Win10 logon and other slowdown

[RonHarr]

After having uploaded logs and having had no reply no reply to my earlier post on this issue I would like to know if the "fix" for Win7 reported elsewhere is applicable to win 10. The fix involves downloading an earlier Malwarebytes version, uninstalling the current offender, installing the older version and blocking (for now) automatic updates to the engine.

Will the older Win7 version work as a replacement for the Win10 version I have or is it somehow different?

RonH

[Malwarebytes]

***This is an automated reply***

Hi,

Thanks for posting in the Malwarebytes 3 Help forum.

 

If you are having technical issues with our Windows product, please do the following: 

Spoiler

If you haven’t already done so, please run the Malwarebytes Support Tool and then attach the logs in your next reply:

NOTE: The tools and the information obtained is safe and not harmful to your privacy or your computer, please allow the programs to run if blocked by your system.

1. Download Malwarebytes Support Tool
2. Once the file is downloaded, open your Downloads folder/location of the downloaded file
3. Double-click mb-support-X.X.X.XXXX.exe to run the program
   • You may be prompted by User Account Control (UAC) to allow changes to be made to your computer. Click Yes to consent.
4. Place a checkmark next to Accept License Agreement and click Next
5. You will be presented with a page stating, "Get Started!"
6. Click the Advanced tab
   
    
7. Click the Gather Logs button
   
    
8. A progress bar will appear and the program will proceed with getting logs from your computer
   
    
9. Upon completion, click a file named mbst-grab-results.zip will be saved to your Desktop. Click OK
   
    
10. Please attach the file in your next reply. Before submitting your reply, be sure to enable "Notify me of replies" like so:
       

Click "Reveal Hidden Contents" below for details on how to attach a file:
 

Spoiler

To save attachments, please click the link as shown below. You can click and drag the files to this bar or you can click the choose files, then browse to where your files are located, select them and click the Open button.

 

One of our experts will be able to assist you shortly.

 

If you are having licensing issues, please do the following: 

Spoiler

For any of these issues:

• Renewals
• Refunds (including double billing)
• Cancellations
• Update Billing Info
• Multiple Transactions
• Consumer Purchases
• Transaction Receipt

Please contact our support team at https://support.malwarebytes.com/community/consumer/pages/contact-us to get help

If you need help looking up your license details, please head here: https://support.malwarebytes.com/docs/DOC-1264 

 

Thanks in advance for your patience.

-The Malwarebytes Forum Team

[RonHarr]

Answered my own, probably dumb, question by uninstalling current version and installing "old" win7 fix version. Solves the slowdown and related issues so whatever the gremlins are, they afflict win7 and win10 in idiopathic ways. 

[RonHarr]

Spoke too soon. Problems reemerge as before and are only solved by disabling Ransomware protect. Maybe this narrows the problem down a bit?

RonH

[Firefox]

Hello and Welcome...

Sorry for the delay, its possible that @dcollins is away on vacation or something...

Please provide a fresh set of logs and perhaps @LiquidTension can have a look at them for you.

[RonHarr]

Hi Firefox

Here are the logs with Ransomware protect on and running.

Thanks

RonH

mbst-grab-results2.zip

[Firefox]

Have you by chance place exclusions in your Norton Internet Security for Malwarebytes?

Malwarebytes for Windows antivirus exclusions list

[RonHarr]

Yes, I've added all the recommended exclusions to each of them.

[Firefox]

OK, lets wait on either @LiquidTension or @AdvancedSetup so they can review the logs and see what may be going on here.

[LiquidTension]

Hi RonHarr,

Thank you for the logs.

Could you try disabling Fast Startup and check if this has any impact on the issue:
https://www.tenforums.com/tutorials/4189-turn-off-fast-startup-windows-10-a.html

[RonHarr]

Fast startup is disabled, I turned this off a long time ago. I also just verified in the registery settings for Hiberboot and it is set to zero, i.e. disabled.

[exile360]

I have seen other reports from some users having the same problem with the Ransomware Protection component causing hangs/long delays during system shutdown and/or logon with the latest version of Malwarebytes.  So far the only workaround I know of is to disable Ransomware Protection just before you plan to shut down your system to avoid the issue.

[RonHarr]

Thanks for the suggestion. That would certainly solve the slow logon but not the slow response during normal windows operation which is also part of the problem.

RonH

[exile360]

Ah, I see, so it's also impacting system performance while the system is running, not just during startup/shutdown.  Yes, in that case the only mitigation (aside from installing a previous build) would be to keep the Ransomware Protection component disabled, at least until this issue is addressed, hopefully in the next release.  Honestly I generally keep it turned off anyway since it is by far the least proactive protection component in Malwarebytes since it only monitors process behavior for ransomware activity, meaning you'd actually have to already be infected for it to detect a threat/attack on your system, and I know that the other more proactive modules are very unlikely to allow that to happen (especially the Exploit Protection component, since the vast majority of ransomware attacks start with an exploit that attempts to execute some malicious script and/or downloader to download and launch the actual ransomware executable on the system, meaning the ransomware itself should never even reach your system in the first place as long as Exploit Protection is active, not to mention all the other layers/modules that it would have to bypass to get that far to the stage of execution into memory and attempting to encrypt your files/data) and it does slow things down a bit, even when not having any bugs/issues like the one you're experiencing just by its very nature.

Edited January 9, 2019 by exile360

[RonHarr]

Thanks for the interesting information. I was unaware of the way in which Ransomware protect operated and feel more assured about the protection provided by the other modules. I found that when I reverted to a previous build (the one that putatively fixes the Win7 issue) the Ransomware problem remained. This suggests to me that there is some gremlin at work that is well interwoven with Malwarebytes and Win10 but I'm no software expert. 

[exile360]

You could try performing a clean install to see if that helps.  It's possible that one of the newer drivers, DLLs or other core files remained when you installed the previous version resulting in the behavior persisting even after installing the previous release.

To perform a clean install just follow the instructions below; just be sure to opt out of having the tool download/install Malwarebytes for you otherwise it will try to install the latest version again (though that might be worth a shot as well if reinstalling the previous version doesn't correct the issue):

1. Download and run the Malwarebytes Support Tool
2. Accept the EULA and click Advanced tab on the left (not Start Repair)
3. Click the Clean button, and allow it to restart your system and then reinstall your preferred build of Malwarebytes
   

[RonHarr]

I have performed a clean install. I uninstalled Malwarebytes using Revo Uninstaller which cleared all pertinent registry entries and all files and folders. Problem returned as soon as I reinstalled.

 

[exile360]

OK, so the problem is present even with the older build of Malwarebytes?  I guess you'll need to keep Ransomware Protection disabled until this gets fixed then but at least you can install the latest version of Malwarebytes (assuming there are no other issues with it on your system) and hopefully they'll have this resolved in the next release (version 3.7).

[RonHarr]

I have done exactly that. Thanks for all your helpful suggestions, I really appreciate them.

RonH

[exile360]

You're very welcome.  Hopefully they'll have a fixed build out soon and if there's anything else we might assist you with please don't hesitate to let us know.

Thanks

[RonHarr]

Build 3.7.1 does not fix this issue for me on Win10 (build 17134.556). Keeping Ransomware protect off remains the only way that mouse craziness, very slow log on, significantly delayed programme startup are mitigated.