Jump to content

An issue with running Steam games because of Windows Management Service.

RoVibes

By RoVibes
in Resolved Malware Removal Logs

 Share

Recommended Posts

RoVibes

RoVibes

Posted
Posted

Hello,

I have issues with games from Steam not starting up because a service called Windows Management Service is running. I found on the web that if I disable the service at windows startup (from msconfig -> Startup) that would fix the issue.

When I disabled the service and restarted my laptop the games were working perfectly, but after I was done playing I wanted to do a scan with Malwarebytes. I tried opening it but it came up with an error saying "Malwarebytes could not establish a connection to service" or something along those lines.

I re-enabled the service and restarted the laptop. After it booted successfully I tried to open Malwarebytes and it opened without any issues.I started a scan, waited for it to finish (it didn't find any threats) and after that I tried to start a game from Stream but again the game didn't want to start.

It seems like if I want to play games I'd need to disable the Windows Management Service (Which I believe Malwarebytes relies on) and stop Malwarebytes which is really inconvenient.

I was wondering is there a workaround that I could have Malwarebytes running in the background (not performing a scan btw) and play games at the same time ?

Details:

Malwarebytes version 4.5.14

Games I tried starting:

PUBG & Counter Strike Global Offensive

Machine:

Lenovo Y700 Laptop

 

Thank you in advance :)

Link to post
Share on other sites
Porthos

Porthos

Posted
Posted

@RoVibes

Please do the following so that we may take a closer look at your installation for troubleshooting:

NOTE: The tools and the information obtained is safe and not harmful to your privacy or your computer, please allow the programs to run if blocked by your system.

 

  • Download the Malwarebytes Support Tool
  • In your Downloads folder, open the mb-support-x.x.x.xxx.exe file
  • In the User Account Control pop-up window, click Yes to continue the installation
  • Run the MBST Support Tool
  • In the left navigation pane of the Malwarebytes Support Tool, click Advanced
  • In the Advanced Options, click Gather Logs. A status diagram displays the tool is Getting logs from your machine
  • A zip file named mbst-grab-results.zip will be saved to your desktop, please upload that file on your next reply

Thanks

Link to post
Share on other sites
  • 3 weeks later...
Maurice Naggar

Maurice Naggar

Posted
Posted

Hello @Rovibes
How is the situation on your Windows system?
I regret you did not get a reply after 1 October.
I have a concern that you turned off a very important Windows service. If I am correct, this needs attention right away.

On the Taskbar SEARCH-box type in 

MSCONFIG

and press OK or Enter.

You should see the General tab. Click the General tab. It should have Normal startup selected (in the radio-box=selection)

IF it does not, then you click on Normal startup.

now Click on Services tab. To get it's display of Windows services.

Keep a written list of any changes from my list of services below. That way you and I have a reference document.

Look at the bottom line Hide all Microsoft services

IF and only IF its is checkmarked, then un-check it.

the list of services may be shown in non-alphabetical order, so ....

Look at the heading titled "Service". Click on it as needed so the list is sorted and top of list starts with the "A" services.

You can toggle as needed to get the desired order.

IF any of below services are NOT shown, don't panic & do not stop, just write down the info for me and proceed with the others !

Then using the scroll-bar scroll down the list

Look for Base Filtering Engine. Click on the checkbox so that it is checked ( that is needed so that service is ENABLED).

Look for COM+ Event System. Is it shown? Is it checked? If not, click on that checkbox to checkmark.

Look for COM+ System Application. Is it shown? Is it checked? If not, click on that checkbox to checkmark.

Look for Remote Procedure Call (RPC) Locator. Is it shown ? Is it checked? If not, click on that checkbox to checkmark.

Look for RPC Endpoint Mapper. Is it shown ? Is it checked? If not, click on that checkbox to checkmark.

Look for Windows Firewall. Is it shown ? Is it checked? If not, click on that checkbox to checkmark.

Look for Windows Management Instrumentation. Is it shown ? Is it checked? If not, click on that checkbox to checkmark.

When done, press the Apply button, and the OK button.

You're likely to be prompted to Restart Windows, do so.

If not prompted, you need to do a Logoff and Restart of Windows.

ALSO:
I need for you to have pen and paper handy and take notes on what follows, please.

Press and hold the Windows-flag-key on keyboard and tap the *R* key to get the RUN menu option.

type in 

services.msc

and press Enter key.


Scroll down the list. Look for "Remote Procedure Call ( RPC )".

Does it show in the list as Running?
If it does not, then click the line "Remote Procedure Call ( RPC ): to be sure it is selected

look on the upper left corner and click on Start service.


Scroll down the list. Look for "Windows management Instrumentation".

Does it show in the list as Running?
If it does not, then click the line "Windows management Instrumentation: to be sure it is selected

look on the upper left corner and click on Start service.

Close the window when done.
Kindly relay to me all details. Thank you.

Link to post
Share on other sites
RoVibes

RoVibes

Posted
  • Author
Posted
On 10/18/2022 at 12:47 AM, Maurice Naggar said:

Hello @Rovibes
How is the situation on your Windows system?
I regret you did not get a reply after 1 October.
I have a concern that you turned off a very important Windows service. If I am correct, this needs attention right away.

On the Taskbar SEARCH-box type in 

MSCONFIG

and press OK or Enter.

You should see the General tab. Click the General tab. It should have Normal startup selected (in the radio-box=selection)

IF it does not, then you click on Normal startup.

now Click on Services tab. To get it's display of Windows services.

Keep a written list of any changes from my list of services below. That way you and I have a reference document.

Look at the bottom line Hide all Microsoft services

IF and only IF its is checkmarked, then un-check it.

the list of services may be shown in non-alphabetical order, so ....

Look at the heading titled "Service". Click on it as needed so the list is sorted and top of list starts with the "A" services.

You can toggle as needed to get the desired order.

IF any of below services are NOT shown, don't panic & do not stop, just write down the info for me and proceed with the others !

Then using the scroll-bar scroll down the list

Look for Base Filtering Engine. Click on the checkbox so that it is checked ( that is needed so that service is ENABLED).

Look for COM+ Event System. Is it shown? Is it checked? If not, click on that checkbox to checkmark.

Look for COM+ System Application. Is it shown? Is it checked? If not, click on that checkbox to checkmark.

Look for Remote Procedure Call (RPC) Locator. Is it shown ? Is it checked? If not, click on that checkbox to checkmark.

Look for RPC Endpoint Mapper. Is it shown ? Is it checked? If not, click on that checkbox to checkmark.

Look for Windows Firewall. Is it shown ? Is it checked? If not, click on that checkbox to checkmark.

Look for Windows Management Instrumentation. Is it shown ? Is it checked? If not, click on that checkbox to checkmark.

When done, press the Apply button, and the OK button.

You're likely to be prompted to Restart Windows, do so.

If not prompted, you need to do a Logoff and Restart of Windows.

ALSO:
I need for you to have pen and paper handy and take notes on what follows, please.

Press and hold the Windows-flag-key on keyboard and tap the *R* key to get the RUN menu option.

type in 

services.msc

and press Enter key.


Scroll down the list. Look for "Remote Procedure Call ( RPC )".

Does it show in the list as Running?
If it does not, then click the line "Remote Procedure Call ( RPC ): to be sure it is selected

look on the upper left corner and click on Start service.


Scroll down the list. Look for "Windows management Instrumentation".

Does it show in the list as Running?
If it does not, then click the line "Windows management Instrumentation: to be sure it is selected

look on the upper left corner and click on Start service.

Close the window when done.
Kindly relay to me all details. Thank you.

No worries about the delay.

These are the results that I wrote.

MSCONFIG:

  • Base Filtering Engine - Shown - Checked - Running
  • COM+ Event System - Shown - Checked - Running
  • COM+ System Application - Shown - Checked - Stopped
  • Remote Procedure Call (RPC) Locator - Shown - Checked - Stopped
  • RPC Endpoint Mapper - Shown - Checked - Running
  • Windows Firewall - Not shown
  • Windows Management Instrumentation - Shown - Checked - Running

---After the restart---

services.msc

  • Remote Procedure Call(RPC) - Running - Automatic
  • Windows Management Instrumentation - Running - Manual

Thank you for the reply !

Link to post
Share on other sites
Maurice Naggar

Maurice Naggar

Posted
Posted (edited)

This is one way to visually check protection status on Windows Security.
From the Start menu, select Settings, then select Update and Security.

Next, look at the left-side menu & select Windows Security

image.png.53b8290f51fb52ad1f67f2be5d1a7198.png

 

Next, In Windows Security section: Click on the grey button Open Windows Security

image.thumb.png.770ff10e37da546f33963da571bd3378.png

Now, click on the shield Virus and threat protection

By the way, when you see a green check-mark on your display, it means a good status and that protection is on.

 

image.thumb.png.d3c40d161bda6630f463e83ce53f9782.png 

On the next display, look at all the options.  Look down the list and see "Check for Updates" .

You can click on that to have the system check for updates for Windows Defender.

 

Edited by AdvancedSetup
Corrected font issue
Link to post
Share on other sites
RoVibes

RoVibes

Posted
  • Author
Posted
11 minutes ago, Maurice Naggar said:

This is one way to visually check protection status on Windows Security.
From the Start menu, select Settings, then select Update and Security.

Next, look at the left-side menu & select Windows Security

image.png.53b8290f51fb52ad1f67f2be5d1a7198.png

 

Next, In Windows Security section: Click on the grey button Open Windows Security

image.thumb.png.770ff10e37da546f33963da571bd3378.png

Now, click on the shield Virus and threat protection

By the way, when you see a green check-mark on your display, it means a good status and that protection is on.

 

image.thumb.png.d3c40d161bda6630f463e83ce53f9782.png 

On the next display, look at all the options.  Look down the list and see "Check for Updates" .

You can click on that to have the system check for updates for Windows Defender.

 

I've checked for updates for windows defender and everything is updated.

Also everywhere there is a green checkmark. CS:GO still doesn't want to start if that service is running but Malwarebytes works. If I stop the service from msconfig and restart my laptop CS:GO works perfectly but Malwarebytes doesn't start.

Link to post
Share on other sites
  • Root Admin
AdvancedSetup

AdvancedSetup

Posted
  • Root Admin
Posted

Hello @RoVibes

Please note that ALL Windows applications want and use WMI (Windows Management Instrumentation)

Pardon the intrusion. Please create a new System Restore Point and then run the following.

 

Can you please do the following?

  • Download the Malwarebytes Support Tool
  • In your Downloads folder, open the mb-support-x.x.x.xxx.exe file
  • In the User Account Control pop-up window, click Yes to continue the installation
  • Run the MBST Support Tool
  • In the left navigation pane of the Malwarebytes Support Tool, click Advanced
  • In the Advanced Options, place a checkmark on all of the Repair System entries.
  • Then click on the Repair System button and allow it to run and restart the system.
     

image.png



After the restart please do the following

  • Run the MBST Support Tool again.
  • In the left navigation pane of the Malwarebytes Support Tool, click Advanced
  • In the Advanced Options, click the CLEAN button and follow the onscreen instructions to reinstall Malwarebytes
  • NOTE: Please have patience as it can take a while to remove and reinstall. The computer will restart to complete


    image.png

 

After the restart please do the following

  • Run the MBST Support Tool one more time.
  • In the left navigation pane of the Malwarebytes Support Tool, click Advanced
  • In the Advanced Options, click Gather Logs. A status diagram displays the tool is Getting logs from your machine
  • A zip file named mbst-grab-results.zip will be saved to the All Users' desktop, please upload that file on your next reply

    image.png

Thank you

 

 

  • Like 1
Link to post
Share on other sites
RoVibes

RoVibes

Posted
  • Author
Posted
16 hours ago, AdvancedSetup said:

Hello @RoVibes

Please note that ALL Windows applications want and use WMI (Windows Management Instrumentation)

Pardon the intrusion. Please create a new System Restore Point and then run the following.

 

Can you please do the following?

  • Download the Malwarebytes Support Tool
  • In your Downloads folder, open the mb-support-x.x.x.xxx.exe file
  • In the User Account Control pop-up window, click Yes to continue the installation
  • Run the MBST Support Tool
  • In the left navigation pane of the Malwarebytes Support Tool, click Advanced
  • In the Advanced Options, place a checkmark on all of the Repair System entries.
  • Then click on the Repair System button and allow it to run and restart the system.
     

image.png



After the restart please do the following

  • Run the MBST Support Tool again.
  • In the left navigation pane of the Malwarebytes Support Tool, click Advanced
  • In the Advanced Options, click the CLEAN button and follow the onscreen instructions to reinstall Malwarebytes
  • NOTE: Please have patience as it can take a while to remove and reinstall. The computer will restart to complete


    image.png

 

After the restart please do the following

  • Run the MBST Support Tool one more time.
  • In the left navigation pane of the Malwarebytes Support Tool, click Advanced
  • In the Advanced Options, click Gather Logs. A status diagram displays the tool is Getting logs from your machine
  • A zip file named mbst-grab-results.zip will be saved to the All Users' desktop, please upload that file on your next reply

    image.png

Thank you

 

 

Hello,

Thank you for the reply.

I have attached the results after running the Repair System and Clean.

mbst-grab-results.zip

Link to post
Share on other sites
  • Root Admin
AdvancedSetup

AdvancedSetup

Posted
  • Root Admin
Posted

You're quite welcome.

 

Let's go ahead and do some clean-up work and remove the tools and logs we've run.

Please download KpRm by kernel-panik and save it to your desktop.

  • right-click kprm_(version).exe and select Run as Administrator.
  • Read and accept the disclaimer.
  • When the tool opens, ensure all boxes under Actions are checked.
  • Under Delete Quarantines select Delete Now, then click Run.
  • Once complete, click OK.
  • A log will open in Notepad titled kprm-(date).txt.
  • Please attach that file to your next reply. (not compulsory)

 

  1. Recommend using a Password Manager for all websites, etc. that require a password. Never use the same password on more than one site.
    https://www.howtogeek.com/240255/password-managers-compared-lastpass-vs-keepass-vs-dashlane-vs-1password/
  2. Make sure you're backing up your files https://forums.malwarebytes.com/topic/136226-backup-software/
  3. Keep all software up to date - PatchMyPC - https://patchmypc.com/home-updater#download
  4. Keep your Operating System up to date and current at all times - https://support.microsoft.com/en-us/windows/windows-update-faq-8a903416-6f45-0718-f5c7-375e92dddeb2
  5. Further tips to help protect your computer data and improve your privacy: https://forums.malwarebytes.com/topic/258363-tips-to-help-protect-from-infection/ 
  6. Please consider installing the following Content Blockers for your Web browsers if you haven't done so already. This will help improve overall security

Malwarebytes Browser Guard

uBlock Origin

 

Further reading if you like to keep up on the malware threat scene: Malwarebytes Blog  https://blog.malwarebytes.com/

Hopefully, we've been able to assist you with correcting your system issues.

Thank you for using Malwarebytes

 

Link to post
Share on other sites
RoVibes

RoVibes

Posted
  • Author
Posted
10 minutes ago, AdvancedSetup said:

You're quite welcome.

 

Let's go ahead and do some clean-up work and remove the tools and logs we've run.

Please download KpRm by kernel-panik and save it to your desktop.

  • right-click kprm_(version).exe and select Run as Administrator.
  • Read and accept the disclaimer.
  • When the tool opens, ensure all boxes under Actions are checked.
  • Under Delete Quarantines select Delete Now, then click Run.
  • Once complete, click OK.
  • A log will open in Notepad titled kprm-(date).txt.
  • Please attach that file to your next reply. (not compulsory)

 

  1. Recommend using a Password Manager for all websites, etc. that require a password. Never use the same password on more than one site.
    https://www.howtogeek.com/240255/password-managers-compared-lastpass-vs-keepass-vs-dashlane-vs-1password/
  2. Make sure you're backing up your files https://forums.malwarebytes.com/topic/136226-backup-software/
  3. Keep all software up to date - PatchMyPC - https://patchmypc.com/home-updater#download
  4. Keep your Operating System up to date and current at all times - https://support.microsoft.com/en-us/windows/windows-update-faq-8a903416-6f45-0718-f5c7-375e92dddeb2
  5. Further tips to help protect your computer data and improve your privacy: https://forums.malwarebytes.com/topic/258363-tips-to-help-protect-from-infection/ 
  6. Please consider installing the following Content Blockers for your Web browsers if you haven't done so already. This will help improve overall security

Malwarebytes Browser Guard

uBlock Origin

 

Further reading if you like to keep up on the malware threat scene: Malwarebytes Blog  https://blog.malwarebytes.com/

Hopefully, we've been able to assist you with correcting your system issues.

Thank you for using Malwarebytes

 

I have attached the file from KpRm.

Thank you !

kprm-20221020225941.txt

Link to post
Share on other sites
  • Root Admin
AdvancedSetup

AdvancedSetup

Posted
  • Root Admin
Posted

Glad we could help.

If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this topic with your request.

This applies only to the originator of this thread. Other members who need assistance please start your own topic in a new thread.

Please review the following to help you better protect your computer and privacy Tips to help protect from infection

Thank you

 

 

Link to post
Share on other sites
Guest
This topic is now closed to further replies.
 Share
Go to topic listing

  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.