Jump to content

Scan locks up


Recommended Posts

  • Replies 75
  • Created
  • Last Reply

Top Posters In This Topic

Top Posters In This Topic

Posted Images

  • Staff

Thank you for the logs.  As per our conversation via PM, you also have an issue with malware protection stuck on 'starting...'

I'll need to gather more information regarding what's running on this machine to check for possible conflicts. This next scanner will not make any changes to your machine on its own, nor will it divulge any personal information that may compromise your security.

  Please download Farbar Recovery Scan Tool from here http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/ and save it to your desktop.

Note: You need to run the version compatible with your system

  **After you click the Download Now 64-bit, or the Download Now 32-bit, another page will open -- DO NOT CLICK ANY ADDITIONAL 'download now' buttons, just wait and look toward the bottom of your browser for the option to Run or Save. Click Save.

•Double-click to run it. When the tool opens click Yes to the disclaimer.

Note: If you are prompted by Windows SmartScreen, click More info followed by Run anyway.

•Click the Scan button.

•When the scan has finished, it will make produce 2 logs in the same directory the tool was run from. Please attach the following logs to your next reply:

FRST.txt

Addition.txt.

Link to post
Share on other sites

  • Staff
36 minutes ago, TOH said:

The two files you requested are attached.

What do you want me to do next?

FRST.txt

Addition.txt

Hello TOH!

We would like you to:

  1. Enable Event Log Data under Application Settings.
  2. Run a threat scan.
  3. See if you reproduce the scan hang.

Then please attach the MBAMSERVICE.log and any MBAMSERIVCE.log.bk files that are in the folder: C:\ProgramData\Malwarebytes\MBAMService\logs

This will give us more detailed logging about what is happening during the scan.

Link to post
Share on other sites

  • Staff

TOH,

Thank you for the logs!  We want to see if anything is crashing silently during your scan.  Can you please do the following:

  1. Run the attached file "SetupLocalAndFullMemoryDump.reg".
  2. Run a threat scan to reproduce the issue.
  3. After the scan hangs (and maybe wait 10 or so minutes to be sure), check the folder: C:\LocalDumps

If something crashed during the scan silently, that folder should be created automatically by Windows and will have a memory dump file.  If it exists, please send it our way. :)

SetupLocalAndFullMemoryDump.zip

Link to post
Share on other sites

  • Staff

TOH,

Thanks for following up.

  • Did you have any MBAM versions installed previously?
  • What versions were they?
  • Did you uninstall them or install MBAM 3.0 over the previous version?

It sounds like your installation of MBAM has issues and before we try to get a work around to fix the issue, I want to know how your installation of MBAM got like this in the first place.  Any hints would be appreciated in knowing the past history of what you did regarding installing, uninstalling, or upgrading MBAM.

Link to post
Share on other sites

I have been using MBAM since 12/1/10  without any problems and upgraded from version 2 to version 3.0 on 12/13/16.

I installed MBAM 3.0 over the previous version on 12/13/16 and tried to do a threat scan 4 times and it kept locking up , each time on a different AOL file  as indicated in my original post above back on Tuesday, Dec 13th.

Link to post
Share on other sites

Jekko,
 
FYI, Lisa was helping me in the forum last week and she suggested that I exclude the AOL folders that were causing the six threat scans to stop. I did that and was able to get a completed threat scan to finish in 8 minutes after excluding AOL & AOL Download folders and it found 2 PUP threats which were quarantined.
 
I was concerned that version 3.0  was then not scanning those two AOL folders which contain hundreds if not thousands of files.
I sent her the five files that she requested.

AEConfig.json.
mbae-default.log
MBAMService.log
frst.txt
addition.txt

 
Thanks,

TOH
Link to post
Share on other sites

  • Staff

TOH,

Thank you for being so responsive.  We really want to figure out what happened with your MBAM 3.0 installation. Could you do the following?

  1. Reboot the system (if you haven't done so already).
  2. Open MBAM and enable Event Log Data under Application Settings.
  3. Download the following tool procmon.exe: https://download.sysinternals.com/files/ProcessMonitor.zip
  4. Run procmon.exe.
  5. Start a threat scan.
  6. Let the scan hang (or stop).
  7. Stop the capture in procmon.
    StopProcmon.png
  8. Save the procmon capture.
  9. Attach the mbamservice.log and procmon log here.
Link to post
Share on other sites

  • Staff

@TOH,

Thanks for the logs!  I took a look and it looks like MBAM is having trouble loading both the database and your computer's registry hives.  I've forwarded the logs to our developers and we will see what else we need to collect from your system.

Thank you for being patient with us and very cooperative.

Link to post
Share on other sites

@TOH if you don't mind, can you follow the instructions below to get us a bit more information from your machine please?

  1. Please download the attached fixlist.txt file and save it to your desktop
  2. Then download Farbar Recovery Scan Tool from here http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/ and save it to your desktop.
    Note: You need to run the version compatible with your system.
    **After you click the Download Now 64-bit, or the Download Now 32-bit, another page will open — DO NOT CLICK ANY ADDITIONAL 'download now' buttons, just wait and look toward the bottom of your browser for the option to Run or Save. Click Save.
  3. Double-click to run it. When the tool opens click Yes to the disclaimer.
    Note: If you are prompted by Windows SmartScreen, click More info followed by Run anyway.
  4. Click the Fix button.
  5. When the process has finished, it will save a log in the same directory the tool was run from.  Please attach the following log file to your response
    Fixlog.txt

Fixlist.txt

Link to post
Share on other sites

@TOH unfortunately that didn't point us in the right direction, can you please follow those same instructions I posted above, but use this version of fixlist.txt instead? Thank you. It should also produce a zip file that contains all of your logs if you could upload those too please

 

Fixlist.txt

Edited by dcollins
Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
 Share

  • Recently Browsing   0 members

    • No registered users viewing this page.

Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.