MB Exploit Protection and Updating Problems

[shagggggggy]

I Just saw an update for MB on the bottom right of my screen wanting me to update to a new version from my previous I believe it was 3.0.2 to 3.1.2.7733 not entirely sure. The problem is after I installed the newer version Both the Web protection & Exploit Protection where disabled. I turned web protection back on just fine but the anti-Exploit will not. Also I'm unable to update the database and when I click on my 'My Account' Tab I got a pop up error message saying something about my license and being unable to connect to server or something.  The popup mssg won't repeat so I;m sorry I can't be more specific. here are the files requested in the sticky. Any help is greatly appreciated, many thanks in advance

Addition.txt

FRST.txt

mb-check-results.zip

[dcollins]

I see 7 different pieces of security software on here (not including MB3). If possible, can we try disabling the following and seeing if that makes a difference?

• Webroot
• Kaspersky Total Security
• AVG (only a driver updater, but can't hurt to try disabling)
• Comodo
• Panda Cloud Cleaner
• Sophos Virus Removal Tool
• Symantec Endpoint Encryption

Edited May 14, 2017 by dcollins

[shagggggggy]

All those programs you mentioned (besides Webroot & Kaspersky) are, and have been, disabled for a long time now. I had forgotten those where even still on my system. As for the other 2 I already have MB in the Exceptions of both programs but I went ahead and disabled them both and tried to activate MBEP but no luck......:(

Edited May 14, 2017 by shagggggggy

[Firefox]

It would be best to uninstall any of those your are not using... even though you may have them disabled they could very well still be running portions of the protections they use and could be conflicting with MB3...

Its best to only use one Antivirus Program and one Antimalware program at a time to avoid conflicts.

[dcollins]

I think we found the issue in your setup, one of your files didn't get replaced properly during startup. Under settings -> Protection, do you have Enable Self Protection Early Startup turned on?

Once you check that setting, using mb-clean to remove the installed version and re-install the latest version should get you back up and running.

 

Edited May 15, 2017 by dcollins

[shagggggggy]

I checked and that was Not on. I just now switched it on. But I have a concern I hope you can address. My license is unique in that I had bought the MB v2 and when v3 came out there was a promo where I now have a Premium 'Never Expires' license for upgrading. I'm concerned that if I use the clean tool to completely erase MB from my system I might lose this precious licensing key, as it says in the 'My Account' Tab, "If you deactivate your premium license, Malwarebytes will be downgraded to Malwarebytes Free and you will lose real-time protection" Is there cause for concern, or will simply copying and pasting my Key work?

[nikhils]

Hello @shagggggggy

You can make  a copy of the key for your records.

However the MB-Clean tool will automatically back up your license key and will inject it into the product when you reinstall after reboot.

[shagggggggy]

7 hours ago, dcollins said:

I think we found the issue in your setup, one of your files didn't get replaced properly during startup. Under settings -> Protection, do you have Enable Self Protection Early Startup turned on?

Once you check that setting, using mb-clean to remove the installed version and re-install the latest version should get you back up and running.

 

Thank you I did as you said and now Exploit protection is on and running fine. (: Thanks also to everyone else who took the time to post and help me a stranger out, means a lot!

[nikhils]

Glad we were able to help.

[shagggggggy]

I'm sorry to say the Anti-Exploit problem has returned even with the "Enable self-protection module early" on...

[1PW]

Hello @shagggggggy:

Would you please post a fresh set of logs in an identical manner to your first post?  Hopefully, the new conditions will present a better picture of the conditions.

Thank you.

[shagggggggy]

I'll get on that tomorrow as it's very late here, thanks for the quick reply.

Unfortunately Malware Bytes isn't scanning correctly either. Every time I perform a Full Scan it freezes right before it gets to Heuristics.Also Hyper Scan, whenever it reaches the point of "Scan File System" it wigs out and the periodic info I get from the 'Currently Scanning' function suddenly says Checking for updates, then the scan immediately stops without even reaching the heuristics scan (even though I have heuristic scanning setting on) it goes to 'Scan and Quarantine Complete' 'Summary' with time to complete scan 00:00:11 I know its called "Hyper" Scan but something is malfunctioning.

[shagggggggy]

Sorry for late posts i'm busy irl but I just noticed when I reinstalled MB using the Clean Tool It reinstalled version 3.0.6 and the problem was fixed. Today, now again  the same situation happened, saw that there was a new update version to DL and install (3.1.2.1733-10139?)(Though I can't remember now I swear the build was higher on the installer then what was available from what i could see from Google search...Is there a way I can check my build version?). I proceeded to do so. Now AE won't switch on. Hyper Scan Problem  persists so here are an update of my sticky files, thank you

EDIT:I have tried the steps which fixed my intial same problem but for some reason it is not working this time.

@1PW:

mb-check-results.zip

Addition.txt

FRST.txt

Edited June 16, 2017 by shagggggggy

[shagggggggy]

3 minutes ago, shagggggggy said:

Double Post Srry :S

 

Edited June 16, 2017 by shagggggggy
noob

[AdvancedSetup]

Hello @shagggggggy

I've moved your topic into the Malware Removal section of the forum. Your computer really needs some clean up. The scanning tools cannot even access parts of the system and you have a ton of what appears to be useless software or entries on the system. Let me have you run the following first. This will run a Full Disk check on your system which may take a few hours to run, please let it run.

It will also remove some temp files and reset a few settings.

 

Please download the attached fixlist.txt file and save it to the Desktop.
NOTE. It's important that both files, FRST or FRST64 and fixlist.txt are in the same location or the fix will not work.

NOTICE: This script was written specifically for this user, for use on this particular machine. Running this on another machine may cause damage to your operating system.

Run FRST or FRST64 and press the Fix button just once and wait.
If the tool needs a restart please make sure you let the system restart normally and let the tool complete its run after restart.
The tool will make a log on the Desktop (Fixlog.txt). Please attach or post it to your next reply.

Note: If the tool warned you about an outdated version please download and run the updated version.

fixlist.txt

 

Thank you

Ron

 

[shagggggggy]

19 hours ago, AdvancedSetup said:

Hello @shagggggggy

I've moved your topic into the Malware Removal section of the forum. Your computer really needs some clean up. The scanning tools cannot even access parts of the system and you have a ton of what appears to be useless software or entries on the system. Let me have you run the following first. This will run a Full Disk check on your system which may take a few hours to run, please let it run.

It will also remove some temp files and reset a few settings.

 

Please download the attached fixlist.txt file and save it to the Desktop.
NOTE. It's important that both files, FRST or FRST64 and fixlist.txt are in the same location or the fix will not work.

NOTICE: This script was written specifically for this user, for use on this particular machine. Running this on another machine may cause damage to your operating system.

Run FRST or FRST64 and press the Fix button just once and wait.
If the tool needs a restart please make sure you let the system restart normally and let the tool complete its run after restart.
The tool will make a log on the Desktop (Fixlog.txt). Please attach or post it to your next reply.

Note: If the tool warned you about an outdated version please download and run the updated version.

fixlist.txt

 

Thank you

Ron

 

@AdvancedSetup Thank you so much for taking the time to make a fix file for my specific PC! Here is the file you wanted,

 

 

Fixlog.txt

Edited June 17, 2017 by shagggggggy

[AdvancedSetup]

Great, looks like most things ran okay. Please restart the computer one more time, then let me get a new fresh set of logs from FRST. Make sure you place a checkmark in the Additions.txt check box and attach both new logs.

I'll be out of town for most of the day but will check back on you again later in the day if I'm able to.

Thanks

Ron

 

[shagggggggy]

Here you are, as requested 1 restart and 2 logs.

FRST.txt

Addition.txt

[AdvancedSetup]

The logs show that you're running 3 different antivirus programs. You can only have 1 antivirus program installed as they will conflict with each other and cause issues.

Please choose one and remove the others.

AV: Webroot SecureAnywhere (Disabled - Up to date) {4646A877-74EB-CD3B-8FDB-210DB94FA61A}
AV: Kaspersky Total Security (Enabled - Up to date) {86367591-4BE4-AE08-2FD9-7FCB8259CD98}
AVG Anti-Virus

Once that's done reboot the computer again and post back new FRST logs please.

Thanks

Ron

 

[shagggggggy]

I don't have any AVG AV on my pc as far as I can find through Control Panel>Programs Features, or through Ccleaner. I do use AVG Driver Updater that I use to update my drivers..As for the other two, Since my Sub to Kaspersky will be ending promptly, I was given a year long free sub for Webroot which I'm planning on un-disabling soon for use.

[AdvancedSetup]

Okay, I'd remove the Kaspersky then and just go with the Webroot.

Is Malwarebytes updating as it should now?

Ron

 

[shagggggggy]

Nope :/ Anti-Exploit still will not switch on but as for the updating ,  I had 2 issues 1 was fixed after the MB Cleaner which was just updating the MB Database(MBCleaner fixed by downgrading to 3.0.6), the main update problem was that every time I update past 3.0.6 MB popup says there's a newer version available, which I install, which leads to the Anti-Exploit mess.

[AdvancedSetup]

Wow, looking at what you have running I'm not surprised you're having issues with our product and my guess would be that you do with other programs too. That is a lot of security products to be running on one box.
 

Failed to access process -> Secure System

(Sandboxie Holdings, LLC) C:\Program Files\Sandboxie\SbieSvc.exe
(AO Kaspersky Lab) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 17.0.0\avp.exe
(AO Kaspersky Lab) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 17.0.0\avpui.exe
(AO Kaspersky Lab) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Secure Connection 1.0\ksdeui.exe
(Acronis International GmbH) C:\Program Files (x86)\Common Files\Acronis\ActiveProtection\anti_ransomware_service.exe
(Comodo) C:\Program Files (x86)\Comodo\Chromodo\chromodo_updater.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(The OpenVPN Project) C:\Program Files\OpenVPN\bin\openvpnserv.exe
(Acronis International GmbH) C:\Program Files (x86)\Common Files\Acronis\Infrastructure\mms_mini.exe
() C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe
(iolo technologies, LLC) C:\Program Files (x86)\iolo\System Mechanic Professional\SystemGuardAlerter.exe
[PeerBlock] => C:\Program Files\PeerBlock\peerblock.exe
C:\Program Files\Cybertron\Privacy Eraser\PrivacyEraser64.exe [7002200 2017-05-01] (Cybertron Software, Co., Ltd.)
C:\WINDOWS\system32\WRusr.dll [2017-06-13] (Webroot)

Task: {D37C73A2-7ADD-4DAE-85E7-A30AA362C3AE} - System32\Tasks\iolo Process Governor => C:\Program Files (x86)\iolo\System Mechanic Professional\iologovernor64.exe [2015-08-15] (iolo technologies, LLC)

Task: C:\WINDOWS\Tasks\{ADD9BAC2-D43B-4CAB-8FC5-196DCA889494}.job => C:\Program Files (x86)\Panda Security\Panda Security Protection\JobLauncher.exe

Webroot SecureAnywhere (HKLM-x32\...\WRUNINST) (Version: 9.0.17.24 - Webroot)

BHO: Kaspersky Protection -> {2E38825B-8815-42CF-9126-C58BC28D4591} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 17.0.0\x64\IEExt\ie_plugin.dll [2016-12-22] (AO Kaspersky Lab)
BHO: Webroot Vault -> {c8d5d964-2be8-4c5b-8cf5-6e975aa88504} -> C:\ProgramData\WRData\pkg\LPBar64.dll [2017-04-27] (Webroot)
BHO: Webroot Filtering Extension -> {C9C42510-9B41-42c1-9DCD-7282A2D07C61} -> C:\Program Files\Common Files\Webroot\WebFiltering\wrflt.dll [2017-05-23] (Webroot)
BHO-x32: Kaspersky Protection -> {2E38825B-8815-42CF-9126-C58BC28D4591} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 17.0.0\IEExt\ie_plugin.dll [2016-12-22] (AO Kaspersky Lab)
BHO-x32: Webroot Vault -> {c8d5d964-2be8-4c5b-8cf5-6e975aa88504} -> C:\ProgramData\WRData\pkg\LPBar.dll [2017-04-27] (Webroot)
BHO-x32: Webroot Filtering Extension -> {C9C42510-9B41-42c1-9DCD-7282A2D07C61} -> C:\Program Files (x86)\Common Files\Webroot\WebFiltering\wrflt.dll [2017-05-23] (Webroot)
Toolbar: HKLM - Kaspersky Protection Toolbar - {093F479D-712E-46CD-9E06-62E734A05F68} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 17.0.0\x64\IEExt\ie_plugin.dll [2016-12-22] (AO Kaspersky Lab)
Toolbar: HKLM - Webroot Toolbar - {97ab88ef-346b-4179-a0b1-7445896547a5} - C:\ProgramData\WRData\pkg\LPBar64.dll [2017-04-27] (Webroot)
Toolbar: HKLM-x32 - Kaspersky Protection Toolbar - {093F479D-712E-46CD-9E06-62E734A05F68} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 17.0.0\IEExt\ie_plugin.dll [2016-12-22] (AO Kaspersky Lab)
Toolbar: HKLM-x32 - Webroot Toolbar - {97ab88ef-346b-4179-a0b1-7445896547a5} - C:\ProgramData\WRData\pkg\LPBar.dll [2017-04-27] (Webroot)
Toolbar: HKU\S-1-5-21-3303184088-4007908536-2641798140-1001 -> Kaspersky Protection Toolbar - {093F479D-712E-46CD-9E06-62E734A05F68} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 17.0.0\x64\IEExt\ie_plugin.dll [2016-12-22] (AO Kaspersky Lab)
R2 PGPdisk; C:\Windows\System32\Drivers\PGPdisk.sys [275496 2015-01-23] (Symantec Corporation)
R0 pgpfs; C:\WINDOWS\System32\Drivers\PGPfsfd.sys [184856 2015-01-23] (Symantec Corporation)
R1 PGPsdkDriver; C:\WINDOWS\System32\Drivers\PGPsdk.sys [52968 2015-01-23] (Symantec Corporation)
R0 PGPwded; C:\Windows\System32\Drivers\PGPwded.sys [399072 2015-01-23] (Symantec Corporation)
R0 Pgpwdefs; C:\WINDOWS\System32\DRIVERS\Pgpwdefs.sys [20536 2015-01-23] (Symantec Corporation)

Bitcoin Core (64-bit) (HKU\S-1-5-21-3303184088-4007908536-2641798140-1001\...\Bitcoin Core (64-bit)) (Version: 0.13.0 - Bitcoin Core project)

Privacy Eraser (HKLM\...\{CB5AC03C-B8AD-980F-998E-51969A6DFC9F}_is1) (Version: 4.24.0.2321 - Cybertron Software Co., Ltd.)

 

 

Do some research on all the issues with this software and decide for yourself if you should keep it. I can't decide for you but I would not run it on any of my own personal computers.
(iolo technologies, LLC) C:\Program Files (x86)\iolo\Common\Lib\ioloServiceManager.exe
(iolo technologies, LLC) C:\Program Files (x86)\iolo\System Mechanic Professional\ioloGovernor64.exe
(iolo technologies, LLC) C:\Program Files (x86)\iolo\System Mechanic Professional\SystemGuardAlerter.exe

 

Microsoft itself is having trouble accessing and validating the license for it's software too

Error: (06/18/2017 02:48:38 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: License Activation (slui.exe) failed with the following error code:
hr=0xC004F074
Command-line arguments:
RuleId=502ff3ba-669a-4674-bbb1-601f34a3b968;Action=AutoActivateSilent;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=2de67392-b7a7-462a-b1ca-108dd189f588;NotificationInterval=1440;Trigger=NetworkAvailable
 

 

 

Other various system errors.

 

System errors:
=============
Error: (06/18/2017 04:11:10 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: The WRSVC service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 10000 milliseconds: Restart the service.

Error: (06/18/2017 04:09:11 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: The WRSVC service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 10000 milliseconds: Restart the service.

Error: (06/18/2017 03:39:27 PM) (Source: DCOM) (EventID: 10010) (User: 1337MACHINE)
Description: The server {659CDEA7-489E-11D9-A9CD-000D56965251} did not register with DCOM within the required timeout.

Error: (06/18/2017 03:37:27 PM) (Source: DCOM) (EventID: 10010) (User: NT AUTHORITY)
Description: The server {4991D34B-80A1-4291-83B6-3328366B9097} did not register with DCOM within the required timeout.

Error: (06/18/2017 03:33:33 PM) (Source: Microsoft-Windows-DNS-Client) (EventID: 1012) (User: NT AUTHORITY)
Description: There was an error while attempting to read the local hosts file.

Error: (06/18/2017 03:33:32 PM) (Source: Service Control Manager) (EventID: 7024) (User: )
Description: The Routing and Remote Access service terminated with the following service-specific error:
General access denied error

Error: (06/18/2017 03:33:32 PM) (Source: Microsoft-Windows-DNS-Client) (EventID: 1012) (User: NT AUTHORITY)
Description: There was an error while attempting to read the local hosts file.

Error: (06/18/2017 03:33:17 PM) (Source: Service Control Manager) (EventID: 7024) (User: )
Description: The FreeLAN Service service terminated with the following service-specific error:
Incorrect function.

Error: (06/18/2017 03:33:16 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The IntelHaxm service failed to start due to the following error:
A device attached to the system is not functioning.

Error: (06/18/2017 03:33:16 PM) (Source: IntelHaxm) (EventID: 3) (User: )
Description: HAXM Failed to init VMX

 

 

To be honest here, I don't think we're going to be able to get our program working well on your computer the way it is currently, but you tell me what you'd like to do at this point and I'll try to help out but from where I sit and looking at the type of software on this computer I'm pretty sure you install a lot of software and play with it and remove it or possibly sometimes forget you even tested it and it's left behind, etc. You might want to consider setting up a virtual system using Virtual Box. That way you can run security software and browse the web in a system that is basically temporary and if something happens to it you just restore the snapshot in seconds and it's back and running. Use your main computer with a lot less protection than you currently have for things like gaming or very basic non intrusive web browsing.

Without removing much of this security software and testing again I don't think we'll get Malwarebytes working the way it's supposed to. Again, please let me know either what, or how you'd like to proceed from here and if I can help you I will.

Thank you again

Ron

 

Edited June 20, 2017 by AdvancedSetup

[shagggggggy]

11 hours ago, AdvancedSetup said:

(Sandboxie Holdings, LLC) C:\Program Files\Sandboxie\SbieSvc.exe

^^I use this as a virtual system to test executables if they are safe before I run them on my PC

11 hours ago, AdvancedSetup said:

(Acronis International GmbH) C:\Program Files (x86)\Common Files\Acronis\ActiveProtection\anti_ransomware_service.exe

^^This program is a storage backup software I do not know why it also has any security features

11 hours ago, AdvancedSetup said:

(Comodo) C:\Program Files (x86)\Comodo\Chromodo\chromodo_updater.exe

^^I keep this secure browser in case of browser Hijacking. which has happened in the past

12 hours ago, AdvancedSetup said:

(The OpenVPN Project) C:\Program Files\OpenVPN\bin\openvpnserv.exe

^^I use and pay for a VPN because I believe in the right to privacy and am a strong advocate for privacy on the internet

12 hours ago, AdvancedSetup said:

(Acronis International GmbH) C:\Program Files (x86)\Common Files\Acronis\Infrastructure\mms_mini.exe

() C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe

^^Again Acronis is for Backing up my files

12 hours ago, AdvancedSetup said:

(iolo technologies, LLC) C:\Program Files (x86)\iolo\System Mechanic Professional\SystemGuardAlerter.exe

^^I paid for System Mechanic for repairing my registry as well as other utilities it has are very useful, The System Guard Application is disabled

12 hours ago, AdvancedSetup said:

[PeerBlock] => C:\Program Files\PeerBlock\peerblock.exe

^^I use this program to block internet connections to ads, spam, & malware IP's

12 hours ago, AdvancedSetup said:

C:\Program Files\Cybertron\Privacy Eraser\PrivacyEraser64.exe [7002200 2017-05-01] (Cybertron Software, Co., Ltd.)

^^I use this program to delete sensitive data such as pictures of my ID, Birth Certificate, SS Card etc.

12 hours ago, AdvancedSetup said:

Task: {D37C73A2-7ADD-4DAE-85E7-A30AA362C3AE} - System32\Tasks\iolo Process Governor => C:\Program Files (x86)\iolo\System Mechanic Professional\iologovernor64.exe [2015-08-15] (iolo technologies, LLC)

^^Again this is a useful tool I use and all the security features are completely disabled

12 hours ago, AdvancedSetup said:

Task: C:\WINDOWS\Tasks\{ADD9BAC2-D43B-4CAB-8FC5-196DCA889494}.job => C:\Program Files (x86)\Panda Security\Panda Security Protection\JobLauncher.exe

^^I can't find any info for removing this in Control Panel>Programs Features, or through Ccleaner. I had uninstalled this a long time ago

12 hours ago, AdvancedSetup said:

Bitcoin Core (64-bit) (HKU\S-1-5-21-3303184088-4007908536-2641798140-1001\...\Bitcoin Core (64-bit)) (Version: 0.13.0 - Bitcoin Core project)

^^I Day Trade as a hobby with BTC

12 hours ago, AdvancedSetup said:

Other various system errors.

 

System errors:
=============
Error: (06/18/2017 04:11:10 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: The WRSVC service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 10000 milliseconds: Restart the service.

Error: (06/18/2017 04:09:11 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: The WRSVC service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 10000 milliseconds: Restart the service.

Error: (06/18/2017 03:39:27 PM) (Source: DCOM) (EventID: 10010) (User: 1337MACHINE)
Description: The server {659CDEA7-489E-11D9-A9CD-000D56965251} did not register with DCOM within the required timeout.

Error: (06/18/2017 03:37:27 PM) (Source: DCOM) (EventID: 10010) (User: NT AUTHORITY)
Description: The server {4991D34B-80A1-4291-83B6-3328366B9097} did not register with DCOM within the required timeout.

Error: (06/18/2017 03:33:33 PM) (Source: Microsoft-Windows-DNS-Client) (EventID: 1012) (User: NT AUTHORITY)
Description: There was an error while attempting to read the local hosts file.

Error: (06/18/2017 03:33:32 PM) (Source: Service Control Manager) (EventID: 7024) (User: )
Description: The Routing and Remote Access service terminated with the following service-specific error:
General access denied error

Error: (06/18/2017 03:33:32 PM) (Source: Microsoft-Windows-DNS-Client) (EventID: 1012) (User: NT AUTHORITY)
Description: There was an error while attempting to read the local hosts file.

Error: (06/18/2017 03:33:17 PM) (Source: Service Control Manager) (EventID: 7024) (User: )
Description: The FreeLAN Service service terminated with the following service-specific error:
Incorrect function.

Error: (06/18/2017 03:33:16 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The IntelHaxm service failed to start due to the following error:
A device attached to the system is not functioning.

Error: (06/18/2017 03:33:16 PM) (Source: IntelHaxm) (EventID: 3) (User: )
Description: HAXM Failed to init VMX

 

^^I do not understand any of the errors here or what I can do about it

12 hours ago, AdvancedSetup said:

To be honest here, I don't think we're going to be able to get our program working well on your computer the way it is currently, but you tell me what you'd like to do at this point and I'll try to help out but from where I sit and looking at the type of software on this computer I'm pretty sure you install a lot of software and play with it and remove it or possibly sometimes forget you even tested it and it's left behind, etc. You might want to consider setting up a virtual system using Virtual Box. That way you can run security software and browse the web in a system that is basically temporary and if something happens to it you just restore the snapshot in seconds and it's back and running. Use your main computer with a lot less protection than you currently have for things like gaming or very basic non intrusive web browsing.

Without removing much of this security software and testing again I don't think we'll get Malwarebytes working the way it's supposed to. Again, please let me know either what, or how you'd like to proceed from here and if I can help you I will.

Thank you again

Ron

 

You're right on the money when you say I install & play with a bunch of programs but 90% of the time I remove them through windows uninstaller (I do forget occasionally), but still they leave remnants behind. If you know and could recommend a software that can completely remove an installed program and/or the leftovers of one that would be very useful. In the future I will take your advice and use a VM from now on. Overall aside from what I just mentioned, the only problem I'm having with my PC ATM is that which I mention in my OP with Malwarebytes

[AdvancedSetup]

I understand and I'm saying it will probably take a lot of work and removal, reinstall of software to track down what is actually causing the issue as the logs don't pinpoint what is causing it. Basically by installing, removing a lot of software over time does cause issues and a slower computer. Windows has worked that way since Windows has been around and I've not seen anyone fix that issue yet. Format and reinstall Windows is the only thing that brings back the real speed. We can track down what's causing the conflict with Malwarebytes given enough time but not sure if you want to spend that time with removing stuff and testing, etc.

My own personal recommendation (nothing to do with our program) and what I would do if someone were to hand me this computer as mine. I would backup all my data, fdisk the drive and reinstall Windows from scratch. Then setup a good backup and imaging routine. Then I'd install only the most important applications that I use often. Then for all my testing, browsing, etc I'd use VMware (I like it better than Virtual Box, but it's not free) in your case I'd use Virtual Box and read up on Snapshots. Snapshots are awesome. If something happens you don't like you can restore to a previous snapshot in seconds and reboot and you're back the way the computer was. Better in my opinion than doing it with Sandboxie

But, if you want to remove a bunch of security software including ours and continue to try to get it working, we can do that too. As it is right now there is no magic fix - your computer has something going on that is not normal and causing a conflict.

The complexity of finding, preventing, and cleanup from malware
 

Let me know.

Thanks

Ron