Exclusions for Windows Defender

[Remagster]

This thread may be on to something as regards my months long grief with 3.0. 5 or 6 clean reinstalls as instructed by the automated support responses has not fixed this. Grief = realtime protection randomly turning itself off every couple of days and worst of all reboots take forever (20+ minutes). Upon reboot my W7 XPS lappy will load the desktop fairly quick but acts frozen for the next 15 to 20 min until something finishes doing whatever it's doing and a browser will load. I've run MBpro for years and never had this problem before 3.0. With MBpro uninstalled boot time from restart to happy is less than 2 min. Clearly it is not playing well with others and is fighting with something. I uninstalled Kaspersky to see if that was the problem, Nope. Same forever boot with MB installed. Windows Defender may well be its opponent I don't know. Setting exclusions in Defender sounds interesting but I cannot figure that out. Defender doesn't refer to nor offer a place to put exclusions, it's just some files in a folder. I know just enough about all this to be dangerous. Thank goodness for my Acronis rescue boot disk and full image backups as I have bricked my machine more than once trying to figure this crap out lol. I shouldn't have to be a computer software engineer to get MB to run smoothly. Maybe some of you agree. I'm tempted to figure out how to disable Defender but I think I'll not do that. For now I will not reinstall MBpro until I get word of a definitive fix. Thanks for taking the time to read my not exactly a rant rookie post.

 

[Porthos]

@Remagster Hi and Welcome.I am sorry support has not been helpful. Let's see what is going on with your system.

I also asked to get you moved into your own topic.

 

• Create and obtain an mb-check log
  1. Download MB-Check and save to your desktop
  2. Double-click to run MB-Check and within a few second the command window will open, then click "OK" 
  3. This will produce one log file on your desktop: mb-check-results.zip
     • Attach this file to your forum post by clicking on the "Drag files here to attach, or choose files..." or simply drag the file to the attachment area
• Create and obtain Farbar Recovery Scan Tool (FRST) logs
  1. Download FRST and save it to your desktop
     Note: You need to run the version compatible with your system. You can check here if you're not sure if your computer is 32-bit or 64-bit
  2. Double-click to run FRST and when the tool opens click "Yes" to the disclaimer
  3. Press the "Scan" button
  4. This will produce two files in the same location (directory) as FRST: FRST.txt and Addition.txt
     • Attach both of these logs to your forum post by clicking on the "Drag files here to attach, or choose files..." or simply drag the files to the attachment area

 

[Remagster]

Apparently this would require me to first reinstall MB and have the problem again. Correct?

[Porthos]

28 minutes ago, Remagster said:

Apparently this would require me to first reinstall MB and have the problem again. Correct?

Your post was hard to read I reread it and realized you did not have it installed.

The second part of the instructions (FRST) logs can be done to see if there are issues that could prevent MB from working correctly.

[Remagster]

Porthos I have run the scan and have the two files. Thanks for your help.

 

Addition.txt

FRST.txt

[Porthos]

14 minutes ago, Remagster said:

Porthos I have run the scan and have the two files. Thanks for your help.

 

 

 

I see some issues to fix and I am having a staff member take a look as well. Hang tight.

@AdvancedSetup User currently does NOT have MB installed. Wants to have a reasonable that it won't mess up his system again. 

Edited May 31, 2017 by Porthos

[AdvancedSetup]

Hello @Remagster

Is this a business computer? You have some policies set that could be from an network admin, or it could be from an infection. If it's a work computer you should seek help from your IT Support.

You still have older drivers from Malwarebytes still installed even though no program installation so those should be removed.

You have errors on the system that a full disk check might correct as well as some apps crashing, not loading, or working correctly. Probably best to move your topic to the Malware Removal section and work on fixing it up some as long as it's not a work computer.

 

System errors:
=============
Error: (05/31/2017 08:12:31 AM) (Source: Disk) (EventID: 11) (User: )
Description: The driver detected a controller error on \Device\Harddisk1\DR1.

Error: (05/30/2017 03:27:40 PM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: The following boot-start or system-start driver(s) failed to load:
ESProtectionDriver

Error: (05/30/2017 03:03:03 PM) (Source: Disk) (EventID: 11) (User: )
Description: The driver detected a controller error on \Device\Harddisk1\DR1.

Error: (05/30/2017 02:59:41 PM) (Source: DCOM) (EventID: 10010) (User: )
Description: The server {94E2D96B-B937-4AED-99CC-199D15CD6CE6} did not register with DCOM within the required timeout.

Error: (05/30/2017 02:58:16 PM) (Source: Service Control Manager) (EventID: 7022) (User: )
Description: The Function Discovery Provider Host service hung on starting.

Error: (05/30/2017 02:51:35 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: The previous system shutdown at 9:32:36 PM on ‎5/‎19/‎2017 was unexpected.

Error: (05/30/2017 02:51:12 PM) (Source: volmgr) (EventID: 46) (User: )
Description: Crash dump initialization failed!

Error: (05/30/2017 02:51:07 PM) (Source: volsnap) (EventID: 29) (User: )
Description: The shadow copies of volume C: were aborted during detection.

Error: (05/19/2017 09:20:45 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The Intel(R) Integrated Clock Controller Service - Intel(R) ICCS service failed to start due to the following error:
The service did not respond to the start or control request in a timely fashion.

Error: (05/19/2017 09:20:45 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: A timeout was reached (120000 milliseconds) while waiting for the Intel(R) Integrated Clock Controller Service - Intel(R) ICCS service to connect.

 

Thanks

Ron

 

[Remagster]

It is my home computer but I am self employed in financial services. I have no IT department. I know nothing about what "moving topics" is or how to do it. I do know that when I remove MB my computer boots smoothly. The image currently on my machine that todays log came from is from a couple of weeks ago when things including MB, seemed, other than terrible slow booting to be running fine. 

[AdvancedSetup]

You have an old compromised version of Java. Please uninstall Java from your Control Panel, Programs, Add/Remove.  If at all possible I'd highly recommend trying to use your computer without using Java. This software is very often compromised and most site do not require it.

Please set your MSCONFIG back to NORMAL and reboot.

Please read the following article concerning the use of MSCONFIG
Msconfig Is Not A Startup Manager
 

Looks like you might need to reinstall CoziExpress ?

Error: (06/01/2017 06:09:38 AM) (Source: SideBySide) (EventID: 80) (User: )
Description: Activation context generation failed for "c:\Program Files (x86)\Cozi Express\CoziExpress.exe".Error in manifest or policy file "" on line .
A component version required by the application conflicts with another component version already active.
Conflicting components are:.
Component 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest.
Component 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d.manifest.

 

Are you sure your Kaspersky is up to date? It is having a very slow startup to the point it errors out.

System errors:
=============
Error: (06/01/2017 12:10:35 PM) (Source: Service Control Manager) (EventID: 7011) (User: )
Description: A timeout (120000 milliseconds) was reached while waiting for a transaction response from the AVP16.0.1 service.
 

Download the latest Kaspersky product updates

 

Something is stopping our driver from loading. Possibly Kaspersky

Error: (05/31/2017 08:27:57 PM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: The following boot-start or system-start driver(s) failed to load:
ESProtectionDriver

 

Let me have you run the following please. Then after I see that log what we'll probably do is fully remove both Kaspersky and Malwarebytes, scan and make sure no errors and loading is good.
Then we'll reinstall Malwarebytes 3 and reboot and verify if any issues or not.

NOTE: This fix will run a full disk check which could take hours to complete, please let it run as you have potential disk errors listed in the logs too.

Please download the attached fixlist.txt file and save it to the Desktop.
NOTE. It's important that both files, FRST or FRST64 and fixlist.txt are in the same location or the fix will not work.

NOTICE: This script was written specifically for this user, for use on this particular machine. Running this on another machine may cause damage to your operating system.

Run FRST or FRST64 and press the Fix button just once and wait.
If the tool needs a restart please make sure you let the system restart normally and let the tool complete its run after restart.
The tool will make a log on the Desktop (Fixlog.txt). Please attach or post it to your next reply.

Note: If the tool warned you about an outdated version please download and run the updated version.

fixlist.txt

Thanks

Ron