Malwarebytes Installation_token Not Found

[ibanana]

Here you go

Addition.txt FRST.txt MTB.txt

[AdvancedSetup]

Please review the following topics and see if you can correct this issue.

Error: (07/21/2020 09:01:24 AM) (Source: Microsoft-Windows-CAPI2) (User: )
Description: Cryptographic Services failed while processing the OnIdentity() call in the System Writer Object.

Details:
AddLegacyDriverFiles: Unable to back up image of binary MsQuic.

System Error:
The resource loader failed to find MUI file.

https://support.unitrends.com/UnitrendsFree/s/article/000006415

Reference 1: https://support.microsoft.com/en-us/help/2009272/system-state-backup-using-windows-server-backup-fails-with-error-syste
Reference 2: https://support.microsoft.com/en-us/help/3209092/event-id-513-when-running-vss-in-windows-server

 

 

[ibanana]

2 hours ago, AdvancedSetup said:

Please review the following topics and see if you can correct this issue.

Error: (07/21/2020 09:01:24 AM) (Source: Microsoft-Windows-CAPI2) (User: )
Description: Cryptographic Services failed while processing the OnIdentity() call in the System Writer Object.

Details:
AddLegacyDriverFiles: Unable to back up image of binary MsQuic.

System Error:
The resource loader failed to find MUI file.

https://support.unitrends.com/UnitrendsFree/s/article/000006415

Reference 1: https://support.microsoft.com/en-us/help/2009272/system-state-backup-using-windows-server-backup-fails-with-error-syste
Reference 2: https://support.microsoft.com/en-us/help/3209092/event-id-513-when-running-vss-in-windows-server

 

 

Seems like I've done it, followed the steps and successfully corrected it. Is there anything I need to do next?

[AdvancedSetup]

Yes, please restart the computer then run a new fresh scan with FRST and post back both new logs @ibanana

 

[AdvancedSetup]

Hello @ibanana

Just following up to see if you can get me some new logs

Cheers

 

[ibanana]

Sorry for my late reply, was busy lately but here it is.

Addition.txt FRST.txt

[AdvancedSetup]

I notice you have CCleaner installed. Just a note that most Experts no longer recommend using the tool. The choice is yours though
https://www.howtogeek.com/361112/heres-what-you-should-use-instead-of-ccleaner/

Do I need a Windows Registry Cleaner?

 

Are you sure you have not enabled or allowed Push Notifications on your browser? The logs indicate you have some enabled in Chrome

https://blog.malwarebytes.com/security-world/technology/2019/01/browser-push-notifications-feature-asking-abused/

Turn notifications on or off - Google Chrome

Web Push notifications in Firefox

 

You also appear to have SoftEther VPN installed at least once upon a time as it has a driver loading for it even though I'm not seeing the actual installer listed anymore. This could be affecting your network stack as well.
S3 Neo_VPN; C:\WINDOWS\System32\drivers\Neo6_x64_VPN.sys [37824 2018-10-19] (SoftEther Corporation -> SoftEther Corporation)

 

ESET Online Scanner appears to have added 2 scheduled tasks on the system. If you're done with ESET and no longer using it then I'd recommend you delete the tasks as well.

Task: {0C0D7B76-6703-4C07-814C-12FBE9D301E0} - System32\Tasks\EOSv3 Scheduler onTime => C:\Users\Teo\Downloads\esetonlinescanner.exe
Task: {34CFADFC-CBBD-48ED-AE68-347F77E4F586} - System32\Tasks\EOSv3 Scheduler onLogOn => C:\Users\Teo\Downloads\esetonlinescanner.exe

 

 

[ibanana]

On 7/23/2020 at 2:24 AM, AdvancedSetup said:

I notice you have CCleaner installed. Just a note that most Experts no longer recommend using the tool. The choice is yours though
https://www.howtogeek.com/361112/heres-what-you-should-use-instead-of-ccleaner/

Do I need a Windows Registry Cleaner?

 

Are you sure you have not enabled or allowed Push Notifications on your browser? The logs indicate you have some enabled in Chrome

https://blog.malwarebytes.com/security-world/technology/2019/01/browser-push-notifications-feature-asking-abused/

Turn notifications on or off - Google Chrome

Web Push notifications in Firefox

 

You also appear to have SoftEther VPN installed at least once upon a time as it has a driver loading for it even though I'm not seeing the actual installer listed anymore. This could be affecting your network stack as well.
S3 Neo_VPN; C:\WINDOWS\System32\drivers\Neo6_x64_VPN.sys [37824 2018-10-19] (SoftEther Corporation -> SoftEther Corporation)

 

ESET Online Scanner appears to have added 2 scheduled tasks on the system. If you're done with ESET and no longer using it then I'd recommend you delete the tasks as well.

Task: {0C0D7B76-6703-4C07-814C-12FBE9D301E0} - System32\Tasks\EOSv3 Scheduler onTime => C:\Users\Teo\Downloads\esetonlinescanner.exe
Task: {34CFADFC-CBBD-48ED-AE68-347F77E4F586} - System32\Tasks\EOSv3 Scheduler onLogOn => C:\Users\Teo\Downloads\esetonlinescanner.exe

 

 

Am I supposed to disable push notifications for Chrome and enable them on IE and set IE temporarily as default app?

[AdvancedSetup]

No, I would disable them on ALL browsers

What about the NEO VPN and the ESET scheduled tasks? Do you want or need them?

 

 

[ibanana]

I have deleted the Neo.sys and scheduled tasks and also my chrome and edge browser notifications were off but I still can't activate my license, installation token not found error again.

mbst-grab-results.zip

[AdvancedSetup]

Sorry for the long delay @ibanana was this resolved?

 

[AdvancedSetup]

Glad we could help.

If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this topic with your request.

This applies only to the originator of this thread. Other members who need assistance please start your own topic in a new thread.

Please review the following for Tips to help protect from infection

Thank you