MBAM service failure

[Daleus]

Here is DDS.txt:

DDS (Ver_09-05-14.01) - NTFSx86

Run by Dpoole at 8:11:59.48 on Wed 06/17/2009

Internet Explorer: 7.0.5730.13 BrowserJavaVersion: 1.6.0_05

Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.2038.1391 [GMT -3:00]

FW: Trend Micro OfficeScan Enterprise Client Firewall *disabled* {5A5F55B4-5CAA-48D0-BFFA-B21D837A137B}

============== Running Processes ===============

C:\WINDOWS\system32\svchost -k DcomLaunch

svchost.exe

C:\Program Files\Windows Defender\MsMpEng.exe

C:\WINDOWS\System32\svchost.exe -k netsvcs

svchost.exe

C:\WINDOWS\System32\svchost.exe -k eapsvcs

svchost.exe

C:\WINDOWS\System32\svchost.exe -k dot3svc

C:\WINDOWS\system32\spoolsv.exe

C:\Program Files\APC\APC PowerChute Personal Edition\mainserv.exe

C:\WINDOWS\system32\cisvc.exe

C:\WINDOWS\LogWatNT.exe

C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe

C:\Program Files\Novell\ZENworks\nalntsrv.exe

C:\WINDOWS\system32\svchost.exe -k imgsvc

C:\WINDOWS\system32\MsPMSPSv.exe

C:\Program Files\Novell\ZENworks\wm.exe

C:\Program Files\Novell\ZENworks\WMRUNDLL.EXE

C:\Program Files\Novell\Zenworks\NALDESK.EXE

C:\WINDOWS\Explorer.EXE

C:\WINDOWS\system32\dpmw32.exe

C:\WINDOWS\system32\NWTRAY.EXE

C:\Program Files\Windows Defender\MSASCui.exe

C:\WINDOWS\system32\iprntlgn.exe

C:\Program Files\Analog Devices\Core\smax4pnp.exe

C:\Program Files\Microsoft ActiveSync\wcescomm.exe

C:\WINDOWS\system32\ctfmon.exe

C:\Program Files\John's Background Switcher\BackgroundSwitcher.exe

C:\PROGRA~1\MICROS~3\rapimgr.exe

C:\Program Files\Mmm\Mmm.exe

C:\Program Files\FileBX\FileBX.exe

C:\Program Files\Karen's Power Tools\Replicator\PTReplicator.exe

D:\Tempest\Portable Apps\MouseActivate.exe

D:\Tempest\_Tools\Misc\SmartTab.exe

D:\Tempest\_Tools\tclock2_120\tclock2.exe

C:\Program Files\APC\APC PowerChute Personal Edition\apcsystray.exe

C:\Program Files\Mozilla Firefox\firefox.exe

C:\Novell\GroupWise\grpwise.exe

C:\GroupWise\Messenger\NMCL32.exe

C:\Program Files\PSMenu\psmenu.exe

C:\Novell\GroupWise\GWSync.exe

C:\WINDOWS\system32\cidaemon.exe

C:\Program Files\Trend Micro\OfficeScan Client\Misc\xpupg.exe

C:\Program Files\Trend Micro\OfficeScan Client\pccntupd.exe

C:\WINDOWS\system32\wscntfy.exe

C:\Documents and Settings\default\Desktop\dds.scr

============== Pseudo HJT Report ===============

uStart Page = about:blank

uInternet Connection Wizard,ShellNext = hxxp://www1.ca.dell.com/content/default.aspx?c=ca&l=en&s=gen

BHO: AutorunsDisabled - No File

BHO: RealPlayer Download and Record Plugin for Internet Explorer: {3049c3e9-b461-4bc5-8870-4c09146192ca} - c:\program files\real\realplayer\rpbrowserrecordplugin.dll

BHO: SSVHelper Class: {761497bb-d6f0-462c-b6eb-d4daf1d92d43} - c:\program files\java\jre1.6.0_05\bin\ssv.dll

uRun: [H/PC Connection Agent] "c:\program files\microsoft activesync\wcescomm.exe"

uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe

uRun: [backgroundSwitcher] c:\program files\john's background switcher\BackgroundSwitcher.exe

uRun: [Mmm] "c:\program files\mmm\Mmm.exe"

mRun: [NDPS] c:\windows\system32\dpmw32.exe

mRun: [NWTRAY] NWTRAY.EXE

mRun: [OfficeScanNT Monitor] "c:\program files\trend micro\officescan client\pccntmon.exe" -HideWindow

mRun: [Windows Defender] "c:\program files\windows defender\MSASCui.exe" -hide

mRun: [iPrint Event Monitor] c:\windows\system32\iprntlgn.exe

mRun: [soundMAXPnP] c:\program files\analog devices\core\smax4pnp.exe

mRun: [Malwarebytes' Anti-Malware] "c:\program files\malwarebytes' anti-malware\mbamgui.exe" /starttray

dRunOnce: [RunNarrator] Narrator.exe

StartupFolder: c:\docume~1\default\startm~1\programs\startup\karen'~1.lnk - c:\program files\karen's power tools\replicator\PTReplicator.exe

StartupFolder: c:\docume~1\default\startm~1\programs\startup\mousea~1.lnk - d:\tempest\portable apps\MouseActivate.exe

StartupFolder: c:\docume~1\default\startm~1\programs\startup\smarttab.lnk - d:\tempest\_tools\misc\SmartTab.exe

StartupFolder: c:\docume~1\default\startm~1\programs\startup\tclock2.lnk - d:\tempest\_tools\tclock2_120\tclock2.exe

StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\apcups~1.lnk - c:\program files\apc\apc powerchute personal edition\Display.exe

StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\filebo~1.lnk - c:\program files\filebx\FileBX.exe

uPolicies-explorer: NoViewOnDrive = 0 (0x0)

uPolicies-explorer: NoActiveDesktop = 00000000

mPolicies-system: CompatibleRUPSecurity = 1 (0x1)

IE: Open with WordPerfect - c:\program files\wordperfect office x3\programs\WPLauncher.hta

IE: Web Capture - c:\program files\smarthru office\WebCapture.dll

IE: {3C3171BC-1025-43d1-8D1D-61CF4B38A28F} - c:\novell\messen~1\NMCL32.exe

IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe

IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe

IE: {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - {CAFEEFAC-0016-0000-0005-ABCDEFFEDCBC} - c:\program files\java\jre1.6.0_05\bin\ssv.dll

IE: {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - {2EAF5BB0-070F-11D3-9307-00C04FAE2D4F} - c:\progra~1\micros~3\INetRepl.dll

IE: {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - {2EAF5BB0-070F-11D3-9307-00C04FAE2D4F} - c:\progra~1\micros~3\INetRepl.dll

IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\mi1933~1\office11\REFIEBAR.DLL

IE: {C1994287-422F-47aa-8E5E-6323E210A125} - {4B5F7606-8666-4D5A-9780-DB92A9D8812B} - c:\program files\novell\zenworks\AxNalServer.dll

DPF: {01A88BB1-1174-41EC-ACCB-963509EAE56B} - hxxp://support.dell.com/systemprofiler/SysPro.CAB

DPF: {15B782AF-55D8-11D1-B477-006097098764} - hxxp://www.kccsoft.com/authorware_web_files/awswaxd.cab

DPF: {17492023-C23A-453E-A040-C7C580BBF700} - hxxp://download.microsoft.com/download/8/b/d/8bd77752-5704-4d68-a152-f7252adaa4f2/LegitCheckControl.cab

DPF: {4EFA317A-8569-4788-B175-5BAF9731A549} - hxxp://www.vistatestdrive.com/ActiveX/VMRCActiveXClient1.cab

DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} - hxxp://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1142950463906

DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} - hxxp://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1142950504500

DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_05-windows-i586.cab

DPF: {CAFEEFAC-0015-0000-0006-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0_06-windows-i586.cab

DPF: {CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_03-windows-i586.cab

DPF: {CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_05-windows-i586.cab

DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_05-windows-i586.cab

DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab

TCP: {AA8E821F-8B1F-41DD-B984-A02A84725ABF} = 137.149.3.1,137.149.3.2

TCP: {F36F0F3A-3BCB-40E6-8209-10EE807C99FD} = 137.149.3.1,137.149.3.2

Handler: nim - {3D206AE2-3039-413B-B748-3ACC562EC22A} - c:\novell\messenger\nmcg32.dll

Notify: AtiExtEvent - Ati2evxx.dll

Notify: igfxcui - igfxdev.dll

SEH: Microsoft AntiMalware ShellExecuteHook: {091eb208-39dd-417d-a5dd-7e2c2d8fb9cb} - c:\progra~1\window~4\MpShHook.dll

SEH: {b4870b70-f390-11d2-9fb9-f4ed725ea20d} - c:\program files\novell\zenworks\NalExpEx.dll

LSA: Authentication Packages = msv1_0 nwv1_0

================= FIREFOX ===================

FF - ProfilePath - c:\docume~1\default\applic~1\mozilla\firefox\profiles\hhvft8i2.default\

FF - prefs.js: browser.search.selectedEngine - Google

FF - prefs.js: browser.startup.homepage - hxxp://snares.cs.upei.ca/cscentral/tracker|http://snares.cs.upei.ca/rt3

FF - plugin: c:\documents and settings\default\local settings\application data\google\update\1.2.145.5\npGoogleOneClick8.dll

FF - plugin: c:\program files\mozilla firefox\plugins\npnipp.dll

FF - plugin: c:\program files\mozilla firefox\plugins\nppsynth.dll

FF - plugin: c:\windows\system32\photosynth\nppsynth.dll

============= SERVICES / DRIVERS ===============

R1 nipplpt2;Novell iCapture Lpt Redirector 2;c:\windows\system32\drivers\nipplpt.sys [2007-11-29 34671]

R1 pfmfs_178;pfmfs_178;c:\windows\system32\drivers\pfmfs_178.sys [2008-7-31 144856]

R2 LogWatch;Event Log Watch;c:\windows\LogWatNT.exe [2000-6-8 50176]

R2 TmPreFilter;Trend Micro PreFilter;c:\program files\trend micro\officescan client\tmpreflt.sys [2005-11-9 36368]

R2 WinDefend;Windows Defender;c:\program files\windows defender\MsMpEng.exe [2006-11-3 13592]

R3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [2008-9-3 19096]

S2 MBAMService;MBAMService;c:\program files\malwarebytes' anti-malware\mbamservice.exe [2008-9-3 194832]

S2 OfcPfwSvc;OfficeScanNT Personal Firewall;c:\program files\trend micro\officescan client\OfcPfwSvc.exe [2005-11-17 233552]

S2 SSPORT;SSPORT;\??\c:\windows\system32\drivers\ssport.sys --> c:\windows\system32\drivers\SSPORT.sys [?]

S2 TmFilter;Trend Micro Filter;c:\program files\trend micro\officescan client\tmxpflt.sys [2005-11-9 225296]

S2 USBDLM;USBDLM;c:\tempest\_tools\usb tools\drive letter manager\usbdlm.exe --> c:\tempest\_tools\usb tools\drive letter manager\USBDLM.exe [?]

S3 cpuz129;cpuz129;\??\c:\program files\pc wizard 2008\pcwiz32.sys --> c:\program files\pc wizard 2008\pcwiz32.sys [?]

S3 Ingres_Database_II;Ingres Intelligent Database [iI];"c:\ingresii\ingres\bin\servproc.exe" --> c:\ingresii\ingres\bin\servproc.exe [?]

S3 MRV6X32U;Vista 32-bits Native WiFi Driver - USB;c:\windows\system32\drivers\MRVW23B.sys [2007-11-7 231040]

S3 MRVW225;802.11g/b Wireless LAN Dirver for Windows XP;c:\windows\system32\drivers\MRVW225.sys [2007-11-7 299904]

S3 NPF;Netgroup Packet Filter;c:\windows\system32\drivers\npf.sys --> c:\windows\system32\drivers\npf.sys [?]

S3 nscmnt;Novell Local Security Context Manager;c:\windows\system32\drivers\novell\nscmnt.sys [2004-3-3 25616]

S3 SSDefrag;SSDefrag;c:\windows\system32\drivers\SSDefrag.sys [2007-10-31 37888]

S3 xauthnt;Novell XTier Authentication Service;c:\windows\system32\drivers\novell\xauthnt.sys [2004-3-24 11640]

S4 FileObjInfo;STFileDriver;\??\c:\tempest\_0_downloads\fileobjinfo.sys --> c:\tempest\_0_downloads\FileObjInfo.sys [?]

S4 FirebirdServerMAGIXInstance;Firebird Server - MAGIX Instance;c:\magix\common\database\bin\fbserver.exe --> c:\magix\common\database\bin\fbserver.exe [?]

S4 UltraMonMirror;UltraMonMirror;c:\windows\system32\drivers\ultramonmirror.sys --> c:\windows\system32\drivers\UltraMonMirror.sys [?]

=============== Created Last 30 ================

2009-06-05 13:17 <DIR> --d----- c:\program files\Device Remover

2009-06-05 13:14 <DIR> --d----- c:\program files\DrWindows

2009-06-05 11:09 <DIR> --d----- c:\program files\nLite

2009-06-05 10:32 <DIR> --d----- c:\program files\Free PDF to Word Converter

2009-05-20 09:10 <DIR> --d----- c:\documents and settings\default\.storybook

==================== Find3M ====================

2009-05-26 13:20 40,160 a------- c:\windows\system32\drivers\mbamswissarmy.sys

2009-05-26 13:19 19,096 a------- c:\windows\system32\drivers\mbam.sys

2009-05-12 13:03 441,760 a------- c:\windows\system32\drivers\timntr.sys

2009-05-12 13:03 44,384 a------- c:\windows\system32\drivers\tifsfilt.sys

2009-05-12 13:03 132,224 a------- c:\windows\system32\drivers\snapman.sys

2009-05-12 13:03 368,480 a------- c:\windows\system32\drivers\tdrpman.sys

2009-05-07 12:32 345,600 a------- c:\windows\system32\localspl.dll

2009-05-07 12:32 345,600 -------- c:\windows\system32\dllcache\localspl.dll

2009-04-29 01:56 827,392 a------- c:\windows\system32\wininet.dll

2009-04-29 01:56 827,392 -------- c:\windows\system32\dllcache\wininet.dll

2009-04-29 01:56 233,472 -------- c:\windows\system32\dllcache\webcheck.dll

2009-04-29 01:56 1,159,680 -------- c:\windows\system32\dllcache\urlmon.dll

2009-04-29 01:56 671,232 -------- c:\windows\system32\dllcache\mstime.dll

2009-04-29 01:56 105,984 -------- c:\windows\system32\dllcache\url.dll

2009-04-29 01:56 102,912 -------- c:\windows\system32\dllcache\occache.dll

2009-04-29 01:56 44,544 -------- c:\windows\system32\dllcache\pngfilt.dll

2009-04-29 01:56 3,596,288 -------- c:\windows\system32\dllcache\mshtml.dll

2009-04-29 01:56 477,696 -------- c:\windows\system32\dllcache\mshtmled.dll

2009-04-29 01:56 193,024 -------- c:\windows\system32\dllcache\msrating.dll

2009-04-28 06:05 70,656 -------- c:\windows\system32\dllcache\ie4uinit.exe

2009-04-28 06:05 13,824 -------- c:\windows\system32\dllcache\ieudinit.exe

2009-04-25 02:27 636,088 -------- c:\windows\system32\dllcache\iexplore.exe

2009-04-25 02:26 161,792 -------- c:\windows\system32\dllcache\ieakui.dll

2009-04-17 09:26 1,847,168 a------- c:\windows\system32\win32k.sys

2009-04-17 09:26 1,847,168 -------- c:\windows\system32\dllcache\win32k.sys

2009-04-15 11:51 585,216 a------- c:\windows\system32\rpcrt4.dll

2009-04-15 11:51 585,216 -------- c:\windows\system32\dllcache\rpcrt4.dll

2009-03-21 11:06 989,696 -------- c:\windows\system32\dllcache\kernel32.dll

2008-07-31 15:08 2,516 a--sh--- c:\docume~1\alluse~1\applic~1\KGyGaAvL.sys

2008-02-25 14:03 88 ---shr-- c:\docume~1\alluse~1\applic~1\9E0816180F.sys

2004-10-01 16:00 40,960 a------- c:\program files\Uninstall_CDS.exe

2008-02-22 12:10 88 ---shr-- c:\windows\system32\9E0816180F.sys

2008-02-22 12:17 2,516 a--sh--- c:\windows\system32\KGyGaAvL.sys

2008-12-23 16:19 32,768 a--sh--- c:\windows\system32\config\systemprofile\local settings\history\history.ie5\mshist012008122320081224\index.dat

============= FINISH: 8:12:38.35 ===============

Thanks

Attach.zip

Attach.zip

[AdvancedSetup]

My guess is that Trend is blocking MBAM. Let's do a little cleanup first and then we'll see about making it work with MBAM.

STEP 01

These programs are old and have exploited code. You should remove them and get the latest versions if you want or need them.

Adobe Flash Player 9 ActiveX

Macromedia Shockwave Player

Not really sure what SAS 9.1 is but it's using an old exploited version of Java. Will it work with the newer version?

SAS 9.1

SAS Private JRE (J2SE™ Java Runtime Environment 1.4.1)

STEP 02

These version of Java are old and exploited and need to be removed from the system.

Please go into the Control Panel, Add/Remove and for now remove ALL versions of JAVA

J2SE Runtime Environment 5.0 Update 6

Java™ 6 Update 3

Java™ 6 Update 5

Then run this tool to help cleanup any left over Java

Your Java is out of date. Older versions have vulnerabilities that malware can use to infect your system.

Please download JavaRa and unzip it to your desktop.

***Please close any instances of Internet Explorer (or other web browser) before continuing!***

• Double-click on JavaRa.exe to start the program.
  
• From the drop-down menu, choose English and click on Select.
  
• JavaRa will open; click on Remove Older Versions to remove the older versions of Java installed on your computer.
  
• Click Yes when prompted. When JavaRa is done, a notice will appear that a logfile has been produced. Click OK.
  
• A logfile will pop up. Please save it to a convenient location and post it back when you reply
  Then look for the following Java folders and if found delete them.
  C:\Program Files\Java
  C:\Program Files\Common Files\Java
  C:\Windows\Sun
  C:\Documents and Settings\All Users\Application Data\Java
  C:\Documents and Settings\All Users\Application Data\Sun\Java
  C:\Documents and Settings\username\Application Data\Java
  C:\Documents and Settings\username\Application Data\Sun\Java
  

STEP 03

Download and install CCleaner
• CCleaner
  
• Double-click on the downloaded file "ccsetup220_slim.exe" and install the application.
  
• Keep the default installation folder "C:\Program Files\CCleaner"
  
• Click finish when done and close ALL PROGRAMS
  
• Start the CCleaner program.
  
• Click on Registry and Uncheck Registry Integrity so that it does not run (basically the very top, uncheck it)
  
• Click on Options - Advanced and Uncheck "Only delete files in Windows Temp folders older than 48 hours"
  
• Click back to Cleaner and under SYSTEM uncheck the Memory Dumps and Windows Log Files
  
• Click on Run Cleaner button on the bottom right side of the program.
  
• Click OK to any prompts
  

STEP 04

1. Uninstall Malwarebytes' Anti-Malware using Add/Remove programs in the control panel.

2. Restart your computer (very important).

3. Download and run this utility. http://www.malwarebytes.org/mbam-clean.exe

4. It will ask to restart your computer (please allow it to).

5. After the computer restarts, download but DO NOT install the latest version (1.38) from here. http://www.malwarebytes.org/mbam-download.php

Note: You will need to reactivate the program using the license you were sent (if you do not have this information let me know)

STEP 05

Please review this post and adapt it to your version of Trend Anti-Virus so that it does not block MBAM.

http://www.malwarebytes.org/forums/index.php?showtopic=17605

STEP 06

Once you have setup Trend Office to not block MBAM now try to register the program and get updates, then enable the protectio module.

STEP 07

Download and Update Java Runtime

The most current version of Sun Java is: Java Runtime Environment (JRE) 6 Update 14.

• Go to http://java.sun.com/javase/downloads/index.jsp
• Go to Java Runtime Environment (JRE) 6 Update 14 about half way down the page and click on the Download button.
  
• In Platform box choose Windows.
  
• Check the box to Accept License Agreement and click Continue.
  
• Click on Windows Offline Installation, click on the link under it which says jre-6u14-windows-i586.exe and save the downloaded file to your desktop.
  
• Install the new version by running the newly-downloaded file with the java icon which will be on your desktop, and follow the on-screen instructions.
  
• Uncheck the Toolbar button (unless you want the toolbar)
  
• Reboot your computer
  

[AdvancedSetup]

Hi Dale,

Please post an update. Thanks.

[Daleus]

Hi Dale,

Please post an update. Thanks.

Ron it's going to take me several days to cleanup all this stuff, stuff that is outdated for a reason. There are a lot of legacy apps in use here on campus, so it will take significant time to track all the dependancies.

I have done thorough scans for virii and malware including with yours and other products, and have come up clean.

I was hoping I could get a simple answer to the errorcode. The product was working fine with Trend in place for a couple of weeks before this error cropped up.

Cheers for now!

[Daleus]

My guess is that Trend is blocking MBAM.

> Not likely, but I'll follow along

STEP 01

These programs are old and have exploited code.

> Removed, not reinstalled

Not really sure what SAS 9.1

>Stats package that uses a "private"version of Java, so updating the main version will do nothing to this one. Removed and not reinstalled.

STEP 02

These version of Java are old and exploited

> Removed and not reinstalled.

Then run this tool to help cleanup any left over Java

> Run. Cleaned. There was no logfile popup.

Then look for the following Java folders

> Done.

STEP 03

• Download and install CCleaner

> Done

STEP 04

> Removed per your reinstuctions. Reinstalled per your instructions.

STEP 05

Please review this post and adapt it to your version of Trend Anti-Virus so that it does not block MBAM.

> Not the version we are using. We are using the Enterprise version without the firewall.

> Nothing to do.

STEP 06

Once you have setup Trend Office to not block MBAM now try to register the program and get updates, then enable the protectio module.

> Done. Almost immediately threw an error, posted below.

STEP 07

> I have not reinstalled Java in any form and will not do so, unless instructed to.

Here is the error thrown by this iteration of MBAM, directly from the Application Event Log:

Event Type: Error

Event Source: MBAMService

Event Category: None

Event ID: 1

Date: 6/18/2009

Time: 2:32:15 PM

User: N/A

Computer: SID12821

Description:

The description for Event ID ( 1 ) in Source ( MBAMService ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: MBAMService, mbamservice.exe: CreateFile failed with error code 5.

Thanks Ron.

(BTW, the boss said screw the legacy apps, deal withit later, so here I is)

[Daleus]

Darn that I can't edit a posting.

Ron I also wan't to point out that MBAM, even after this error first occured, has always been able to run when scheduled for a scan, and get the latest updates without any intervention from me.

It also updated the program version either yesterday afternoon or this morning without prompting. (If this is any help)

[AdvancedSetup]

Sent you a new Private Message. Please run that and get back to me.

[AdvancedSetup]

Just checking up. So are you okay now or still having issues ?

[Daleus]

Sent you a new Private Message. Please run that and get back to me.

Sorry I never got this message, either here on the forum or in my mailbox.

[AdvancedSetup]

Okay sorry about that then. Just so we're back up to speed please let me know the current status.

same error starting MBAM?

[AdvancedSetup]

Please post a status update.

Thanks.

[Daleus]

Okay sorry about that then. Just so we're back up to speed please let me know the current status.

same error starting MBAM?

Yes Ron. Sorry for the slow response, I am out and about most of the day and don't always remember to check here everyday.

[AdvancedSetup]

Okay, hopefully I will have a new debug test version you can try. I'll post back if I can get it.

[AdvancedSetup]

Okay, I do have a test debug version you can try if you like, but hopefully by Tuesday or Wednesday we may be able to have a non debug version for you.

[AdvancedSetup]

Not sure but maybe you've gone on vacation. I'll close the post and if you still need help please send me either a PM or an email and we take this back up again.