Installation Failed To Start

[mcnoo]

I am also having the same problem of 'failure to start. I am running Win10 2004 updated 6/19/2020. Tried to update using the .exe and the onboard update: same msg. So I've run the Support tool, but forgot to run the log before cleaning. Attached the files.

The program has been completely uninstalled to my knowledge. The only files left are the C:\Program Files\Malwarebytes\Anti-Malware\ig3, the MBAMinstallerService, Uninstallplugin.dll and possibly some registry files?

I was having some performance issues with Win10 being slow to start and slow overall. Also the same with Firefox updates after the version 2004, I assume.

mbst-clean-results.txt mbst-grab-results.zip

[Porthos]

44 minutes ago, mcnoo said:

I was having some performance issues with Win10 being slow to start and slow overall. Also the same with Firefox updates after the version 2004, I assume.

You can reinstall and just disable ransomware protection if you wish.

1. Download the offline installer from : https://downloads.malwarebytes.com/file/mb4_offline

2. Run the installer turn off ransomware protection and restart the computer.

  Can you please let me  know if that worked ?

[mcnoo]

No good. I used Revo Uninstaller to get rid of all the leftovers, restarted, and tried the offline installer. Same 'failure to start'.

[Porthos]

2 minutes ago, mcnoo said:

No good. I used Revo Uninstaller to get rid of all the leftovers, restarted, and tried the offline installer. Same 'failure to start'.

Try disabling ESET fully first.

[mcnoo]

Still unable.

[Porthos]

2 hours ago, mcnoo said:

I am also having the same problem of 'failure to start.

Were you using the paid version?

Only things I can think of from the logs is ESET, Acronis active protection and if you Killer network drivers are fully up to date.

[mcnoo]

I have one of the first year or so 'lifetime licenses'. I keep my software (other than Windows) up daily. I was having issues with Killer until this morning. I fixed it after restart. Also my Bluetooth Qualcomm 8027.11ac had a problem after using a driver from DriverMax last week so I got the latest updates (hah!) from Dell. Not saying that that was the problem, but all disappeared after Malwarebytes was uninstalled. I think there is something in the backyard somewhere that is keeping me from installing your program, but I really don't know for sure.

[Porthos]

4 minutes ago, mcnoo said:

Also my Bluetooth Qualcomm 8027.11ac had a problem after using a driver from DriverMax last week

That is why people should never use driver update software.

5 minutes ago, mcnoo said:

hat is keeping me from installing your program

No "MY" software, I am only a volunteer.

I will ask @AdvancedSetup to examine your logs and see if there is something I missed.

[mcnoo]

Thank you so much. I don't think it was the driver update software, I think it was Malwarebytes.

[Porthos]

11 minutes ago, mcnoo said:

Also my Bluetooth Qualcomm 8027.11ac had a problem

If i remember 2004 has an issue with some Bluetooth devices. Do not remember which at the moment.

[AdvancedSetup]

Hello @mcnoo

 

Your computer is running ESET antivirus which may be preventing the installation of a service used to install Malwarebytes

Error creating MBAMInstallerService, status: 5

That means ACCESS DENIED

You also have UAC disabled which means an installer may not always call the proper installation method.

I would recommend enabling UAC (User Account Control)

 

Would also recommend uninstalling Bonjour

What exactly is mDNSResponder.exe?

https://www.groovypost.com/howto/howto/what-is-mdnsresponder-exe-and-why-is-it-running/

MDNSResponder, also known as Bonjour, is Apple’s native zero-configuration networking process for Mac that was ported over to Windows and associated with MDNSNSP.DLL.  On a Mac or iOS device, this program is used for networking nearly everything.  On Windows, this process is only necessary for sharing libraries via iTunes and other Mac applications like the Apple TV that were ported to Windows.  Bonjour allows different computers running iTunes to communicate with each other regardless of network configuration, this is because it enables automatic network discovery.

What Is mDNSResponder.exe / Bonjour and How Can I Uninstall or Remove It?
https://www.howtogeek.com/howto/6456/what-is-mdnsresponder.exe-bonjour-and-how-can-i-uninstall-or-remove-it/

 

System errors:
=============
Error: (07/16/2020 10:37:30 AM) (Source: Service Control Manager) (EventID: 7006) (User: )
Description: The ScRegSetValueExW call failed for ImagePath with the following error:
Access is denied.

This error is often caused by some type of security software being set too stringent and blocking certain programs from updating the Registry. Do not know for sure but it may be ESET but you also have SpyShelter Premium which might also be the reason.

 

Error: (07/16/2020 10:33:41 AM) (Source: Server) (EventID: 2505) (User: )
Description: The server could not bind to the transport \Device\NetBT_Tcpip_{22E98ADF-9723-40D0-BCCC-4D908F4A17B5} because another computer on the network has the same name.  The server could not start.

You appear to have another computer in the home or a virtual computer using the same name.  The current one shows to be named: DESKTOP-HGE4CB1   Please check and make sure you don't have any other computers with this same name or go ahead and rename this computer to something else.

The older original version of WinPatrol was a pretty good program but the current version has added a lot of marketing and changes to the point that many Experts that used to recommend the program no longer recommend it. Take a look at that program too and make sure it's not blocking the Malwarebytes installation service from being created.

I do see that there are still some entries showing Malwarebytes is at least partially installed or your logs are old.

HKU\S-1-5-21-1579375433-4220225756-2211441874-1001\...\Run: [Malwarebytes Tray Application] => C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
HKU\S-1-5-21-1579375433-4220225756-2211441874-1001\...\Run: [Malwarebytes] => C:\Program Files\Malwarebytes\Anti-Malware\mbam.exe

 

You also have some elements of McAfee installed but not seeing McAfee installed from the Add/Remove section.
Task: {49005881-4E07-4B1F-A19C-124274C4CF53} - System32\Tasks\McAfeeLogon => C:\Program Files\Common Files\McAfee\Platform\McUICnt.exe
Task: {500C5961-D5B6-4ECE-BD51-75D44B72837B} - System32\Tasks\McAfee\DAD.Execute.Updates => C:\Program Files\Common Files\McAfee\DynamicAppDownloader\DADUpdater.exe

You're using CCleaner which most Experts no longer recommend either as it too sold out and no longer runs the way it used to.
https://www.howtogeek.com/172820/beginner-geek-what-does-ccleaner-do-and-should-you-use-it/
https://www.howtogeek.com/361112/heres-what-you-should-use-instead-of-ccleaner/

 

DriverMax - the free version is going to almost always be an issue. The paid version might be okay and if it works for you great. Finding and keeping your system updated via direct Manufacturer updates is the best choice, but the choice is still yours.
It constantly runs as a service and consumes resources even if you have no updates for months

 

 

ATTENTION: ==> Could not access BCD.  -> The boot configuration data store could not be opened.
Access is denied.

This is also very rare. It may be due to one or more other security programs.

 

 

For now I would recommend that you disable ESET, SpyShelter Premium, and WinPatrol
Then run the Malwarebytes MBST tool again and do a Removal of Malwarebytes again. When it asks to reinstall the program decline. Don't allow it and just let it reboot.

Then once again, disable ESET, SpyShelter Premium, and WinPatrol  and run the Offline installer for Malwarebytes again and let me know if you're still getting an error installing.

 

[AdvancedSetup]

You can also look at this possible fix

https://support.microsoft.com/en-gb/help/17588/windows-fix-problems-that-block-programs-being-installed-or-removed

 

[mcnoo]

I did most of what you suggested. I cleaned up the registry of malwarebytes, mbam, macafee.

I think its spyshelter that's the problem. I found numerous actions had a red hand instead of a check, so I changed them. BCDedit.exe had a red hand, so I changed it, too.

I renamed the computer, but I don't have another or virtual, so I don't know what up with that.

I went in and cleaned the registry of malwarebytes, mbam, macafee.

I like WinPatrol so I can be sure that the program I want to startup, do. I've even used it when a program doesn't start its service. Works for almost all.

CCleaner I mostly use for cleaning the Firefox internet files, not much else.

Turned off ESET and spyshelter, installed Malwarebytes. Walah! Works.

Sorry we had to resort to the paid staff to fix this, ha ha. Thanks so much for your expert help.

[exile360]

That makes sense, it looks like SpyShelter, depending on which version you're using, includes a HIPS and a firewall along with a bunch of application control/anti-executable stuff.  It's the type of heavy-handed security app you'll probably want to temporarily disable any time you're going to install or upgrade any app you trust, otherwise it's very likely to interfere.

[Porthos]

55 minutes ago, mcnoo said:

Sorry we had to resort to the paid staff to fix this, ha ha. Thanks so much for your expert help.

I involved staff because I have had grief/negative responses when asking users to remove a program(s) from the computer. I try to avoid that when possible.

Glad it is now working for you.

[AdvancedSetup]

Great, glad that worked out for you @mcnoo

I would highly recommend you review the following topic. No need to rush to do things but maybe bookmark the site and read, review, and watch some videos as you have time. In the long run it will help you learn more about your computer and how to protect it.

https://forums.malwarebytes.com/topic/258363-tips-to-help-protect-from-infection/

Take care and hope you have good weekend

Stay safe out there