Jump to content

Computer freezes often when I scan for malware

RunRabbit
 Share
Go to solution Solved by Maurice Naggar,

Recommended Posts

RunRabbit

RunRabbit

Posted
Posted

Hi malwarebytes support!

When I do my daily scans for malware, my computer sometimes freezes to the point where I have to cold boot it to be able to use it. I am unsure if I have been hacked, so I hope you can take a look at my logs, just so I can be certain of it. I have scanned with almost every tool out there, like malwarebytes and KVRT and MSRT, and it always comes back negative, but I thought I would have a proffessional look at my farbar logs, so I can make sure.

I hope you can help.

Kind regards, RunRabbit

Addition.txt AdwCleaner[S00].txt FRST.txt malwarebytes.txt

Link to post
Share on other sites
Maurice Naggar

Maurice Naggar

Posted
Posted (edited)

Hi :welcome:

I would like a report set for review.   This is a report only.

Please download MALWAREBYTES MBST Support Tool

Once you start it click Advanced >>> then   Gather Logs

 Have patience till the run has finished.

Upload an archive once it is done. Attach the mbst-grab-results.zip from the Desktop.

 

  • Please attach  mbst-grab-results.zip    to your reply
  • The IP block actions by Malwarebytes are keeping the machine safe from potential threats.
  • We do need the support zip reports to see more detail  ( the screen grabs just do not have full details + those screens give no clue as to what processes are running.
Edited by Maurice Naggar
Link to post
Share on other sites
Maurice Naggar

Maurice Naggar

Posted
Posted

At this point, it appears that some settings on Malwarebytes are beyond default-standard & that with having Comodo antivirus are what may be leading to stalls or freeze-ups. To help alleviate that several tips below. Also, the Malwarebytes version is not the very latest release.
I would also suggest that when you do a manual on-demand scan with Malwarebytes, that your first Close all web browsers beforehand.

So we start with getting latest Malwarebytes version. The one now on machine is vers 4.5.12.204. The latest is ers 4.5.14.210.
Do a Check for Update using the Malwarebytes Settings >> General tab.

See this Support Guide https://support.malwarebytes.com/hc/en-us/articles/360042187934-Check-for-updates-in-Malwarebytes-for-Windows

When it shows a new version available, Accept it and let it proceed forward.  Be sure it succeeds.

If prompted to do a Restart, just please follow all directions.
Next
Launch Malwarebytes for Windows.
Click the gear-like Settings icon on the top-right bar.
On the General tab
look down to "Manual scan performance" impact
click the selection "Manual scans take less priority ( less performance impact"

click the Security column tab
Look down to "Scan options"
on the line "Scan for rootkits) set that to the left-side ( off position)
That is the normal default position.

 

 turn OFF "Use expert system algorithm" 

In Malwarebytes >>> Settings >>> Security tab

image.png.df6a5d1968018c6f00b6e7a050b55789.png (904×652)

 

 Scroll down to

"Windows Security Center"

Click the selection to the left  for the line "Always register Malwarebytes in the Windows Security Center".
{ We want that to be set as Off   .... be sure that line's  radio-button selection is all the way to the Left.  thanks. }

[That is typically not available on 'free' mode Malwarebytes setups.]

😃.
 

Link to post
Share on other sites
Maurice Naggar

Maurice Naggar

Posted
Posted (edited)
Quote

-Scan Summary-
Scan Type: Threat Scan
Scan Initiated By: Manual
Result: Completed
Objects Scanned: 286881
Threats Detected: 0
Threats Quarantined: 0
Time Elapsed: 2 min, 7 sec

👍 

-Software Information-
Version: 4.5.12.204
Components Version: 1.0.1725

😁 👍

Edited by Maurice Naggar
Link to post
Share on other sites
  • Solution
Maurice Naggar

Maurice Naggar

Posted
  • Solution
Posted

Just to let you know, I do not see indications of malware infection ( according to contents of Farbar FRST reports.)

But I do notice some aborts of the Comodo antivirus. 

Error: (08/26/2022 06:32:46 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: cavwp.exe, version: 12.2.2.8012, time stamp: 0x600ac1e4
Faulting module name: platform.dll, version: 6.5.0.962, time stamp: 0x5db1a003
Exception code: 0xc0000005
Fault offset: 0x0000000000008ed1
Faulting process id: 0x1e64
Faulting application start time: 0x01d8b9040f11c87f
Faulting application path: C:\Program Files\COMODO\COMODO Internet Security\cavwp.exe
Faulting module path: C:\Program Files\COMODO\COMODO Internet Security\platform.dll
Report Id: 45a565e7-0222-4866-adb2-aba9b3ca2207
Faulting package full name: 
Faulting package-relative application ID:

Error: (08/26/2022 06:32:44 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: cavwp.exe, version: 12.2.2.8012, time stamp: 0x600ac1e4
Faulting module name: platform.dll, version: 6.5.0.962, time stamp: 0x5db1a003
Exception code: 0xc0000005
Fault offset: 0x0000000000008de1
Faulting process id: 0x1e64
Faulting application start time: 0x01d8b9040f11c87f
Faulting application path: C:\Program Files\COMODO\COMODO Internet Security\cavwp.exe
Faulting module path: C:\Program Files\COMODO\COMODO Internet Security\platform.dll
Report Id: 5094472d-af22-4ff0-a193-7b600f4df974
Faulting package full name: 
Faulting package-relative application ID:

I would recommend to check the Comodo and be sure that it is up-to-date & is the latest release from Comodo.

Link to post
Share on other sites
Maurice Naggar

Maurice Naggar

Posted
Posted

You are welcome. 😃 I would recommend getting a readout report as to update status of some key apps.

                               This tool is safe.   Smartscreen is overly sensitive.

Right-click  with your mouse on the Securitycheck.exe  and select "Run as administrator"   and reply YES to allow to run & go forward
Wait for the scan to finish. It will open in a text file named SecurityType.txt. Close the file.  Attach it with your next reply.
You can find this file in a folder called SecurityCheck, C:\SecurityCheck\SecurityCheck.txt

Link to post
Share on other sites
Maurice Naggar

Maurice Naggar

Posted
Posted

Thank you @RunRabbit

I mis-spoke before about Malwarebytes. There is a newer version you need to get.

Do a Check for Update using the Malwarebytes Settings >> General tab.

See this Support Guide https://support.malwarebytes.com/hc/en-us/articles/360042187934-Check-for-updates-in-Malwarebytes-for-Windows

When it shows a new version available, Accept it and let it proceed forward.  Be sure it succeeds.

If prompted to do a Restart, just please follow all directions.

Here are the items highlighted by SecurityCheck that need attention.

COMODO Internet Security Premium v.12.2.2.8012   Warning! Download Update

Microsoft Office Enterprise 2007 v.12.0.4518.1014   Warning! This software is no longer supported. Please use latest Microsoft Office, Office Online or LibreOffice

Far Manager 3 (x64) v.3.0.5959   Warning! Download Update

K-Lite Mega Codec Pack 17.1.0 v.17.1.0   Warning! Download Update

CCleaner you do not need. Ever since Piriform sold it to another entity, it has not been recommended by most in the pc security community/

You can use the Microsoft CLEANMGR built-in disc cleanup utility.

Let me know if you are ready to wrap up this case.

Link to post
Share on other sites
Maurice Naggar

Maurice Naggar

Posted
Posted

This system is good-to-go. This here is for tools cleanup.

Please download KpRm by kernel-panik and save it to your desktop.

  • right-click kprm_(version).exe and select Run as Administrator.
  • Read and accept the disclaimer.
  • When the tool opens, ensure all boxes under Actions are checked.
  • Under Delete Quarantines select Delete Now, then click Run.
  • Once complete, click OK.
  • A log may open in Notepad titled kprm-(date).txt.  I do not need it. Just close Notepad if it shows up.

Delete mb-support-1.8.7.918.exe
Delete mbst-grab-results.zip on the Desktop

Consider using PatchMyPC, keep all your software up-to-date - https://patchmypc.com/home-updater#download

Keep your system and programs up to date. Several programs release security updates on a regular basis to patch vulnerabilities. Keeping your software patched up prevents attackers from being able to exploit them to drop malware.

I am marking this case for closure.
I wish you all the best. Stay safe. 

Link to post
Share on other sites
Maurice Naggar

Maurice Naggar

Posted
Posted

Glad we could help.

If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this topic with your request.

This applies only to the originator of this thread. Other members who need assistance please start your own topic in a new thread.

Please review the following to help you better protect your computer and privacy Tips to help protect from infection

Thank you

 

 

Link to post
Share on other sites
Guest
This topic is now closed to further replies.
 Share
Go to topic listing

  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.