Version 1.21

[france]

hi have i freezing too on windows vista since version 1.21 is out

[RubbeR DuckY]

We are working on the issue, keep posting information, it is helping us a lot!

[mona7865]

No problems with running a full scan either.

Malwarebytes' Anti-Malware 1.21

Database version: 969

Windows 5.1.2600 Service Pack 3

10:49:33 20/07/2008

mbam-log-7-20-2008 (10-49-33).txt

Scan type: Full Scan (C:\|)

Objects scanned: 125086

Time elapsed: 58 minute(s), 12 second(s)

Memory Processes Infected: 0

Memory Modules Infected: 0

Registry Keys Infected: 0

Registry Values Infected: 0

Registry Data Items Infected: 0

Folders Infected: 0

Files Infected: 0

I forgot to mention I usually run CCleaner before my MBAM scans.

Mona.

[h2002al]

I don't know if this serve but everything is ok with my pc. windows XP sp 3. Below the results:

roland

Malwarebytes' Anti-Malware 1.21

Versioni i baz

[TerryWood]

Hi All

I am using Win XPSP3 Online Armor Free Avast Home & Geswall Pro & Shadow Defender.

I also have had the series of code 5 errors. eventually a series of uninstalls & reinstalls solved it.

On full scan it took 16 minutes to scan my system right up until version 1.21 was released. Thereafter, it takes 40 minutes I have done this 5 times now.

The problem seems to be on the Opera mail files where it effectively grinds to a halt under v1.21. IT DID NOT do this when I used version 1.2.

If I uninstall v1.21 and replace it without the updates it rips through the Mail files at a high speed, much faster than the new version.

I am now going to try it with the virus files updates since version 1.21 was introduced. What I am saying is that is either the new program or one of the updates.

I wil keep you posted

Terry

ps I do not notice any scanner speed increase on my system, in fact a decrease. This is outside of the Opera mail files issue

[Yourhighness]

quick scan:

Malwarebytes' Anti-Malware 1.21

Datenbank Version: 969

Windows 5.1.2600 Service Pack 2

11:30:39 20.07.2008

mbam-log-7-20-2008 (11-30-39).txt

Scan-Methode: Quick-Scan

Durchsuchte Objekte: 37733

Laufzeit: 3 minute(s), 24 second(s)

Infizierte Speicherprozesse: 0

Infizierte Speichermodule: 0

Infizierte Registrierungsschl

[france]

ok i have scan my pc with ccleaner for registrar erreors and 191 errors to registrar base after i rescan with malware bytes and no bug but i have others pc with malware buytes and the real time protection no working error 001 when i can launch the real time protection on windows vista 32bits edition family sacn with ccleaner to registrar error and no errors found i try uninstall malwarebytes and stop the computer and reinstall

result: the real time protection not working again on my second computer i haven't solution for reactivate the real time protection and the maware bytes scan fast or complete bug after 30 secondes in windows vista family edition

all is good on my computer with windows vista ultimate version

[3xist]

Okay...

Now I am getting the random freezing.

Running: Windows XP Home Edition SP3 fully patched.

Goodluck on fixing it Devs.

[mas_pogi]

Hi.

I also encountered that MBAM would just freeze. I tried it in quick scan and full scan. I have Vista SP1.

I never tried in xp though.

I already submiited the minidump. I hope it will be a great help.

Thanks.

Mark

[MarkAW]

So what is a user supposed to do with that information? I have no idea why the shell extension is in use. All I know is, I open the program, click on "Check for updates" and follow the prompts. Then I get the Code5. At least tell the user to uninstall the existing version prior to installing the new one. Or tell us how we should close the shell extension. All I do is scan with the program then click on Exit. Does that leave the shell extension in use?

When that happens all you have to do is go to Windows Task manager and click End Process, and continue with your installation. Nothing hard in doing that now is there.

[Yourhighness]

HKEY_CLASSES_ROOT\AppID\MalwareWipe.EXE (Rogue.MalwareWiped) -> Quarantined and deleted successfully.

Seems MalwareWipe still is fully functional on the system and only the regkey was removed . Should I get Bruce the sample I used for the test run?

[RubbeR DuckY]

Start a thread in the private rooms .

[Yourhighness]

*coughs* and runs off to do as the boss says so .

[mynorgeek]

When that happens all you have to do is go to Windows Task manager and click End Process, and continue with your installation. Nothing hard in doing that now is there.

"Abort, Retry, Ignore" are the options given in the Code 5 dialog. Maybe the error message ought to provide ending the process in task manager as an option. Nothing hard in doing that now is there.

[RubbeR DuckY]

Technically, mbam.exe is terminated during install. Why it is not happening on your system, I do not know. I don't make the installer, Inno Setup does.

[mynorgeek]

I don't make the installer, Inno Setup does.

So I should contact Inno Setup and ask them?

[EricJH]

I can confirm the stalling when doing the Quick Scan under Vista Ultimate SP1 with 1.21. The scan can only be aborted with a reboot. Logging off isn't working

I am using:

Antivir anitvirus

Comodo firewall v 3.0.25.378

I have Spybot's SDwinsec running in the background

Let me know if you need more information

[mynorgeek]

Technically, mbam.exe is terminated during install. Why it is not happening on your system, I do not know. I don't make the installer, Inno Setup does.

From Inno Setup FAQ newsgroups...

"When users uninstall, thex often forget to close it. I see it more the way that your uninstaller should terminate the executable. If it doesn't, I'd call it a bug. How can I display a message box when a file cannot be deleted at uninstall because it is in use?"

"It's better to insert an informational wizard page just before the last page. You can then check for the file in ShouldSkipPage and return a value accordingly."

http://news.jrsoftware.org/news/innosetup/msg59000.html

[sho-dan]

Hello Marcin

Malwarebytes' Anti-Malware 1.21

Database version: 971

Windows 6.0.6001 Service Pack 1

1:25:58 PM 7/20/2008

mbam-log-7-20-2008 (13-25-58).txt

Scan type: Quick Scan

Objects scanned: 34032

Time elapsed: 32 second(s)

Memory Processes Infected: 0

Memory Modules Infected: 0

Registry Keys Infected: 0

Registry Values Infected: 0

Registry Data Items Infected: 0

Folders Infected: 0

Files Infected: 0

Memory Processes Infected:

(No malicious items detected)

Memory Modules Infected:

(No malicious items detected)

Registry Keys Infected:

(No malicious items detected)

Registry Values Infected:

(No malicious items detected)

Registry Data Items Infected:

(No malicious items detected)

Folders Infected:

(No malicious items detected)

Files Infected:

(No malicious items detected)

00000000 0.00000000 MBAMSwissArmy!GetNTFSIndexEntryByName: No index entry for "Application Data" found in file record 88401

00000001 0.00001306 MBAMSwissArmy!EnumerateNTFSDirectory: OpenNTFSFileRecordByName( "C:\Users\Default\Local Settings\Application Data" ) failed with status 0xc0000034

00000002 0.00002109 MBAMSwissArmy!HandleIoctlEnumerate: EnumerateDirectory( "C:\Users\Default\Local Settings\Application Data" ) failed on query operation with status 0xc0000034

00000003 0.01705503 MBAMSwissArmy!GetNTFSIndexEntryByName: No index entry for "Application Data" found in file record 118562

00000004 0.01706488 MBAMSwissArmy!EnumerateNTFSDirectory: OpenNTFSFileRecordByName( "C:\Users\Guest\Local Settings\Application Data" ) failed with status 0xc0000034

00000005 0.01707214 MBAMSwissArmy!HandleIoctlEnumerate: EnumerateDirectory( "C:\Users\Guest\Local Settings\Application Data" ) failed on query operation with status 0xc0000034

00000006 0.02852758 MBAMSwissArmy!ProcessNTFSIndexData: ProcessNTFSAttributeData (INDEX_ALLOCATION) failed with status 0xc0000034

00000007 0.02853498 MBAMSwissArmy!GetNTFSIndexEntryByName: No index entry for "Local Settings" found in file record 79423

00000008 0.02854246 MBAMSwissArmy!EnumerateNTFSDirectory: OpenNTFSFileRecordByName( "C:\Users\Public\Local Settings\Application Data" ) failed with status 0xc0000034

00000009 0.02854993 MBAMSwissArmy!HandleIoctlEnumerate: EnumerateDirectory( "C:\Users\Public\Local Settings\Application Data" ) failed on query operation with status 0xc0000034

00000010 0.03449384 MBAMSwissArmy!GetNTFSIndexEntryByName: No index entry for "Application Data" found in file record 118657

00000011 0.03450257 MBAMSwissArmy!EnumerateNTFSDirectory: OpenNTFSFileRecordByName( "C:\Users\shogun\Local Settings\Application Data" ) failed with status 0xc0000034

00000012 0.03450969 MBAMSwissArmy!HandleIoctlEnumerate: EnumerateDirectory( "C:\Users\shogun\Local Settings\Application Data" ) failed on query operation with status 0xc0000034

00000013 24.47245407 MBAMSwissArmy!HandleIoctlReadFile: Output buffer too small ( "C:\Windows\system32\Config\COMPONENTS" ): 10485760 bytes supplied, 19398656 bytes required

00000014 24.90485954 MBAMSwissArmy!HandleIoctlReadFile: Output buffer too small ( "C:\Windows\system32\Config\SOFTWARE" ): 10485760 bytes supplied, 22020096 bytes required

00000015 25.01861572 MBAMSwissArmy!HandleIoctlReadFile: Output buffer too small ( "C:\Windows\system32\Config\SYSTEM" ): 10485760 bytes supplied, 20447232 bytes required

00000016 26.10724068 MBAMSwissArmy!HandleIoctlReadFile: Output buffer too small ( "C:\hiberfil.sys" ): 10485760 bytes supplied, -540540928 bytes required

00000017 26.12587929 MBAMSwissArmy!HandleIoctlReadFile: Output buffer too small ( "C:\pagefile.sys" ): 10485760 bytes supplied, -224837632 bytes required

00000018 27.33609009 MBAMSwissArmy!GetNTFSIndexEntryByName: No index entry for "Application Data" found in file record 118657

00000019 27.33610535 MBAMSwissArmy!EnumerateNTFSDirectory: OpenNTFSFileRecordByName( "C:\Users\shogun\Local Settings\Application Data\Microsoft\Internet Explorer" ) failed with status 0xc0000034

00000020 27.33611298 MBAMSwissArmy!HandleIoctlEnumerate: EnumerateDirectory( "C:\Users\shogun\Local Settings\Application Data\Microsoft\Internet Explorer" ) failed on query operation with status 0xc0000034

00000021 27.35254860 MBAMSwissArmy!GetNTFSIndexEntryByName: No index entry for "Application Data" found in file record 118657

00000022 27.35256195 MBAMSwissArmy!ReadNTFSFile: OpenNTFSFileRecordByName( "C:\Users\shogun\Local Settings\Application Data\Microsoft\Internet Explorer\MSIMGSIZ.DAT" ) failed with status 0xc0000034

00000023 27.35257339 MBAMSwissArmy!HandleIoctlReadFile: ReadFile( "C:\Users\shogun\Local Settings\Application Data\Microsoft\Internet Explorer\MSIMGSIZ.DAT" ) failed on query operation with status 0xc0000034

00000024 27.35690498 MBAMSwissArmy!GetNTFSIndexEntryByName: No index entry for "Application Data" found in file record 118562

00000025 27.35691833 MBAMSwissArmy!EnumerateNTFSDirectory: OpenNTFSFileRecordByName( "C:\Users\Guest\Local Settings\Application Data\Microsoft\Internet Explorer" ) failed with status 0xc0000034

00000026 27.35692787 MBAMSwissArmy!HandleIoctlEnumerate: EnumerateDirectory( "C:\Users\Guest\Local Settings\Application Data\Microsoft\Internet Explorer" ) failed on query operation with status 0xc0000034

[RubbeR DuckY]

This is the code I call from the installer.

procedure TerminateMBAM();
  var
	nResultCode: Integer;
  begin
	Exec(ExpandConstant('{app}\mbam.exe'), '/uninstall', '', SW_SHOW, ewWaitUntilTerminated, nResultCode)
	Sleep (500)
end;

mbam.exe processes the /uninstall command.

[Cordialis]

Dear Malwarebytes'

Thank you for the new MBAM 1.21. It performed a full scan on my fully updated XP Home SP3 without any problems at all and didn't find any malware. I also ran Secunia PSI RC3 and it no longer flags Zlib as outdated. A genuine top-standard tool!

Everything works just excellent!

[mynorgeek]

Technically, mbam.exe is terminated during install. Why it is not happening on your system, I do not know. I don't make the installer, Inno Setup does.

I'd like to get this straight... you're saying that a Code 5 error message encountered while using the program updater isn't MBAM's problem because you "don't make the installer". Tell me if I've got that right, because it sure sounds to me like that is precisely what you are saying.

[RubbeR DuckY]

No, it means that something went terribly wrong either in installer execution of mbam.exe or mbam.exe's processing of the uninstall command. Either way, this happens on a very small fraction of systems, so the code must be working correctly.

Please terminate mbam.exe using task manager and I will look at the code again