Jump to content

Malwarebytes Installation Failure

brandonwanhuansheng
 Share

Recommended Posts

brandonwanhuansheng

brandonwanhuansheng

Posted
Posted

When winget is running the Malwarebytes installation, it looks like something went wrong with the MBSetup Application.

The winget reason is below this image. Normally, My windows have connected to the internet all the time. It looks like Malwarebytes Setup is not working.

I never encountered this error while online installation. Currently, still happening at https://www.malwarebytes.com/mwb-download/thankyou

The real location installer is https://data-cdn.mbamupdates.com/web/mb4-setup-consumer/MBSetup.exe having problems.

From,

Brandon Wan

 

Screenshot (17).png

WinGet-2023-02-28-16-30-29.794.log

Link to post
Share on other sites
  • Root Admin
AdvancedSetup

AdvancedSetup

Posted
  • Root Admin
Posted

Hello @brandonwanhuansheng

I was not able to duplicate that issue. The error in the log shows as 3 which means it could not find the file.

It's possible that some other process or network connectivity issue happened.

 

I just ran it and got the following

image.png

 

MB4 Offline Installer
https://downloads.malwarebytes.com/file/mb4_offline

 

If you like we can take a deeper look and see if we can find a reason for the issue.

Please note it is after 1AM for me so I'm heading to bed but will check back on you some time tomorrow.

 

 

To begin, please do the following so that we may take a closer look at your installation for troubleshooting:

NOTE: The tools and the information obtained are safe and not harmful to your privacy or your computer, please allow the programs to run if blocked by your system.

  • Download the Malwarebytes Support Tool
  • In your Downloads folder, open the mb-support-x.x.x.xxx.exe file
  • In the User Account Control pop-up window, click Yes to continue the installation
  • Run the MBST Support Tool
  • In the left navigation pane of the Malwarebytes Support Tool, click Advanced
  • In the Advanced Options, click Gather Logs. A status diagram displays the tool is Getting logs from your machine
  • A zip file named mbst-grab-results.zip will be saved to the Public desktop, please upload that file on your next reply

Thank you

 

Link to post
Share on other sites
brandonwanhuansheng

brandonwanhuansheng

Posted
  • Author
Posted

Found an existing package already installed. Trying to upgrade the installed package...
Found Malwarebytes [Malwarebytes.Malwarebytes] Version 4.5.24.322
This application is licensed to you by its owner.
Microsoft is not responsible for, nor does it grant any licenses to, third-party packages.
Successfully verified installer hash
Starting package install...
Installer failed with exit code: 3

I am going to run fiddler to troubleshoot what is unable to find.

Link to post
Share on other sites
  • Root Admin
AdvancedSetup

AdvancedSetup

Posted
  • Root Admin
Posted

Our tool makes a call out to download the Farbar program scanner. Something prevented it from downloading too.

Please manually download and run the scanner and attach back the logs for review. @brandonwanhuansheng

 

 

Please download Farbar Recovery Scan Tool and save it to your desktop.

Note: You need to run the version compatible with your system.
You can check here if you're not sure if your computer is 32-bit or 64-bit

  • Double-click to run it. When the tool opens click Yes to disclaimer.
  • Press the Scan button.
  • It will make a log (FRST.txt) in the same directory the tool is run. Please attach it to your reply.
  • The first time the tool is run, it also makes another log (Addition.txt). Please attach it to your reply as well.

Thank you

 

 

Link to post
Share on other sites
  • Root Admin
AdvancedSetup

AdvancedSetup

Posted
  • Root Admin
Posted

My guess is that Avast Antivirus is probably at least part of your issue. Malwarebytes does not always work well with Avast @brandonwanhuansheng

But Avast also appears to be causing errors on the system that are being logged.

AV: Avast Antivirus (Enabled - Up to date) {EB19B86E-3998-C706-90EF-92B41EB091AF}
AV: 360 Total Security (Enabled - Up to date) {FFDC234A-CE9B-08F9-406B-F876951CE066}

 

Error: (02/28/2023 01:54:08 PM) (Source: Microsoft-Windows-PerfNet) (EventID: 2004) (User: DESKTOP-R9JL5VT)
Description: Unable to open the Server service performance object. The first four bytes (DWORD) of the Data section contains the status code.

Error: (02/28/2023 01:49:42 PM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1552) (User: NT AUTHORITY)
Description: User hive is loaded by another process (Registry Lock) Process name: C:\Program Files\Avast Software\Avast\aswToolsSvc.exe, PID: 3284, ProfSvc PID: 1648.

Error: (02/28/2023 12:38:45 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Cryptographic Services failed while processing the OnIdentity() call in the System Writer Object.

Details:
AddWin32ServiceFiles: Unable to back up image of service Malwarebytes Service since QueryServiceConfig API failed

System Error:
The system cannot find the file specified.

 

 

System errors:
=============
Error: (02/28/2023 01:39:34 PM) (Source: Service Control Manager) (EventID: 7022) (User: )
Description: The Energy Server Service queencreek service hung on starting.

Error: (02/28/2023 01:35:26 PM) (Source: Service Control Manager) (EventID: 7022) (User: )
Description: The Delivery Optimization service hung on starting.

Error: (02/28/2023 01:30:05 PM) (Source: BTHUSB) (EventID: 17) (User: )
Description: The local Bluetooth adapter has failed in an undetermined manner and will not be used. The driver has been unloaded.

Error: (02/28/2023 01:29:55 PM) (Source: BTHUSB) (EventID: 17) (User: )
Description: The local Bluetooth adapter has failed in an undetermined manner and will not be used. The driver has been unloaded.

Error: (02/28/2023 01:29:54 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The Backupper Service service failed to start due to the following error:
The service did not respond to the start or control request in a timely fashion.

Error: (02/28/2023 01:29:54 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: A timeout was reached (45000 milliseconds) while waiting for the Backupper Service service to connect.

Error: (02/28/2023 01:29:54 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The DSAService service failed to start due to the following error:
The service did not respond to the start or control request in a timely fashion.

 

 

You might consider temporarily uninstalling Avast and monitoring to make sure you've cleaned up all the errors as best as possible in the Event Logs

Windows 10 comes with Windows Defender so the computer has protection on par with Avast Free already at least while you work on fixing the issues.

You're also running on a system that potentially may not have passed hardware requirements for Windows 10 which could help lead to issue potentially.

BIOS: American Megatrends Inc. 202 09/22/2011
Motherboard: ASUSTeK Computer Inc. U24E
Processor: Intel(R) Core(TM) i7-2620M CPU @ 2.70GHz
Percentage of memory in use: 75%
Total physical RAM: 8102.16 MB
Available physical RAM: 1964.93 MB
Total Virtual: 11046.16 MB
Available Virtual: 3271.31 MB

 

If you like I can also give you a generic clean up script to possibly help clear up some of the issues.

 

Link to post
Share on other sites
brandonwanhuansheng

brandonwanhuansheng

Posted
  • Author
Posted

It looks like I deleted the services. But why is the addition.txt still logging the real error? 

Application errors:
==================
Error: (03/04/2023 08:43:12 AM) (Source: VSS) (EventID: 8193) (User: )
Description: Volume Shadow Copy Service error: Unexpected error calling routine QueryFullProcessImageNameW.  hr = 0x80070006, The handle is invalid.
.


Operation:
   Executing Asynchronous Operation

Context:
   Current State: DoSnapshotSet

Error: (03/04/2023 08:37:36 AM) (Source: Microsoft-Windows-PerfNet) (EventID: 2004) (User: DESKTOP-R9JL5VT)
Description: Unable to open the Server service performance object. The first four bytes (DWORD) of the Data section contains the status code.

Error: (03/04/2023 01:43:25 AM) (Source: ESRV_SVC_QUEENCREEK) (EventID: 2) (User: )
Description: Event-ID 2

Error: (03/04/2023 01:43:25 AM) (Source: ESRV_SVC_QUEENCREEK) (EventID: 2) (User: )
Description: Event-ID 2

Error: (03/04/2023 01:36:34 AM) (Source: VSS) (EventID: 13) (User: )
Description: Volume Shadow Copy Service information: The COM Server with CLSID {4e14fba2-2e22-11d1-9964-00c04fbbb345} and name CEventSystem cannot be started. [0x8007045b, A system shutdown is in progress.
]

Error: (03/04/2023 01:26:05 AM) (Source: VSS) (EventID: 8193) (User: )
Description: Volume Shadow Copy Service error: Unexpected error calling routine QueryFullProcessImageNameW.  hr = 0x80070006, The handle is invalid.
.


Operation:
   Executing Asynchronous Operation

Context:
   Current State: DoSnapshotSet

Error: (03/04/2023 01:20:55 AM) (Source: DSAService) (EventID: 0) (User: )
Description: Service cannot be started. The service process could not connect to the service controller

Error: (03/04/2023 01:09:04 AM) (Source: ESRV_SVC_QUEENCREEK) (EventID: 2) (User: )
Description: Event-ID 2


System errors:
=============
Error: (03/04/2023 09:02:43 AM) (Source: BTHUSB) (EventID: 17) (User: )
Description: The local Bluetooth adapter has failed in an undetermined manner and will not be used. The driver has been unloaded.

Error: (03/04/2023 09:02:27 AM) (Source: BTHUSB) (EventID: 17) (User: )
Description: The local Bluetooth adapter has failed in an undetermined manner and will not be used. The driver has been unloaded.

Error: (03/04/2023 09:01:52 AM) (Source: BTHUSB) (EventID: 17) (User: )
Description: The local Bluetooth adapter has failed in an undetermined manner and will not be used. The driver has been unloaded.

Error: (03/04/2023 09:01:45 AM) (Source: VBoxNetLwf) (EventID: 12) (User: )
Description: The driver detected an internal driver error on \Device\VBoxNetLwf.

Error: (03/04/2023 09:01:43 AM) (Source: BTHUSB) (EventID: 17) (User: )
Description: The local Bluetooth adapter has failed in an undetermined manner and will not be used. The driver has been unloaded.

Error: (03/04/2023 09:00:58 AM) (Source: BTHUSB) (EventID: 17) (User: )
Description: The local Bluetooth adapter has failed in an undetermined manner and will not be used. The driver has been unloaded.

Error: (03/04/2023 09:00:53 AM) (Source: BTHUSB) (EventID: 17) (User: )
Description: The local Bluetooth adapter has failed in an undetermined manner and will not be used. The driver has been unloaded.

Error: (03/04/2023 09:00:44 AM) (Source: BTHUSB) (EventID: 17) (User: )
Description: The local Bluetooth adapter has failed in an undetermined manner and will not be used. The driver has been unloaded.

04-03-2023 08:44:50 Removed Intel(R) Computing Improvement Program
04-03-2023 08:47:27 Removed Intel® Processor Identification Utility - Legacy
The service has been deleted ESRV_SVC_QUEENCREEK and DSAService by the program itself. Why is it still logging the service error?

Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
 Share
Go to topic listing

  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.