Update stuck, now froze

[mikmak007]

V2016.04.04.1 Tried to update, progress bar move about 3/4 way then stopped. Then msg said unable to update at this time. Waited a day. Same thing. Been this way for days. Fix it button and update button do nothing. Nothing works. Should I uninstall and start over?

[tried to attach pic six times but says error, but no reason]

[mikmak007]

Uninstalled, reinstalled, opened to same problem.

V2016.04.11.01, but update bar moves to 3/4 point and stops,

Run scan, and that first little green circle checking for updates has run for ten minutes but nothing happens.

[mikmak007]

Update ran for 30 minutes but never progresses. Cannot scan because it wants to update but does not continue.

[Firefox]

Hello and Welcome!

We would need more info on the system....

Please read the following and in your next reply ATTACH the 3 requested logs - Diagnostic Logs
(the three files should be CheckResults.txt, FRST.txt and Addition.txt)

Thank You,

Firefox

[mikmak007]

Many thanks. Have attached those files. Oops. Same problem with trying to attach snapshot: "There was a problem processing the uploaded file -200"

Will reboot, start over, and try to attach.

[mikmak007]

Trying to attach from second computer. No good. Keeps saying "there was a problem processing the uploaded file -200."

Tried attaching, dragging, two computers. No idea what's worng

[Porthos]

7 minutes ago, mikmak007 said:

No good. Keeps saying "there was a problem processing the uploaded file -200."

There are some forum issues right now.

[mikmak007]

I waited a few days, Upload files works now. My scan is stuck on updating for an hour. Won't progress.

Addition.txt

CheckResults.txt

FRST.txt

[mikmak007]

As seen, the update ran 3 hours with no progress.

[AdvancedSetup]

The system is having some issues according to the logs.

System errors:
=============
Error: (04/11/2016 10:59:58 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: The CryptoPrevent Event Service service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 0 milliseconds: Restart the service.

CodeIntegrity:
===================================
  Date: 2015-12-09 00:50:39.695
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume5\WINDOWS\System32\d3d10_1.dll because the set of per-page image hashes could not be found on the system.

I would suggest trying a full disk check. Please find the Command Prompt on your programs and run it with Admin rights and type in the following.

 

CHKDSK   C:  /R

Then it will say it cannot lock the drive. Press the Y key and the Enter key to tell it to run on restart. Then restart the computer and let it run. Then retry the scan and let us know if that helps or not.

 

 

[mikmak007]

Thanks. Did that last night. Today, no change. Update runs for hours but never gets anywhere.

 

 

[Porthos]

Try turning off the Norton firewall and just check for updates.

 

[mikmak007]

Will do. What's odd is I have a very stable laptop and never install new stuff. Nothing has changed for many many months, and I've updated MWbytes continually for ages with never a problem. This just happened. I was going to reboot to safemode /w networking, but would prefer to solve this in normal mode.

I did recently install MWbyte crypto prevent. Think that's related?

 

[Porthos]

1 hour ago, mikmak007 said:

I did recently install MWbyte crypto prevent. Think that's related?

Saw only this and its not from Malwarebytes.

 C:\Program Files (x86)\Foolish IT\CryptoPrevent\CryptoPrevent.exe [2015-11-17] (Foolish IT LLC)

Also programs like this can break things

iolo technologies' System Mechanic Professional

 

 

[mikmak007]

Ah, I missed that. Yes, cryptoprevent. I will either disable or uninstall and try again.

And my other computer is almost identical to this one, system mechanic, nortons, etc, and MWB updates perfectly.

I disabled Norton firewall, no change, but will look at crypto prevent. I can disable and reboot to try again.

[mikmak007]

Porthos: MANY THANKS...!

I whitelisted MWB in CryptoPrevent and it works perfectly now.

I NEVER would have figured it out....

 

 

 

[Porthos]

29 minutes ago, mikmak007 said:

Porthos: MANY THANKS...!

I whitelisted MWB in CryptoPrevent and it works perfectly now.

I NEVER would have figured it out....

 

 

 

Was a shot in the dark. I never install cryptoprevent software.(too many possible issues) I keep regular image backups on a UN ATTACHED external drive. Backups are the BEST defense.

 

Glad to be of assistance.

Edited April 14, 2016 by Porthos

[AdvancedSetup]

For a short while cryptoprevent was an excellent means to prevent some of these but now days I don't think any of the new ones are using those attack vectors anymore and they can look up the hashes being used and make changes to bypass so not as effective as it used to be.

 

[mikmak007]

25 minutes ago, Porthos said:

 I keep regular image backups on a UN ATTACHED external drive. Backups are the BEST defense.

My calendar pops up every sat eve reminding me to connect ext cable and image runs later.

 

[mikmak007]

My calendar pops up every sat eve reminding me to connect ext cable and image runs later.

[AdvancedSetup]

Sounds like a great plan. Might want to schedule an antivirus and anti-malware scan a few hours before or the previous day just to make sure. Though if you do have active live antivirus and MBAM running then very unlikely something got in and neither one caught it. But you may not be alerted by either program if all is setup to be silent. So a log check before any backups might be in order vs a potentially unneeded scan.