Jump to content

Event Log errors for Malwarebytes

DarthVitrial
 Share

Recommended Posts

DarthVitrial

DarthVitrial

Posted
Posted

My event log has tons of errors that read "The Malwarebytes Service service did not shut down properly after receiving a preshutdown control." (basically one error for every time I shut down or reboot).

Using MBAM 3.7.1 ,component package 1.0.563. Windows 10 May 2019 Update release preview.

Support Tool Log is attached.

mbst-grab-results.zip

Link to post
Share on other sites
  • Staff
Malwarebytes

Malwarebytes

Posted
  • Staff
Posted

***This is an automated reply***

Hi,

Thanks for posting in the Malwarebytes 3 Help forum.

 

If you are having technical issues with our Windows product, please do the following: 

Spoiler

If you haven’t already done so, please run the Malwarebytes Support Tool and then attach the logs in your next reply:

NOTE: The tools and the information obtained is safe and not harmful to your privacy or your computer, please allow the programs to run if blocked by your system.

  1. Download Malwarebytes Support Tool
  2. Once the file is downloaded, open your Downloads folder/location of the downloaded file
  3. Double-click mb-support-X.X.X.XXXX.exe to run the program
    • You may be prompted by User Account Control (UAC) to allow changes to be made to your computer. Click Yes to consent.
  4. Place a checkmark next to Accept License Agreement and click Next
  5. You will be presented with a page stating, "Get Started!"
  6. Click the Advanced tab
    Repair menu_arrows.png
     
  7. Click the Gather Logs button
    Advanced_arrows.png
     
  8. A progress bar will appear and the program will proceed with getting logs from your computer
    Advanced Gather Logs_arrows.png
     
  9. Upon completion, click a file named mbst-grab-results.zip will be saved to your Desktop. Click OK
    Advanced Gather Logs completed_arrows.png
     
  10. Please attach the file in your next reply. Before submitting your reply, be sure to enable "Notify me of replies" like so:
     notify me.jpeg  

Click "Reveal Hidden Contents" below for details on how to attach a file:
 

Spoiler

To save attachments, please click the link as shown below. You can click and drag the files to this bar or you can click the choose files, then browse to where your files are located, select them and click the Open button.

mb_attach.jpg.220985d559e943927cbe3c078b
 

One of our experts will be able to assist you shortly.

 

If you are having licensing issues, please do the following: 

Spoiler

For any of these issues:

  • Renewals
  • Refunds (including double billing)
  • Cancellations
  • Update Billing Info
  • Multiple Transactions
  • Consumer Purchases
  • Transaction Receipt

Please contact our support team at https://support.malwarebytes.com/community/consumer/pages/contact-us to get help

If you need help looking up your license details, please head here: https://support.malwarebytes.com/docs/DOC-1264 

 

Thanks in advance for your patience.

-The Malwarebytes Forum Team

Link to post
Share on other sites
  • 2 weeks later...
exile360

exile360

Posted
Posted

OK, thanks.  I did spot a couple of potential issues in your logs so we'll begin there to see if that helps at all.

First, I noticed that your User Account Control setting is not configured to the system default option: 

UAC Settings
==================================
EnableLUA:            On
Consent Prompt Behavior Admin:    Off

Please begin by reconfiguring UAC back to its default setting.  Instructions on how to do so can be found on this page.  Those instructions are for Windows 7, 8 and 8.1, however the steps should be basically the same for Windows 10.  If you aren't able to find it let me know and I'll provide additional assistance with it.  Once reset to default, restart your computer and then allow Malwarebytes and everything else to load up fully then shut the system down again to test and see if the issue still persists.

Next, I noticed that you have a couple of Killer Networking devices in your system.  Some of their older drivers have been known to cause issues with Malwarebytes so I would suggest making sure they are up to date.  You may check with your system manufacturer to see if they offer any newer drivers or you may install the latest directly from Killer Networking themselves here.  After you've updated your drivers go ahead and restart your system (which will likely be required after updating the drivers anyway) then allow it to start fully once more and then shut it down again to test and see if the issue is now corrected or not.

If neither of those options helped then please do the following:

  1. Download and run the Malwarebytes Support Tool
  2. Accept the EULA and click Advanced tab on the left (not Start Repair)
  3. Click the Clean button, and allow it to restart your system and then reinstall Malwarebytes, either by allowing the tool to do so when it offers to on restart, or by downloading and installing the latest version from here

Once all of that is complete please let me know if you are still experiencing the problem or not.

Thanks

Link to post
Share on other sites
exile360

exile360

Posted
Posted

OK, good.  Yes, those entries it was showing errors about were the main reason I wanted the logs after running the clean tool.  It looks like it did end up removing them in the end so it should be good now, at least as far as those files/folders are concerned; whether this will correct the errors or not remains to be seen.

Anyway, go ahead and reinstall it now.  You can download a fresh copy of the latest build from here.  Once you have it installed, reboot your system and allow it to start up fully then restart it again after Malwarebytes has fully loaded up and check to see if the error still shows up in your Event Viewer logs and let us know how it goes.

Thanks

Link to post
Share on other sites
exile360

exile360

Posted
Posted

Well that's a bummer, I was really hoping the clean install would fix it.  I've asked some other experts to take a look, hopefully one of them has an idea about what might be causing this and how to fix it.  If not then I'll grab someone from the Support team to investigate further.  What's strange is I remember an issue similar to this many months ago but it was fixed in a later Malwarebytes release.  That's why I was hopeful that the clean install of the latest build would correct the issue but I guess it must have a different cause this time.

Link to post
Share on other sites
  • Root Admin
AdvancedSetup

AdvancedSetup

Posted
  • Root Admin
Posted

Please try disabling this task

Task: {C7970DD0-A2F8-40CF-BE4B-F49F8DFCCCD5} - System32\Tasks\Free Standby Memory => D:\downloads\ISLC v1.0.1.1\Intelligent standby list cleaner ISLC.exe (Wagnardsoft -> Wagnardsoft)

 

You're also modifying DNS which may be part of the issue as Windows Defender and other log entries are showing issues locating network resources.

You can also run the following fix which will run some diagnostics as well as some repairs and clean up temp files and do a basic reset of the network stack.

Please download Farbar Recovery Scan Tool and save it to your desktop.


Please download the attached fixlist.txt file and save it to the Desktop.
NOTE. It's important that both files, FRST or FRST64 and fixlist.txt are in the same location or the fix will not work.

NOTICE: This script was written specifically for this user, for use on this particular machine. Running this on another machine may cause damage to your operating system.

Run FRST or FRST64 and press the Fix button just once and wait.
If the tool needs a restart please make sure you let the system restart normally and let the tool complete its run after restart.
The tool will make a log on the Desktop (Fixlog.txt). Please attach or post it to your next reply.

Note: If the tool warned you about an outdated version please download and run the updated version.

fixlist.txt

Thanks

Ron

 

Link to post
Share on other sites
  • Root Admin
AdvancedSetup

AdvancedSetup

Posted
  • Root Admin
Posted

Okay, let me get some new logs please.

 

Please download Farbar Recovery Scan Tool and save it to your desktop.

Note: You need to run the version compatible with your system.
You can check here if you're not sure if your computer is 32-bit or 64-bit

  • Double-click to run it. When the tool opens click Yes to disclaimer.
  • Press Scan button.
  • It will make a log (FRST.txt) in the same directory the tool is run. Please attach it to your reply.
  • The first time the tool is run, it also makes another log (Addition.txt). Please attach it to your reply as well.

Ron

 

Link to post
Share on other sites
  • Root Admin
AdvancedSetup

AdvancedSetup

Posted
  • Root Admin
Posted

Don't see an obvious reason for the Malwarebytes issue, but even Windows Defender is having an issue too.

Windows Defender:
===================================
Date: 2019-05-01 17:12:26.726
Description:
Windows Defender Antivirus scan has been stopped before completion.
Scan ID: {D0AD8212-46D1-4632-959E-8C9E3DA79DEB}
Scan Type: Antimalware
Scan Parameters: Quick Scan

Date: 2019-05-01 17:10:33.557
Description:
Windows Defender Antivirus scan has been stopped before completion.
Scan ID: {C1695D8A-B2BC-4E94-AFAA-639400F11764}
Scan Type: Antimalware
Scan Parameters: Quick Scan

Date: 2019-05-03 17:48:03.380
Description:
Windows Defender Antivirus Real-Time Protection feature has encountered an error and failed.
Feature: Behavior Monitoring
Error Code: 0x80508023
Error description: The program could not find the malware and other potentially unwanted software on this device.
Reason: Antimalware security intelligence has stopped functioning for an unknown reason. In some instances, restarting the service may resolve the problem.

Date: 2019-05-02 14:06:03.581
Description:
Windows Defender Antivirus Real-Time Protection feature has encountered an error and failed.
Feature: Behavior Monitoring
Error Code: 0x80508023
Error description: The program could not find the malware and other potentially unwanted software on this device.
Reason: Antimalware security intelligence has stopped functioning for an unknown reason. In some instances, restarting the service may resolve the problem.

 

Let me have you run the following just to double-check there is not some other type of infection. I don't think so but best to check.

 

Please download and run the following Kaspersky antivirus scanner to remove any found threats

Kaspersky Virus Removal Tool

Let me know if it finds anything or not

Link to post
Share on other sites
DarthVitrial

DarthVitrial

Posted
  • Author
Posted

I think those Defender errors are caused by me trying to manually run Defender after Malwarebytes already registered itself with the system as my default antivirus.

Ran the full Kaspersky tool, nothing found.

I also ran another sfc and dism /scanhealth scan, no errors found.

 

 

Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
 Share
Go to topic listing

  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.