Terms of Use and click Start.
  

To perform the scan:

• Make sure that Remove found threats is unchecked.
• Scan archives is checked.
• In Advanced Settings: Scan for potentially unwanted applications, Scan for potentially unsafe applications and Enable Anti-Stealth technology are checked.
• Under “Enable Stealth Technology select “Change” select any extra drives in that window.
• Click Start
• The program will begin to download it's virus database. The speed may vary depending on your Internet connection.
• When completed, the program will begin to scan. This may take several hours. Please, be patient.
• Do not do anything on your machine as it may interrupt the scan.
• When the scan is done, click Finish.
• A logfile will be created at C:\Program Files (x86)\ESET\ESET Online Scanner. Open it using Notepad.
  

Please include this logfile in your next reply.

Don't forget to re-enable protection software!
 

Thank you,

 

Kevin

[JGamez]

Put your system back in Normal mode, the instructions are in the link for clean boot mode.... Re-boot when settings are changed back. As clean boot (all none MS services disabled) made no improvement whatsoever there maybe malware or infection on your system.

 

Lets run one more indepth scan to ensure your system is definitely clean:

 

Scan with ESET Online Scanner

This step can only be done using Internet Explorer, Google Chrome or Mozilla Firefox.

Temporary disable your AntiVirus and AntiSpyware protection - instructions here.

Please visit ESET Online Scanner website.

Click there Run ESET Online Scanner.

If using Internet Explorer:

 

• Accept the Terms of Use and click Start.
• Allow the running of add-on.

If using Mozilla Firefox or Google Chrome:

• Download esetsmartinstaller_enu.exe that you'll be given link to.
• Double click esetsmartinstaller_enu.exe.
• Allow the Terms of Use and click Start.

To perform the scan:

• Make sure that Remove found threats is unchecked.
• Scan archives is checked.
• In Advanced Settings: Scan for potentially unwanted applications, Scan for potentially unsafe applications and Enable Anti-Stealth technology are checked.
• Under “Enable Stealth Technology select “Change” select any extra drives in that window.
• Click Start
• The program will begin to download it's virus database. The speed may vary depending on your Internet connection.
• When completed, the program will begin to scan. This may take several hours. Please, be patient.
• Do not do anything on your machine as it may interrupt the scan.
• When the scan is done, click Finish.
• A logfile will be created at C:\Program Files (x86)\ESET\ESET Online Scanner. Open it using Notepad.

Please include this logfile in your next reply.

Don't forget to re-enable protection software!

 

 

Thank you,

 

Kevin

Sorry Eset never detected anything. I would also like to put this out since I have heard nobody reporting this but Acsess Polices seem to crash Malwarebytes on any OS I have no idea if it has anything to my 16 digit pass. 

[kevinf80]

I would also like to put this out since I have heard nobody reporting this but Acsess Polices seem to crash Malwarebytes on any OS I have no idea if it has anything to my 16 digit pass.

 

I`m really not sure what you mean..

[JGamez]

I`m really not sure what you mean..

Sorry like my pin for Acsess policy contains 16 numbers/letters but when I tried to remove/edit it Malwarebytes crashes.

[kevinf80]

Do you mean a login password?

[JGamez]

Do you mean a login password?

Yes

[kevinf80]

Run the following and post logs...

 

Download Security Check by screen317 from either of the following:

 

http://screen317.spywareinfoforum.org/SecurityCheck.exe or http://screen317.changelog.fr/SecurityCheck.exe

 

Save it to your Desktop. (If your security alerts either accept the alert, or turn the security off while Secuirity Check runs)

Double click SecurityCheck.exe (Vista or Windows 7/8 users right click and select "Run as Administrator") and follow the onscreen instructions inside of the black box. Press any key when asked.

A Notepad document should open automatically called checkup.txt; please post the contents of that document.
 

If Security Check will not run or you get an alert saying it is not supported, Re-boot your PC then try again...

 

Next,

 

Please download VEW by Vino Rosso from HERE and save it to your Desktop.

• 
  

Double-click VEW.exe. to start, Vista and Windows 7/8/10 users Right Click and select "Run as Administrator"
Under 'Select log to query...check the boxes for both Application and System.
Under 'Select type to list... select both Error and Critical.
Click the radio button for 'Number of events...Type 15 in the 1 to 20 box.
Then click the Run button.

Notepad will open with the output log. It will take a couple of minutes to generate the log, please be patient.

 

Please post the Output log in your next reply.

 

Let me see those logs....

 

If the ctashes result in BSOD also zip up and attach this folder C:\Windows\Minidump

 

Thank you,

 

Kevin...

[JGamez]

Run the following and post logs...

 

Download Security Check by screen317 from either of the following:

 

http://screen317.spywareinfoforum.org/SecurityCheck.exe or http://screen317.changelog.fr/SecurityCheck.exe

 

Save it to your Desktop. (If your security alerts either accept the alert, or turn the security off while Secuirity Check runs)

Double click SecurityCheck.exe (Vista or Windows 7/8 users right click and select "Run as Administrator") and follow the onscreen instructions inside of the black box. Press any key when asked.

A Notepad document should open automatically called checkup.txt; please post the contents of that document.

 

If Security Check will not run or you get an alert saying it is not supported, Re-boot your PC then try again...

 

Next,

 

Please download VEW by Vino Rosso from HERE and save it to your Desktop.

 

•  

   

• Double-click VEW.exe. to start, Vista and Windows 7/8/10 users Right Click and select "Run as Administrator"

   

   

• Under 'Select log to query...check the boxes for both Application and System.

   

   

• Under 'Select type to list... select both Error and Critical.

   

   

• Click the radio button for 'Number of events...Type 15 in the 1 to 20 box.

   

   

• Then click the Run button.

   

   

• Notepad will open with the output log. It will take a couple of minutes to generate the log, please be patient.

   

   

 

 

Please post the Output log in your next reply.

 

Let me see those logs....

 

If the ctashes result in BSOD also zip up and attach this folder C:\Windows\Minidump

 

Thank you,

 

Kevin...

Sorry for some reason VEW kept crashing but here is the security check log.

[kevinf80]

Try the following and post its log if successful...

 

Please download MiniToolBox from here:

http://www.bleepingcomputer.com/download/minitoolbox/dl/65/

Transfer to sick PC save to desktop and run it.

Checkmark the following checkboxes:

• Flush DNS
• Report IE Proxy Settings
• Reset IE Proxy Settings
• Report FF Proxy Settings
• Reset FF Proxy Settings
• List content of Hosts
• List IP configuration
• List Winsock Entries
• List last 10 Event Viewer log
• List Installed Programs
• List Devices
• List Users, Partitions and Memory size.
• List Minidump Files
• List Restore Points
  

Click Go and post the result (Result.txt). A copy of Result.txt will be saved in the same directory the tool is run.
 
Note: When using "Reset FF Proxy Settings" option Firefox should be closed.
 

[JGamez]

Try the following and post its log if successful...

 

Please download MiniToolBox from here:

http://www.bleepingcomputer.com/download/minitoolbox/dl/65/

Transfer to sick PC save to desktop and run it.

Checkmark the following checkboxes:

 

• Flush DNS
• Report IE Proxy Settings
• Reset IE Proxy Settings
• Report FF Proxy Settings
• Reset FF Proxy Settings
• List content of Hosts
• List IP configuration
• List Winsock Entries
• List last 10 Event Viewer log
• List Installed Programs
• List Devices
• List Users, Partitions and Memory size.
• List Minidump Files
• List Restore Points

Click Go and post the result (Result.txt). A copy of Result.txt will be saved in the same directory the tool is run.

 

Note: When using "Reset FF Proxy Settings" option Firefox should be closed.

 

 

[kevinf80]

Select the Windows key and X Key together. From the produced list select::

Command Promt (Admin)

Accept UAC alert...

At the Command prompt, type

CHKDSK C: /R

hit the Enter key.

You will get a message that the drive cannot be locked, but that the command can be scheduled to run at the next boot - hit the Y key, press Enter, and then reboot.

The CHKDSK may take a few hours depending on the size of the drive, so be patient!

After the CHKDSK has run use the following instructions to find the log:

Check Disk report:

    Press the WindowsKey.png + R on your keyboard at the same time. Type eventvwr and click OK.
    In the left panel, expand Windows Logs and then click on Application.
    Now, on the right side, click on Filter Current Log.
    Under Event Sources, check only Wininit and click OK.
    Now you'll be presented with one or multiple Wininit logs.
    Click on an entry corresponding to the date and time of the disk check.
    On the top main menu, click Action > Copy > Copy Details as Text.
    Paste the contents into your next reply.

 

Next,

 

Now run SFC.

 

Select the Windows key and X Key together. From the produced list select::

Command Promt (Admin)

Accept UAC alert...

At the Command prompt, type

SFC /SCANNOW

hit the Enter key

Wait for the scan to finish - make a note of any error messages - and then reboot.


Copy the CBS.log file created (C:\Windows\Logs\CBS\CBS.log) to your desktop (you can't manipulate it directly) and then compress the copy and upload the zip file to your reply.

 

Let me know if any improvement after running those two tools...
 

[AdvancedSetup]

Due to the lack of feedback this topic is closed to prevent others from posting here. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.

Other members who need assistance please start your own topic in a new thread. Thanks!