mbae64.dll MBAE64.dll 0xc0000409 in internet explorer 11

[cybot]

I keep encountering a crash when I click on google search results in IE 11 on windows 10 14393 and 15063. When I go to click a search result, IE brings up a message saying IE has crashed and is restarting. but a new tab opens but instead of going to the address I clicked the link to, it opens as an internal address about:blank. It does this on most search results, but not all of them. I posted the error events from the event log below. MBAE64.dll is the culprit. I don't know why only google search results seem to be affected. other browsing actions complete successfully.

 

Faulting application name: iexplore.exe, version: 11.0.15063.0, time stamp: 0x7e29c811

Faulting module name: mbae64.dll, version: 1.9.2.211, time stamp: 0x58d2a5ae

Exception code: 0xc0000409

Fault offset: 0x000000000003501b

Faulting process id: 0x4d4c

Faulting application start time: 0x01d2c061c30429c1

Faulting application path: C:\Program Files\Internet Explorer\iexplore.exe

Faulting module path: C:\Program Files\Malwarebytes\Anti-Malware\mbae64.dll

Report Id: 13b0806b-7a34-43b4-ae25-a4bbd277597c

Faulting package full name:

Faulting package-relative application ID:

 

 

- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">

- <System>

  <Provider Name="Application Error" />

  <EventID Qualifiers="0">1000</EventID>

  <Level>2</Level>

  <Task>100</Task>

  <Keywords>0x80000000000000</Keywords>

  <TimeCreated SystemTime="2017-04-28T20:56:30.159783400Z" />

  <EventRecordID>3327</EventRecordID>

  <Channel>Application</Channel>

  <Computer>ChrisSolomon-PC</Computer>

  <Security />

  </System>

- <EventData>

  <Data>iexplore.exe</Data>

  <Data>11.0.15063.0</Data>

  <Data>7e29c811</Data>

  <Data>mbae64.dll</Data>

  <Data>1.9.2.211</Data>

  <Data>58d2a5ae</Data>

  <Data>c0000409</Data>

  <Data>000000000003501b</Data>

  <Data>4d4c</Data>

  <Data>01d2c061c30429c1</Data>

  <Data>C:\Program Files\Internet Explorer\iexplore.exe</Data>

  <Data>C:\Program Files\Malwarebytes\Anti-Malware\mbae64.dll</Data>

  <Data>13b0806b-7a34-43b4-ae25-a4bbd277597c</Data>

  <Data />

  <Data />

  </EventData>

  </Event>

logs.zip

Addition.txt

FRST.txt

MB-CheckResult.txt

[dcollins]

Can you give an example of a search term, and what link you clicked on? I've been unable to replicate this so far

[cybot]

the errors seem to be not able to be reliably reproduced on my system either..... the links in the search results I made are no longer having any issues loading (or opening a new tab). but as for the search term I used earlier it was was this "vista ultimate sp2 iso hp download X14-63453.exe" the link that gave me grief was all the way at the bottom - askvg.com

Edited April 29, 2017 by cybot

[AdvancedSetup]

Hello @cybot

The computer has few issues that need cleaning. I've moved your topic into the Malware removal section so that I can assist you one-on-one.

Please download the attached fixlist.txt file and save it to the Desktop.
NOTE. It's important that both files, FRST or FRST64 and fixlist.txt are in the same location or the fix will not work.

NOTICE: This script was written specifically for this user, for use on this particular machine. Running this on another machine may cause damage to your operating system.

Run FRST or FRST64 and press the Fix button just once and wait.
If the tool needs a restart please make sure you let the system restart normally and let the tool complete its run after restart.
The tool will make a log on the Desktop (Fixlog.txt). Please attach or post it to your next reply.

Note: If the tool warned you about an outdated version please download and run the updated version.

fixlist.txt

Thanks

Ron

 

[cybot]

Malware?! what malware do I have on my system? I am extremely careful with my security, and have not had a virus infection or malware incident for the life of this machine (2010)

[AdvancedSetup]

Hi @cybot

I did not say it had malware, I said it had a few issues that need cleaning up. There is a file association for .exe files that is not correct. there are AlternateDataStreams that don't belong, there are multiple files with program compatibility set on them that should not be.

The script I wrote will correct those issues as well as run a disk check and clean the temporary files on the system.

 

[cybot]

well, the script you wrote broke my system.  my system no longer takes under a minute to boot, the start menu does not work right anymore. and it takes 5 minutes to shutdown the system now

[AdvancedSetup]

Please just restart it again and see how it runs. If you still feel it's not running as you like then do a System Restore and it will put it back to the way it was before we started.

 

[cybot]

i restarted twice, the system still acts sluggish and the start menu is still not working right

[AdvancedSetup]

Okay, go ahead and do a System Restore. The script created a new one just before it ran that you can restore from and put it back exactly as it was before.

Thanks

 

[cybot]

the system restore point the frst supposedly made, does not exist. last restore point is from the 26th right after a system update

[AdvancedSetup]

Please post back the Fixlog.txt

 

[cybot]

Quote

here's the file you asked for. sorry for the delay, weekend's and all that.

 

Fixlog.txt

[cybot]

I was able to solve at least the start menu not working by using the powershell command that redeploys all the appx packages. the I first opened this post about error occurred again, when clicking a google search result

 

https://www.google.com/search?q=windows+10+start+menu+not+working+fix&sourceid=ie7&rls=com.microsoft:en-US:IE-Address&ie=&oe=#spf=1

 

result clicked that caused issue was the first link in the results

[cybot]

doh.... IE was still in compatibility emulation mode..... switching out still caused the error

 

new link:

https://www.google.com/search?newwindow=1&rls=com.microsoft%3Aen-US%3AIE-Address&q=windows+10+start+menu+not+working+fix&oq=windows+10+start+menu+not+working+fix&gs_l=serp.12...0.0.0.93631.0.0.0.0.0.0.0.0..0.0....0...1..64.serp..0.0.0.f9CcZhXZVt8#spf=1

[AdvancedSetup]

Is the crashing still happening or just the Start Menu issue?

 

[cybot]

i was able to fix the start menu not working, but I still am having the issue from my original post

[AdvancedSetup]

Please close all browsers, then right click on the Malwarebytes tray icon and uncheck the "Exploit Protection" - wait about a minute till it settles down. Then start Internet Explorer and let me know if the issue still happens or not.

 

[cybot]

actually, I was about to post about that.... turning off exploit protection does indeed stop the issue from occuring

[AdvancedSetup]

Okay, please go ahead and enable the Exploit module, restart the computer. Then grab me all the logs from Malwarebytes

Please obtain and post a copy of the Malwarebytes logs

1. A copy of the contents of C:\ProgramData\Malwarebytes\MBAMService\logs in a ZIP file (attach to post)
   1. The ProgramData folder may be hidden. You may need to show hidden files, type the path manually or type “%programdata%” (less the quotes) in the Run command
2. Attach the ZIP file by clicking on the "Drag files here to attach, or choose files..." or simply drag the file to the attachment area

 

Create and obtain an mb-check log:

1. Download mb-check from here and save to your desktop
2. Run mb-check and within a few second the command window will open and then close
3. This will produce one log file on your desktop: mb-checkResult.txt
4. Attach this log file to your post by clicking on the "Drag files here to attach, or choose files..." or simply drag the file to the attachment area

 

Then a new set of FRST logs with a new Addition.txt log so that we can review what else is going on.

Thank you

Ron

 

[cybot]

I believe I included a copy of those first two logs in my original post. or do you need a set of more current logs?

[AdvancedSetup]

New, more current logs please. Thanks

 

[cybot]

here are those logs you asked for

logs.zip

Addition.txt

FRST.txt

MB-CheckResult.txt

[AdvancedSetup]

Hi @cybot

We've actually released a new beta build that may fix this issue. Can you please download and install this version. Then restart the computer even if it does not ask you to, then see if things work better or not and let me know.

NEW BETA!  Malwarebytes 3.1.0.1716
https://forums.malwarebytes.com/topic/200230-new-beta-malwarebytes-3101716/

Thanks again, Ron

 

[cybot]

ok I will try this version