Anti Ransom and eset smart security hang super slowdown

[ibm650]

I7 16GB, eset , roboform, firefox, vpn, after awhile system becomes non responsive, super slow, did not respond to ctrl-alt-delete.  had to do power off, repeated twice and I removed Anti Ransom 9 14 361.  Now OK

[1PW]

Hello ibm650 and

If no traces of the MBARW directories remain, then the logs are lost that may have provided some enlightenment. Upon restart, by ticking MBARW's "Exit", through the System Tray's icon while MBARW was still installed, the same goal would have been accomplished.

 

No previous reports have been received with the combination you reported. If you would consider repeating the Beta testing by doing a "MBARW Beta5 clean re-install", it would greatly be appreciated.

 

Thank you for participating in the MBARW Beta testing program and your feedback.

[ibm650]

Since I have a hung system, can you get the logs if I do an exit after restart.

[ibm650]

Also where are the logs so I can post them

[1PW]

Hello ibm650:

Please create the following archives for developer analysis:

Create a ZIP archive of the directory C:\ProgramData\Malwarebytes\Malwarebytes Anti-Ransomware\

Create another ZIP archive of the directory C:\ProgramData\Malwarebytes\MBAMService\logs\

Please attach the above zipped archives to your next reply.

Thank you.

[ibm650]

zipped fileslogs.zipMalwarebytes Anti-Ransomware.zip

[1PW]

Hello ibm650:

 

If MBARW Beta5 has been re-installed, has the system exhibited any of the slowness symptoms originally reported?

 

Thank you.
 

[ibm650]

Have not turned it on again, after 4 tries, I had to get some work done, do you want me to turn it on again?

[1PW]

Hello ibm650:

 

Only if you feel perfectly comfortable doing so. At the first hint of slowness, please open the OS's Task Manager and see if any particular task is using high resources. Then, if you need to MBARW can be exited followed by archiving the same directories as above.

 

Thank you.

 

RAMAC?

[ibm650]

As requested tried again, with clean install, was not doing much, I did note that no excessive data use or memory by malwarebytes anti ransom, about 20 Megs.  Then hung solid.

Hope 7z is ok

 

logs.7z

Malwarebytes Anti-Ransomware.7z

[Decrypterfixer]

So to be sure, you are still experiencing the system hangs or no?

[ibm650]

Yes, I enabled anti ransomware and several minutes later system hang.  Hope the info and logs help.

[Decrypterfixer]

Thanks ibm, we will look into this ASAP and see what's going on.

[Decrypterfixer]

Ibm, could you please uninstall MBARW completely and reinstall it from the latest link in the forums? This will try and number of things for me and ensure you are on the latest version.

[ibm650]

I am on Anti Ransom 9 14 361 , I have uninstalled and reinstalled 3 times, do you have a newer beta

 

[1PW]

Hello ibm650:

The latest build is MBARW Beta5 v0.9.14.361

Thank you.

[ibm650]

OK, uninstalled, deleted the anti ransom folder in Program Data, reinstalled

[ibm650]

Let me know what you want to try, I am on an older ESET if that matters.

[ibm650]

Just ran the Beta 6, this time it lasted several hours, went into severe slowdown, I was able eventually to check working set 23,000 same as usual, no cpu.  Everything was a wait symbol, eventually I was able to get into task manager and cancel, everything now ok with ransom off.  So I did not have to restart. 

logs.zip

Malwarebytes Anti-Ransomware.zip

[1PW]

Hello ibm650:

Some analysis shows that an over-the-top upgrade was performed on that W7SP1x64 system. If you are willing, the bottom-line result of a clean install may be what is required for that computer. The following is the clean install procedure that will also install MBARW Beta6 (v0.9.15.416):

If a conventional Windows restart to the Normal boot mode has/does not resolve(d) the reported issue, please consider a clean re-install of MBARW Beta:

1. Close all open Windows applications followed by a conventional Windows based uninstall of Malwarebytes Anti-Ransomware.
2. If MBARW Beta was uninstalled successfully, the following directories will have been deleted from a typical Windows 64-bit system:

C:\Program Files\Malwarebytes\
C:\ProgramData\Malwarebytes Anti-Ransomware\
C:\ProgramData\MBAMService\

3. If any of the above directories remain, please delete them manually. If necessary, any remaining/uninstalled directory may be deleted in the Windows Safe mode.
4. Execute a conventional Windows restart to the Normal Windows boot mode and log-in through an Administrator's account. <===IMPORTANT!
5. Using an Administrator's account only, download a fresh MBARW_Setup.exe file and save to the Administrator's Desktop from the MBARW Introduction topic.
6. Right-click the MBARW_Setup.exe file and left-click Run as administrator from the context menu.
7. Upon a successful installation, please restart the computer in a conventional manner to the Windows Normal boot mode.

Please reply to your topic with the status of your reported issue.

Thank you for beta testing MBARW and your valued feedback.