MBAM Scanner with Kaspersky KTS16 Conflict

[Stevie D]

I am running MBAM 2.2.1.1043 on my windows 7 Desktop along with Kaspersky KTS as my anti-virus. A few months back, I upgraded KTS from Pure 3.0 to the current version KTS16 and my computer started freezing overnight on a regular basis, causing me to do cold reboot in the morning. I rolled back to Pure 3.0 and problem went away. I figured, I would upgrade both in the future and the problem would be resolved someday. I tried to upgrade to KTS again last week to a slightly newer release and same problem. I read about someone else having a problem with the MBAM scanner and KTS, so I turned off my scheduled scan (which ran overnight, which should have been a clue) and since then, no crashes. I am still running MBAM real-time protection, so that is not an issue. Incidentally, I have run KTS16 on my laptop for awhile and it has never had a problem, but on that machine I am still on MBAM 1.75. The problem is the scanner for MBAM 2.2.1.1043 with KTS16.

Edited May 4, 2016 by Stevie D

[daledoc1]

Hello:

I run KIS (not KTS) and many folks also run Kaspersky products with MBAM Premium without issues.

My first hunch is that your having installed/reinstalled several different Kaspersky products (PURE and KTS) may have left behind drivers that could be causing subtle problems.

So, my first question: when you went from PURE to KTS and then back to PURE, did you perform CLEAN uninstall/installs, as suggested by the best practices at KL forum HERE?
If not, then that would be my first suggestion: properly uninstall PURE, perhaps using the kavremover tool (in Windows Safe Mode, if necessary) and rebooting, and then cleanly reinstall the current build of of KTS 2016.  When you're done with that, you may wish to set mutual exclusions between MBAM and KTS.

The screenshot below shows how to add the KL folder to MBAM Exclusions, and the MBAM files to add to KTS exclusions are listed below.

If that does not resolve your issue, then we'll need to see a bit more information about the system in order to better assist you.  I suggest that you please follow the advice in this pinned topic and then please ATTACH all 3 diagnostic logs to your next reply in this thread: Diagnostic Logs

Thank you,

 

P.S. Re: your other system -- support for version 1.75 will end soon.  Version 2.2.1 contains many performance, stability and security enhancements.  So I suggest upgrading that system to the current build soon.  The recommended steps are described here: MBAM Clean Removal Process 2x

-------------------------------

Please exclude the following files from your Antivirus Software for your version of Windows:

For 32-bit versions of Windows XP, Windows Vista, Windows 7 & Windows 8 & Windows 10:

• C:\Program Files\Malwarebytes Anti-Malware\mbam.exe
• C:\Program Files\Malwarebytes Anti-Malware\mbamdor.exe
• C:\Program Files\Malwarebytes Anti-Malware\mbampt.exe
• C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe
• C:\Program Files\Malwarebytes Anti-Malware\mbamresearch.exe
• C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe

 
For 64-bit versions of Windows Vista, Windows 7 & Windows 8 & Windows 10:

• C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
• C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamdor.exe
• C:\Program Files (x86)\Malwarebytes Anti-Malware\mbampt.exe
• C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamresearch.exe
• C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
• C:\Program Files (x86)\Malwarebytes Anti-Malware \mbamscheduler.exe

Note: If you are using a software firewall besides the built in Windows Firewall, you'll need to exclude MBAM.EXE, MBAMSERVICE.EXE and MBAMRESEARCH.EXE from it, as well.
 
Note: Once that's done, please make sure that if either of those programs has any sort of web filter, that you add the following as a trusted site:

data-cdn.mbamupdates.com

 

[Stevie D]

Thanks Dale...I had some of the exclusions in KTS, but not all...I guess the newer MBAM has some different architectures. I ran a scan and it seemed to work. I will schedule one for overnight and report back.

[daledoc1]

OK, sounds good.  Let us know how it goes.

Thanks,

P.S. Are you running frequent "full", custom scans of the entire system (all drives/volumes), by any chance?  If so, that's neither necessary nor recommended, under most conditions.  First, a daily Threat scan suffices for most users under most conditions (especially for users with MBAM Premium's real-time protection).  Moreover, a full system scan is a task better suited to your AV, but even then doing so often could cause excessive wear and tear on your hard drive. <just a friendly suggestion>

[Stevie D]

Dale...I am trying to run a Threat Scan. While my PC did not crash last night, it didn't run the scan either as I see no scan log in history. Checking back a few weeks though, it seems my scan has not been running consistently every day for awhile... for example, it ran on 4/21, then 4/25, then 4/26, 4/29, then I shut it off for a few days due to the crashing. It does show the manual scan I did yesterday as a test. Protection logs show up for every day.

Dashboard right now says next scheduled scan is 5/7 at 2:08 AM, even though I scheduled it for 2:00 AM.

[daledoc1]

Hi:

A couple of things:

First, can you please clarify what you mean about the PC "crashing"?  I may have misunderstood that your problem was with MBAM crashing or not completing a scan, not a problem with the entire PC crashing.  Are you talking about a BSOD (Blue Screen of Death)? That's an entirely different problem...

Next: please check to be sure that your system date and time are correct.

Next, scans do not run when the computer is turned off or sleeping/hibernating.  Depending on how the scan task is configured in the automated scheduler, MBAM may or may not "make up" a scan that was missed because the computer was turned off when a scan was scheduled to run.  So, it may be "normal" for MBAM to miss a scan, if the computer was turned off at the time it was supposed to have run.

Finally, there is an "Advanced" setting in the scheduler to "check for updates before scanning".  If that setting is enabled, the scan will run at a random time +/- 15 minutes of the scheduled time (that's because scheduled update checks are randomized to +/- 15 minutes of the scheduled time, to balance server load).  If you want your scheduled scan to run at the exact time for which you have it scheduled, please disable (un-check/un-tick) the setting for "check for updates before scanning".

If all of that does not explain or resolve your issue, then it would help to have a bit more information about the system in order to better assist you. 
Please follow the steps in this pinned topic and then please ATTACH all 3 diagnostic logs to your next reply here in this thread:  Diagnostic Logs.
The 3 logs are FRST.txt, Addition.txt and CheckResults.txt. 

Thanks,

[Stevie D]

Dale,

 

When I say crashing...when I come to my PC in the morning, I expect to shake the mouse and wake up the PC from the screensaver. When this conflict occurs, I shake the mouse and nothing happens...the screen stays black. It is technically not a BSOD, but I can't say for sure what happens as I am asleep at that time.

My PC is not asleep or hibernating, otherwise the scans would never run...they are running most of the time, but not all the time. I never turn that machine off at night. The time settings are correct always.

I will post the diagnostics later today.

 

Thanks for the help.

 

[Stevie D]

Dale,

 

I added a new scan entry and deselected "check for updates before scan". The scan ran at exactly 2AM and did not cause any issues. I am going to let it run for a week or two. If there are no freezes and it runs all the scans, then the exclusions fixed the problem. If it misses a few scans, I can live with it, as it may be overkill to run every day anyway as you mentioned. If the scans are not running, I will post the diagnostics.

 

Thanks for the help!

[daledoc1]

Thanks for the update.

You say that you "added" a new scan entry -- just to clarify: did you remove/delete the previous scan task? (One only needs 1 scheduled scan task.  If you leave both scan tasks in the scheduler, especially with nearly/possibly overlapping start times, that could cause a glitch.)

Yes, the diagnostic logs would help to discern what's going on and (in most cases) a prompt solution. Otherwise, we can only speculate.
But if you are satisfied with how things are working, then that's fine.

Thanks for taking the time to report your results.

Cheers,

[Stevie D]

1 minute ago, daledoc1 said:

Thanks for the update.

You say that you "added" a new scan entry -- just to clarify: did you remove/delete the previous scan task? (One only needs 1 scheduled scan task.  If you leave both scan tasks in the scheduler, especially with nearly/possibly overlapping start times, that could cause a glitch.)

Yes, the diagnostic logs would help to discern what's going on and (in most cases) a prompt solution. Otherwise, we can only speculate.
But if you are satisfied with how things are working, then that's fine.

Thanks for taking the time to report your results.

Cheers,

yes...deleted the old one.

[Stevie D]

Daledoc,

 

Thanks again for all your help...quick question...I added all the files you mentioned in KTS as TRUSTED APPLICATIONS. Do I also need to add them under Manage Exclusions? Could it cause issues if they are listed as both? Also, do I need to add anything for MBAE Free?

 

Thanks

[Stevie D]

Anybody have a recommendation for this question:

 

I added all the files you mentioned in KTS as TRUSTED APPLICATIONS. Do I also need to add them under Manage Exclusions? Could it cause issues if they are listed as both? Also, do I need to add anything for MBAE Free?

[daledoc1]

Hi:

Exclusions and Trusted Applications are different ways to skin the same cat (see attached screen shot from KIS).

Personally, I manage this via Trusted Applications, and do not have anything in Exclusions.
KTS is probably already doing the right thing -- just go into the settings and verify that MBAM and MBAE are already assigned to "Trusted".
More info for KTS "Trusted Applications" HERE and "Exclusions" HERE (these are for KTS2015, but they should be similar for KTS2016, as I don't find updated articles for 2016).

>>MBAM and MBAE would probably work just fine alongside KTS *without* setting exclusions.  Some users like to be a bit proactive and set them anyway.
>>If everything is working OK, then there's no need to obsess or to lose any sleep over this. 

Cheers,

[Stevie D]

Thanks Dale...BTW, I still am having issues on my system, but it is not MBAM conflicting with KTS...I am almost sure it is my Seagate backup software.

[daledoc1]

Hi:

If you're having PC issues unrelated to MBAM, then I suggest posting in the PC Help section of the forum, including a set of Diagnostic Logs with that new post.

Alternatives might be a more general computer forum, such as bleepingcomputer, or the Seagate Support options.

{{FWIW the proprietary software that comes with USB external hard drives is superfluous and often problematic.  Better alternatives for backup applications include: the native Windows backup utility itself; robust 3rd-party utilities, such as Macrium; or any of the many alternatives listed in @AdvancedSetup's excellent sticky topic HERE.}}

Cheers,