Jump to content

MBAM freeze the PC


Recommended Posts

  • Replies 78
  • Created
  • Last Reply

Top Posters In This Topic

  • Staff

Alright. We'll try it manuall then:

  • Click Start and open My Computer
  • Right-click on C: and select Properties
  • Click on the Tools tab
  • Under Error-checking click the Check Now... button
  • Mark the box next to Automatically fix file system errors and Scan for and attempt recovery of bad sectors
  • When the message box pops up, click the Schedule disk check button and restart your computer

Link to post
Share on other sites

thanks srtools1980v

Currently I am not believing in any infection by virus or malware due to:

-conditions of utilisation of this PC

-analysis provided by NIS2009 which is now an acceptable solution

-analysis provided by Spybot

-analysis provide by MBAM (when it runs)

-freeze arrive also with Safemode where they is a limited and known number of programms running

exception of MBAm freezes, this PC works correcly.

Link to post
Share on other sites

I am confident in the expert.

But start to believe that the problem is difficult to diagnose that I can understand.

If they is any way for me to provide more assistance in the investigation process, then I will be pleased to provide it.

Here are the last news.

- purge protected fie from norton

- purge all temporary internet file using purgeIE Pro (which is an excellent tool)

- doesn't use the Pc during thae MBAM search

- run successfully 4 quicks scan for each option seperatly (memory,register,files, heuristics)

apply the purge process from the above

- run succesfully 1 quick scan with all option

apply once again the purge process

- run a complete scan which was close to be fine but unfornutaly freeze at the end during the euristic search (probably 1 minute before finishing)

My conclusions for now :

- freezes still occurs

- not predictables at all ( file, position in the cycle...)

Is it a version with a begguging mode which coul help for our investigation?

Link to post
Share on other sites

start Windows in safe mode (F8)

run succesfully 2 complete scans, each scan

- was considerably fastest than previous complete run ( 20' insted of 65')

- mention 6 files "super_pi_mod.exe as a malware.packet.krunchy (I don't understand that this expression mean).

Question

- Why the speed is significantly faster?

- Why this malware (assuming it is not a false positive) was discover here and not in all others previous complete "runs"

Link to post
Share on other sites

  • Staff

@Lecopi: I'm fairly certain that those packer detections were indeed false positives. Please restore the items from quarantine, update Malwarebytes', then scan again to see if they are still detected. If they are then please refer to this post: Read before reporting a false positive!

and post the info here: False Positives

As for the freezing issue, since it seems so intermittent in nature it would be hard to determine the cause. I would like to run one more diagnostic tool to have a look and see if I can figure it out. After that I'll get the official support staff involved to assist you in sorting it out.

Please download Sysinternals Autoruns from here.

  • Save Autoruns.exe to your desktop and double-click it to run it.
  • Once it starts, please press the Esc key on your keyboard.
  • Now that scanning is stopped, click on the Options button at the top of the program and select Verify Code Signatures
  • Once that's done press the F5 key on your keyboard, this will start the scan again, this time let it finish.
  • When it's finished, please click on the File button at the top of the program and select Save and save the Autoruns.arn file to your desktop and close Autoruns.
  • Now right-click on the Autoruns.arn file located on your desktop and highlight Sent To and select Compressed (zipped) Folder
  • Please attach the Autoruns.zip file you just created to your next post.

Link to post
Share on other sites

Sure, go ahead and test that. At least that will eliminate another possibility :) .

All NORTON products (NIS, NSW, Norton GHOST 2003) totaly removed from the PC.

Bad news : MBAM long run still freeze

I was very commited to te fact that it was a anti_virus conflict.

NEXT STEP :Will go with your suggestion

Link to post
Share on other sites

- after removing Norton, I Uninstall and re-install MBAM according the procedure.

Results : unpredictable freze ( 2 on 4 runs)

Uninstall spybot S&D

Results : unpredictable freeze ( 3 on 5)

Before uninstalling Intel graphic accelerator, I would like to have an idea about how to -reinstall it properly.

Link to post
Share on other sites

  • Staff

You aren't removing Intel Graphic Accelerator, you are uninstalling Intel Application Accelerator. It is a non default system driver that is unnecessary and has been known to cause issues with many programs in the past. I highly recommend removing it and not reinstalling it.

Be sure to reboot after uninstalling it, then try scanning with MBAM again and see how things go.

If necessary, I can guide you on reinstalling it should you choose to do so :) .

Link to post
Share on other sites

Hello.

thanks again for your help.

Intel storage manager uninstalled -

PC rebooted

MBAM still freeze

- quick run was OK

- long run freeze

But this change from time to time. (quick run could also freeze)

I dont'expect having any virus /malware on this PC.

Until now, the only way that I have to run MBAM 100% successfully is to run it in SAFE MODE (F8).

Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
 Share

  • Recently Browsing   0 members

    • No registered users viewing this page.

Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.