Windows 10 shut down freeze

[gageracer]

Hello,

If i don't close the Anti-Ransomware, i can't shut down my pc.It frozes instantly.I called Microsoft thinking it is because of an update or something but they could not find anything.Anyone else having this problem?

[1PW]

Hello @gageracer and

The Malwarebytes' developers/staffers/helpers must have good data for a quality fault analysis.  Please download/run the following Malwarebytes written data gathering support tool, on the system in question, restarted in the Windows 10 NORMAL boot mode:

1. Download the trusted, Malwarebytes authored arwlogs.exe utility/tool and save to a system Administrator's desktop of the system in question.
2. arwlogs.exe is an information gathering tool that neither installs nor does it make system/registry hive changes.
3. Single right-click the arwlogs.exe icon and select Run as administrator.
4. If a Windows User Account Control (UAC) alert/prompt for arwlogs.exe appears, select the "Yes" button to continue.
5. If a Windows SmartScreen warning alert/prompt for arwlogs.exe appears, select "More info", and then select the "Run anyway" button to continue.
6. The details that appear within the Command window that opens should be mostly ignored.
7. When "Press any key to continue . . . " appears at the bottom of the Command window, type an Enter key to close the window.
8. A zipped archive (yyyy-mm-dd-{COMPUTERNAME}.zip) should have been generated to the system's Administrator desktop.
9. Attach the above zipped archive to your next reply in this topic.
10. Delete arwlogs.exe from the system's Administrator desktop.

Since you have not already done so, please consider selecting the "Follow" button, near the upper-right corner of your topic, to receive timely notifications regarding replies.

Although more data may be required, after the requested data is posted, the Malwarebytes' team can commence their analysis.  Thank you always for your assistance.

Edited May 20, 2017 by 1PW

[gageracer]

Here you go and thanks for helping so far.

2017-05-21-CAN-BILGISAYAR.zip

[1PW]

Hello @gageracer:

The content generated by arwlogs.exe may be useful to the MBARW developers.  It would be additionally helpful if you would obtain the system information that the following utility can provide.

Please download the Farbar Recovery Scan Tool (in the case of your Windows 10 system, FRST64.exe) and save it to your desktop.

• Double-click to run it. When the tool opens click Yes to the disclaimer.
• Press the Scan button.

• It will make a log (FRST.txt) in the same directory the tool is run. Please copy and paste it to your reply.
• The first time the tool is run, it also makes another log (Addition.txt). If you've run it before it may not and you may need to select it manually
• Please attach both logs to your reply if possible. Otherwise, you may copy/paste the logs directly if you have to, but an attachment is better.
• To save attachments please click the link as shown below. Then browse to where your file is located and select it and click the Open button.

Thank you.

[gageracer]

Hey there,

 

Here is the FRST.txt and Addition.txt

FRST.txt

Addition.txt

[1PW]

Hello @gageracer:

It is a holiday weekend in the U.S.A. and those who may perform a fine grain analysis of the data logs are likely not available.  In the meantime, please do a "Clean Install" of MBARW BETA 8 being careful to not delete any existing MBAM v2.2.1.1043 files/folders, and then reply to this topic with the status of the system. 

1) Please delete any previous binaries of the MBARW_Setup.exe file(s) from the system in question.
2) Close all open user applications followed by a conventional Windows-based uninstall of Malwarebytes Anti-Ransomware through the Windows system Control Panel.
3) If MBARW Beta was uninstalled successfully, all of the possible following sub-directories will have been deleted from a typical Windows 10 x64 system:

   "%ProgramFiles%\Malwarebytes\"                      
   "%ProgramData%\MalwarebytesARW\"

4) If any of the above sub-directories remain, please delete them manually.  If necessary, any remaining/uninstalled sub-directory may need to be deleted in the Windows 10 Safe mode.
5) Execute a conventional Windows restart to the Normal Windows boot mode and log-in through an Administrator's account. <===IMPORTANT!
6) Using an Administrator's account only, download a fresh MBARW_Setup.exe file and save to the Administrator's Desktop from the New version - BETA 8 - now available! topic.
7) Single right-click the saved MBARW_Setup.exe file and left-click   Run as administrator from the Windows context menu and continue.
8) Upon a successful clean install, please restart the computer in a conventional manner to the Windows 10 Normal boot mode.

Please reply to your topic with the status of your reported issue.  Thank you for testing the perpetual MBARW BETA and your valued feedback.

VT analysis of a known good MBARW_Setup.exe download from Malwarebytes' CDN: https://www.virustotal.com/file/d083b763222c24669a03fb6db66d300ec99ae2ff7d43b581fbef4f5a2ac05578/analysis/1495802106/

Edited May 28, 2017 by 1PW