Shell_NotifyIcon Error

[Not Bob]

A few minutes after the program (registered) loads and places an icon in the system tray, I get the following error message as a Desktop (Windows XP) pop-up:

Any suggestions?

[exile360]

Greetings and welcome to Malwarebytes

Please try the following to see if it resolves the issue for you:

Windows XP:

• Click on Start and select Control Panel
  
• Open Add/Remove Programs
  
• Uninstall Malwarebytes' Anti-Malware
  
• Restart your computer very important
  
• Download and run mbam-clean.exe from here
  
• It will ask to restart your computer, please allow it to do so very important
  
• After the computer restarts, temporarily disable your Anti-Virus and install the latest version of Malwarebytes' Anti-Malware from here
  
  • Note: You will need to reactivate the program using the license you were sent via email if using the Pro version
    
  • Launch the program and set the Protection and Registration. Then go to the UPDATE tab if not done during installation and check for updates.
    Restart the computer again and verify that MBAM is in the task tray if using the Pro version. Now setup any file exclusions as may be required in your Anti-Virus/Internet-Security/Firewall applications and restart your Anti-Virus/Internet-Security applications. You may use the guides posted in the FAQ's here or ask and we'll explain how to do it.
    

Please post back with your results.

Thanks

[Not Bob]

Nope, didn't work.

What I did discover is that if I acknowledge the error message (by clicking 'OK'), then manually launch the GUI (along with the 'starttray' parameter), the problem doesn't surface.

Hmmm.

[exile360]

Please download and install the Service Pack 6 for Visual Basic 6.0 from here to see if it helps.

Post back with your results.

Thanks

[Not Bob]

No change.

What's interesting, at least to me, is that it takes a few minutes to happen.

[exile360]

What other security software do you have installed (ie antivirus, firewall, antispyware etc)?

[Not Bob]

Anti-virus is NOD32 (v4.x), firewall is XP's built-in.

It's getting kinda late, but as soon as I have time I'm gonna play with my Startup programs to see if any make a difference.

[exile360]

If you've not already done so, then please exclude the following files from NOD32 and then restart your PC to see if it helps:

• C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe
  
• C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
  
• C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
  
• C:\Program Files\Malwarebytes' Anti-Malware\zlib.dll
  
• C:\Program Files\Malwarebytes' Anti-Malware\mbam.dll
  
• C:\Program Files\Malwarebytes' Anti-Malware\mbamext.dll
  
• C:\Documents and Settings\All Users\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\rules.ref
  
• C:\Windows\System32\drivers\mbam.sys
  
• C:\Windows\System32\drivers\mbamswissarmy.sys
  

If that does not resolve it then do the following and I'll take a look at what's running at startup to search for any potential conflicts:

Create an Autoruns Log:

• Please download Sysinternals Autoruns from here and save it to your desktop.
  
  • Note: If using Windows Vista or Windows 7 then you also need to do the following:
    
    1. Right-click on Autoruns.exe and select Properties
       
    2. Click on the Compatibility tab
       
    3. Under Privilege Level check the box next to Run this program as an administrator
       
    4. Click on Apply then click OK
       

  [*]Double-click Autoruns.exe to run it.

  [*]Once it starts, please press the Esc key on your keyboard.

  [*]Now that scanning is stopped, click on the Options button at the top of the program and select Verify Code Signatures

  [*]Once that's done press the F5 key on your keyboard, this will start the scan again, this time let it finish.

  [*]When it's finished, please click on the File button at the top of the program and select Save and save the Autoruns.arn file to your desktop and close Autoruns.

  [*]Right click on the Autoruns.arn file on your desktop and hover your mouse over Send To and select Compressed (zipped) Folder

  [*]Attach the Autoruns.zip folder you just created to your next reply

[Not Bob]

You asked for it, you got it...

AutoRuns.zip

[exile360]

Hello again

Do you still have any Comodo software installed?

If not, then do the following:

Delete Autostart Entries Using Autoruns:

Please open Autoruns.exe again and allow it to perform its scan. Once it finishes please proceed with the following:

• Click on the Drivers tab and right click each of the following entries and select Delete:
  
  
  
  
  
  • bdisk
    
  • CBUfs
    

  [*]Once that is complete, restart your computer.

If that does not resolve the issues then please do the following:

Disable Autostart Entries Using Autoruns:

Please open Autoruns.exe again and allow it to perform its scan. Once it finishes please proceed with the following:

• Click on the Logon tab and click the checkbox on the left side of each of the following so that they are unchecked:
  
  
  
  
  
  • CardScanAgent
    
  • IndexSearch
    
  • SetDefPrt
    
  • SSBkgdUpdate
    
  • PSTF
    

  [*]Once that is complete, restart your computer.

Check to see if things are working as they should now and post back with your results.

Thanks

[marktreg]

Exile360 has requested that I post this extra information.

I have seen PerfectDisk Boot Time Defragmentation interfere with MBAM's protection module before. Please try exile360's instructions first. But if they do not fix the problem, please do the following:

Disable Autostart Entries Using Autoruns:

Please open Autoruns.exe again and allow it to perform its scan. Once it finishes please proceed with the following:

• Click on the Boot Execute tab and click the checkbox on the left side of the following so that it is unchecked:
  
  
  
  • 
    
  • PDBoot.exe
    

  [*]Once that is complete, restart your computer.

Check to see if things are working as they should now and post back with your results.

Thanks

[FutonDog]

Hi, Not Bob: I have also experienced the same issue: the error is raised on the desktop (the application doesn't have to be open), i.e., real-time protection shuts down, and the MBAM systray icon disappears if you hover your pointer over it. To reenable the MBAM service, you have to relaunch the application and reenable the real-time protection module. The odd thing about my experience, at least, is that this has been a very occasional and sporadic error. In the year that I've used MBAM, I've had this occur many times, but again, we're talking a duration of one year, with my machine running almost continuously. I have not experienced this on ver. 1.45 yet, only 1.44, but, of course, 1.45 was released only three weeks ago today. In the year that I've run MBAM, I've used Norton Internet Security to provide my firewall and AV, so stable platforms there, aside from application/signature updates. I also run on XP. My XP is updated to SP3. I surely have not welcomed this error when it has occurred, but because of its relatively low incidence, I have regarded it as an annoynance, its resolution relatively painless and easy. I focus my time on checking my AV/firewall and MBAM logs for suspicious activity. I do not intend my reporting my experience to discount the importance of your situation and experience. Instead I offer it up to let you know that you are not alone on this. As soon as I saw the title of your thread, I was immediately "there." You have described the situation accurately. Good luck on its resolution (I'll keep monitoring this post for I'm real curious about this one). Exile is a good one!

[Not Bob]

Thanks to all, for the suggestions!

As an engineer (science, not train) from way back, I learned to make corrections to a problem, one variable at a time.

- Disabling the bdisk and CBUFs drivers resulted in the dreaded BSOD. Fortunately, I always create System Restore Points, so I was able to boot into XP's "Last Known Good Configuration." Whew!

- Disabling PDBoot.exe, while not causing a BSOD, did nothing. It was a good thought, anyway!

- Disabling the recommended programs, one by one, resulted in no change until I got to PSTF (PS Tray Factory, a handy little utility that sorts and organizes System Tray icons). While the subsequent reboot resulted in MBAM working as it should, PSTF returned to my Startup group. (I had not, at this point, disabled the PSTF "Run at the Windows startup" option.) Another reboot, again with PSTF loading at startup, and the MBAM problem was back.

For whatever reason, there's a problem with MBAM and PSTF both loading at system startup, at essentially the same time. If I load EITHER program manually, after loading the other at startup, things work.

My workaround: One of the programs that I load at startup is a program called "Macro Express." All I did was disable the PSTF "Run at the Windows startup" option and create a macro, for PSTF, that loaded along with Macro Express, which loaded later that MBAM.

Again, THANKS TO ALL!

[exile360]

Excellent, I'm glad you figured it out

As for the BSOD with the Comodo drivers, that's not good, especially if you don't have any Comodo tools installed. I'd highly recommend contacting them at their forum located here and asking them how to remove the drivers without causing a BSOD.

Also, for future reference, when you use Autoruns to remove something and the computer won't start afterwards, you should still be able to boot into Safe Mode, run Autoruns, and then re-add what was disabled previously.

I do apologize though, as I didn't realize that removing Comodo's leftovers would cause a BSOD, as I said, you really should contact them to let them know about it as I'm certain they don't want to be responsible for causing users BSOD's when their drivers are removed/disabled.

Thanks B)

[Not Bob]

Sorry, I guess I wasn't too clear... I've got Comodo Backup installed.

What really threw me was not being able to boot into Safe Mode, just another BSOD!

[exile360]

Ah, well that makes sense B)

That's why I stated only to remove them if you didn't have any Comodo products installed, I didn't want to break anything that you had installed (of course, I still can't imagine why it caused a BSOD, bad form in my opinion ).

I'm not sure why they need their drivers to load in Safe Mode either, as most AV's don't even do this (although some do unfortunately, which sort of defeats the purpose of Safe Mode).

Anyway, thanks for letting me know and I'm glad you were able to get it up and running again.

[Not Bob]

1.50 has been released, and this bug is still there.

C'mon, guys.

Any near-future plans for a fix?

[Splitshaft]

I registered on the forum just to post the shell error just started for me with V1.51 upgrade.

Malwarebytes loads normally at boot up and later shuts its protection down with the shell error. Malwarebytes must be restarted and the protections turned back on because something has shut them off when the shell error occurred.

I think Malwarebytes may be being affected by a virus on my PC that it can not detect designed to turn off Malwarebytes.

Would the people who make Malwarebytes know why their software turns its self off? I am a licensed user. I run Norton 360, Windows Defender, and Spybot with Malwarebytes and Malwarebytes is the only program failing to run properly on my XP Professional PC.

I abandoned McAfee and switched to Norton because McAfee will not run with anything other program than its self. I don't own a PC to run only one application. If Malwarebytes cannot run in an environment with other programs maybe it is time to abandon Malwarebytes like McAfee.

[daledoc1]

Hi, and welcome, splitshaft:

This is a pretty old thread and there is a newer version of MBAM out, so it *might* be preferable to start a new thread (or to have a mod/admin split this off).

In the interim, though....

Sorry to hear that you are having trouble with MBAM.

Until one of the experts checks in, can you please provide some basic information about your system:

• What is your Operating System (XP, Vista, or Win7)?
  
• Is your OS 32-bit or 64-bit?
  
• What is your OS Service Pack?
  
• I understand you are running the current version of MBAM (current is 1.51.0.1200), but is it FREE or PRO?
  
• What MBAM database version did you use (current is 7002)?
  
• What version of Norton and any other security software do you have?
  
• Have you recently been infected, or is the computer showing any abnormal behavior to suggest that it might be infected?
  

I am just a home user, not MBAM staff, so before I refer you to the engineers for more involved troubleshooting, we will probably try some basic stuff first....

Thanks!

daledoc1

[Splitshaft]

•What is your Operating System (XP, Vista, or Win7)?

XP professional

•Is your OS 32-bit or 64-bit?

32-bit

•What is your OS Service Pack?

3

•I understand you are running the current version of MBAM (current is 1.51.0.1200), but is it FREE or PRO?

It isn't free, I paid $25 for the license

•What MBAM database version did you use (current is 7002)?

7002

•What version of Norton and any other security software do you have?

Norton 360 Version 5.0

•Have you recently been infected, or is the computer showing any abnormal behavior to suggest that it might be infected?

My PC is running normally. Malwarebytes only malfunctioned when updating to V1.51

Thanks,

Splitshaft

[daledoc1]

Thanks for the info.

I know you mentioned:

I think Malwarebytes may be being affected by a virus on my PC that it can not detect designed to turn off Malwarebytes.

Infection is certainly 1 reason why MBAM may not run, but it may be that Norton and MBAM do not have the proper permissions and exclusions for one another.

1) You say you are currently running Windows Defender and Norton, but that you previously ran McAfee.

When you uninstalled McAfee, did you use their removal tool found here: http://service.mcafee.com/FAQDocument.aspx?lc=1033&id=TS100507 ???

It is sometimes necessary to run it twice, rebooting each time, and even to run it in safe mode to help clear out all remnants.

So, the very first thing I would suggest is to make sure McAfee is totally gone.

2) The next thing to try is probably a clean install of MBAM, taking care to follow the recommended order of the steps to set proper exclusions.

Here is how:

MBAM Clean Re-installation Instructions:

NOTE: You need to be logged in as an administrator.

1. Download and run mbam-clean.exe from here.

Note:It will ask to restart your computer; please allow it to do so -- very important!

2. After the computer restarts, temporarily disable your Anti-Virus (AV) and install the latest version of Malwarebytes' Anti-Malware from here. (Note: Ignore any promos or ads for other software/products at the mirror sites; and there is no fee to download MBAM Free.)

Note: You will need to reactivate the program using the license you were sent via email, if you are using the PRO version.

3. Launch MBAM (and set the Protection and Registration, if you are using the PRO version).

4. Go to the UPDATE tab, if not done during installation, and check for updates.

5. Restart the computer again (and, if you are using the PRO version, verify that the MBAM icon is in the system tray).

6. Set up any file exclusions as may be required in your Anti-Virus/Internet-Security/Firewall applications. You may use the guides posted in the FAQs here. Specific help for Norton 360 is here.

7. Restart your Anti-Virus/Internet-Security applications.

8. Add the program folder(s) for your AV and FW to MBAM's "Ignore List". Set Exclusions for Norton 360 in Malwarebytes' Anti-Malware:

• Open Malwarebytes' Anti-Malware and click on the Ignore List tab
  
• Click the Add button on the lower left
  
• In the small browse window that opens, navigate to C:\Program Files and click once on Norton 360 and click OK
  
• Close Malwarebytes' Anti-Malware
  

9. Set up your scheduled updates & scheduled scans (this only applies to the PRO version). Scheduler help is available here.

10. Run an MBAM Quick Scan.

---------------------

Please post back and let us know if this works.

Thanks for your patience,

daledoc1

[Firefox]

Splitshaft a simple clean install of malwarebytes may take care of your problem, as well as entering exceptions into your Norton 360 antivirus software. See Below for instructions:

Please do the following:

• 
  
• Download and run mbam-clean.exe from here
  
• It will ask to restart your computer, please allow it to do so very important
  
• After the computer restarts, temporarily disable your Anti-Virus and install the latest version of Malwarebytes' Anti-Malware from here
  
  • 
    
  • Note: You will need to reactivate the program using the license you were sent via email if using the Pro version
    
  • Launch the program and set the Protection and Registration. Then go to the UPDATE tab if not done during installation and check for updates.
    Restart the computer again and verify that MBAM is in the task tray if using the Pro version. Now setup any file exclusions as may be required in your Anti-Virus/Internet-Security/Firewall applications and restart your Anti-Virus/Internet-Security applications. You may use the guides posted in the FAQ's here or ask and we'll explain how to do it.
    

Norton 360

First setup exclusions as in the instructions in the FAQ located Here For Norton 360

Then set exclusions in your Malwarebytes software....

Set Exclusions for Norton 360 in Malwarebytes' Anti-Malware:

• Open Malwarebytes' Anti-Malware and click on the Ignore List tab
  
• Click the Add button on the lower left
  
• In the small browse window that opens, navigate to C:\Program Files and click once on Norton 360 and click OK
  
• Close Malwarebytes' Anti-Malware
  

If you have any problems, please post back and one of the Experts will assist you

Thanks,

[daledoc1]

Great minds think alike!

@ splitshaft:

Although mine was formatted a bit differently from Firefox's, we were both actually suggesting the same thing - a clean reinstall of MBAM.

I'm just overly OCD and tend to favor numbered and bulleted lists.

Feel free to follow whichever set makes more sense to you.

Cheers!

daledoc1