Web Protection causing massive micro freezes

[MRBULL]

after 3 months on my pc doing micro freezing and after doing countless hours to determine if it was RAM/HDD/Vid/ CPU  etc it was the WEB PROTECTION seriously ........

After giving up on Hardware cause  because everything checked "OK" and i had no virus,  i had to Reformat my pc reinstalled my apps and stuff slowly , my computer kept doing massive micro freezes after being on for approx 24 hours ( memory leak? ) i used latencymon utility and with that tool i was able to pin point malwarebytes being the root cause , so i turned off each protection 1 by 1 and it was the web protection..

glad i found the problem but it was a painful process not worth dealing with.

so still as of today if your using 4.1.0 and have web protection on , if you leave it on for a long period of time without rebooting pc you might get micro freezes.

[Maurice Naggar]

Hi, 

My name is Maurice. I will be helping and guiding you, going forward on this case.

Let me know what first name you prefer to go by.

I have read your recent posts.  Lets start with just getting a good report set.

 

Please follow my directions as we go along.  Please do not do any changes on your own without first checking with me.

If you will be away for more than 3 consecutive days,  do try to let me know ahead of time, as much as possible.

 

Please only just attach   all report files, etc  that I ask for as we go along.

 

I would appreciate  getting some key details from this machine in order to help you forward.
 NOTE: The tools and the information obtained is safe and not harmful to your privacy or your computer, please allow the programs to run if blocked by your system.

 

Do have patience while the report tool runs.  It may take several minutes.  Just let it run & take its time.  You may want to close your other open windows so that there is a clear field of view.

Download Malwarebytes Support Tool
    
  

Once the file is downloaded, open your Downloads folder/location of the downloaded file
    Double-click mb-support-1.6.1.784.exe  to run the report

 

Once it starts, you will see a first screen with 2 buttons.  Click the one on the left marked "I don't have an open support ticket".

        You may be prompted by User Account Control (UAC) to allow changes to be made to your computer. Click Yes to consent.
        
    Place a checkmark next to Accept License Agreement and click Next

Now click the left-hand side pane "I do not have an open support ticket"

    You will be presented with a page stating, "Get Started!"

    Do NOT use the button “Start repair” !   But look instead at the far-left options list in black.

    Click the Advanced tab on the left column
    
    Click the Gather Logs button
    
    A progress bar will appear and the program will proceed with getting logs from your computer.  Please do have patience.  It takes several minutes to gather.
   
    Upon completion, click a file named mbst-grab-results.zip will be saved to your Desktop. Click OK.  Then Exit the tool.

    Please attach the ZIP file in your next reply.

 

Please know I help here as a volunteer.  and that I am not on 24 x 7.

Help on this forum is one to one.   Again, please be sure to ONLY attach report files  with your reply (s)  as we go along.  Do not do a copy / paste into main body.

Thank you,

Sincerely.

 

[Maurice Naggar]

Hi.  Did you see my reply ?  Are you still with us ?

[MRBULL]

yeah working out of town so slow reply , here's the attached.

 

 

mbst-grab-results.zip

[Maurice Naggar]

Hi.   Thanks for the support tool report.

First thing,  we want to be very sure that Windows Fast Startup is OFF.

https://www.tenforums.com/tutorials/4189-turn-off-fast-startup-windows-10-a.html

 

Then be sure that you do a Windows RESTART.    This Windows was not restarted for some 10 & one-half days.

.

I notice that the reports indicate Windows Defender has identified a couple of trojans on this machine.

This custom script is for  MRBULL   only / for this machine only.
Close and save any open work files before starting this procedure. 

I am sending a   custom Fix script which is going to be used by the FRSTENGLISH tool. They will both work together as a pair.

Please RIGHT-click the (attached file named) FIXLIST and select SAVE  link AS and save it directly ( as is) to the  Downloads  folder

The tool named FRSTENGLISH.exe   tool    is already on the Downloads folder
Start the Windows Explorer and then, to the Downloads folder.

RIGHT click on  FRSTENGLISH    and select RUN as Administrator and allow it to proceed.  Reply YES when prompted to allow to run.
  to run the tool. If the tool warns you the version is outdated, please download and run the updated version.
IF Windows prompts you about running this, select YES to allow it to proceed.

IF you get a block message from Windows about this tool......
click line More info information on that screen
and click button Run anyway on next screen.

on the FRSTENGLISH window:
Click the Fix button just once, and wait.

 
PLEASE have lots and lots of patience when this starts. You will see a green progress bar start. Lots of patience. This run here should be fairly quick.
If you receive a message that a reboot is required, please make sure you allow it to restart normally.
The tool will complete its run after restart.
When finished, the tool will make a log ( Fixlog.txt) in the same location from where it was run.

Please attach the FIXLOG.txt with your next reply later, at your next opportunity   

.

[    2    ]

Keep going down this list.

The Microsoft Safety Scanner  is a free Microsoft stand-alone virus scanner that  can be used to scan for & remove malware or potentially unwanted software from a system.

The download links & the how-to-run-the tool are at this link at Microsoft

https://docs.microsoft.com/en-us/windows/security/threat-protection/intelligence/safety-scanner-download

 

Let me know the result of this.

The log is named MSERT.log 

the log will be at  %SYSTEMROOT%\debug\msert.log   which in most cases is

C:\Windows\debug\msert.log

Please attach that log with your reply.

 

[   3     ]

Keep going down this list.   I would like for you to do one more security scan.

Please read all of these lines first so that it is all clear to you about our plan. I need a one time run of MBAR like listed here, please.

Please download Malwarebytes Anti-Rootkit (MBAR) from this link here
https://downloads.malwarebytes.com/file/mbar/

 

and save it to your desktop.

Doubleclick on the MBAR file and allow it to run.

•Click OK on the next screen, to allow the package to extract the contents of the file to its own folder named mbar.

•mbar.exe will launch automatically. On some systems, this may take a few extra seconds. Please be patient and wait for the program to open.

•After reading the Introduction, click 'Next' if you agree.

•On the Update Database screen, click on the 'Update' button.

•Once you see 'Success: Database was successfully updated' click on 'Next', then click the Scan button.

With some infections, you may see two messages boxes:

1.'Could not load protection driver'. Click 'OK'.
2.'Could not load DDA driver'. Click 'Yes' to this message, to allow the driver to load after a restart. Allow the computer to restart. Continue with the rest of these instructions.

•If malware is found, press the Cleanup button when the scan completes. .

Please attach the log it produces, you'll find the log in that mbar folder as MBAR-log-<2020-date and time>***.txt . Please attach that to your next reply.
  
 

We will do more later.   I notice that Malwarebytes for Windows is not currently installed.

Fixlist.txt

[Maurice Naggar]

Hello @MRBULL    Just checking in.   How is it going ?

[Maurice Naggar]

Good afternoon.   I hope you are well.   Do you still need help ?

Are you still with us ?

[Maurice Naggar]

Due to the lack of feedback, this topic is closed to prevent others from posting here.

If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this topic with your request.

This applies only to the originator of this topic. Other members who need assistance please start your own topic in a new thread.

Tips to help protect from infection

Thanks

 

[Maurice Naggar]

A new program version along with a new Component package for Malwarebytes for Windows was just announced on June 30th 2020.

Please be sure that you see the announcement

https://forums.malwarebytes.com/topic/257102-malwarebytes-41/?do=findComment&comment=1391173

 

Best regards.