france Posted July 20, 2008 ID:23344 Share Posted July 20, 2008 hi have i freezing too on windows vista since version 1.21 is out Link to post Share on other sites More sharing options...
Root Admin RubbeR DuckY Posted July 20, 2008 Author Root Admin ID:23346 Share Posted July 20, 2008 We are working on the issue, keep posting information, it is helping us a lot! Link to post Share on other sites More sharing options...
mona7865 Posted July 20, 2008 ID:23347 Share Posted July 20, 2008 No problems with running a full scan either.Malwarebytes' Anti-Malware 1.21Database version: 969Windows 5.1.2600 Service Pack 310:49:33 20/07/2008mbam-log-7-20-2008 (10-49-33).txtScan type: Full Scan (C:\|)Objects scanned: 125086Time elapsed: 58 minute(s), 12 second(s)Memory Processes Infected: 0Memory Modules Infected: 0Registry Keys Infected: 0Registry Values Infected: 0Registry Data Items Infected: 0Folders Infected: 0Files Infected: 0I forgot to mention I usually run CCleaner before my MBAM scans.Mona. Link to post Share on other sites More sharing options...
h2002al Posted July 20, 2008 ID:23350 Share Posted July 20, 2008 I don't know if this serve but everything is ok with my pc. windows XP sp 3. Below the results:rolandMalwarebytes' Anti-Malware 1.21Versioni i baz Link to post Share on other sites More sharing options...
TerryWood Posted July 20, 2008 ID:23352 Share Posted July 20, 2008 Hi AllI am using Win XPSP3 Online Armor Free Avast Home & Geswall Pro & Shadow Defender.I also have had the series of code 5 errors. eventually a series of uninstalls & reinstalls solved it.On full scan it took 16 minutes to scan my system right up until version 1.21 was released. Thereafter, it takes 40 minutes I have done this 5 times now.The problem seems to be on the Opera mail files where it effectively grinds to a halt under v1.21. IT DID NOT do this when I used version 1.2.If I uninstall v1.21 and replace it without the updates it rips through the Mail files at a high speed, much faster than the new version.I am now going to try it with the virus files updates since version 1.21 was introduced. What I am saying is that is either the new program or one of the updates.I wil keep you postedTerryps I do not notice any scanner speed increase on my system, in fact a decrease. This is outside of the Opera mail files issue Link to post Share on other sites More sharing options...
Yourhighness Posted July 20, 2008 ID:23353 Share Posted July 20, 2008 quick scan:Malwarebytes' Anti-Malware 1.21Datenbank Version: 969Windows 5.1.2600 Service Pack 211:30:39 20.07.2008mbam-log-7-20-2008 (11-30-39).txtScan-Methode: Quick-ScanDurchsuchte Objekte: 37733Laufzeit: 3 minute(s), 24 second(s)Infizierte Speicherprozesse: 0Infizierte Speichermodule: 0Infizierte Registrierungsschl Link to post Share on other sites More sharing options...
france Posted July 20, 2008 ID:23354 Share Posted July 20, 2008 ok i have scan my pc with ccleaner for registrar erreors and 191 errors to registrar base after i rescan with malware bytes and no bug but i have others pc with malware buytes and the real time protection no working error 001 when i can launch the real time protection on windows vista 32bits edition family sacn with ccleaner to registrar error and no errors found i try uninstall malwarebytes and stop the computer and reinstall result: the real time protection not working again on my second computer i haven't solution for reactivate the real time protection and the maware bytes scan fast or complete bug after 30 secondes in windows vista family editionall is good on my computer with windows vista ultimate version Link to post Share on other sites More sharing options...
3xist Posted July 20, 2008 ID:23358 Share Posted July 20, 2008 Okay...Now I am getting the random freezing.Running: Windows XP Home Edition SP3 fully patched.Goodluck on fixing it Devs. Link to post Share on other sites More sharing options...
mas_pogi Posted July 20, 2008 ID:23360 Share Posted July 20, 2008 Hi.I also encountered that MBAM would just freeze. I tried it in quick scan and full scan. I have Vista SP1.I never tried in xp though.I already submiited the minidump. I hope it will be a great help.Thanks.Mark Link to post Share on other sites More sharing options...
MarkAW Posted July 20, 2008 ID:23365 Share Posted July 20, 2008 So what is a user supposed to do with that information? I have no idea why the shell extension is in use. All I know is, I open the program, click on "Check for updates" and follow the prompts. Then I get the Code5. At least tell the user to uninstall the existing version prior to installing the new one. Or tell us how we should close the shell extension. All I do is scan with the program then click on Exit. Does that leave the shell extension in use?When that happens all you have to do is go to Windows Task manager and click End Process, and continue with your installation. Nothing hard in doing that now is there. Link to post Share on other sites More sharing options...
Yourhighness Posted July 20, 2008 ID:23372 Share Posted July 20, 2008 HKEY_CLASSES_ROOT\AppID\MalwareWipe.EXE (Rogue.MalwareWiped) -> Quarantined and deleted successfully.Seems MalwareWipe still is fully functional on the system and only the regkey was removed . Should I get Bruce the sample I used for the test run? Link to post Share on other sites More sharing options...
Root Admin RubbeR DuckY Posted July 20, 2008 Author Root Admin ID:23373 Share Posted July 20, 2008 Start a thread in the private rooms . Link to post Share on other sites More sharing options...
Yourhighness Posted July 20, 2008 ID:23375 Share Posted July 20, 2008 *coughs* and runs off to do as the boss says so . Link to post Share on other sites More sharing options...
mynorgeek Posted July 20, 2008 ID:23376 Share Posted July 20, 2008 When that happens all you have to do is go to Windows Task manager and click End Process, and continue with your installation. Nothing hard in doing that now is there. "Abort, Retry, Ignore" are the options given in the Code 5 dialog. Maybe the error message ought to provide ending the process in task manager as an option. Nothing hard in doing that now is there. Link to post Share on other sites More sharing options...
Root Admin RubbeR DuckY Posted July 20, 2008 Author Root Admin ID:23377 Share Posted July 20, 2008 Technically, mbam.exe is terminated during install. Why it is not happening on your system, I do not know. I don't make the installer, Inno Setup does. Link to post Share on other sites More sharing options...
mynorgeek Posted July 20, 2008 ID:23379 Share Posted July 20, 2008 I don't make the installer, Inno Setup does.So I should contact Inno Setup and ask them? Link to post Share on other sites More sharing options...
EricJH Posted July 20, 2008 ID:23380 Share Posted July 20, 2008 I can confirm the stalling when doing the Quick Scan under Vista Ultimate SP1 with 1.21. The scan can only be aborted with a reboot. Logging off isn't workingI am using:Antivir anitvirusComodo firewall v 3.0.25.378 I have Spybot's SDwinsec running in the backgroundLet me know if you need more information Link to post Share on other sites More sharing options...
mynorgeek Posted July 20, 2008 ID:23381 Share Posted July 20, 2008 Technically, mbam.exe is terminated during install. Why it is not happening on your system, I do not know. I don't make the installer, Inno Setup does.From Inno Setup FAQ newsgroups..."When users uninstall, thex often forget to close it. I see it more the way that your uninstaller should terminate the executable. If it doesn't, I'd call it a bug. How can I display a message box when a file cannot be deleted at uninstall because it is in use?""It's better to insert an informational wizard page just before the last page. You can then check for the file in ShouldSkipPage and return a value accordingly."http://news.jrsoftware.org/news/innosetup/msg59000.html Link to post Share on other sites More sharing options...
sho-dan Posted July 20, 2008 ID:23382 Share Posted July 20, 2008 Hello MarcinMalwarebytes' Anti-Malware 1.21Database version: 971Windows 6.0.6001 Service Pack 11:25:58 PM 7/20/2008mbam-log-7-20-2008 (13-25-58).txtScan type: Quick ScanObjects scanned: 34032Time elapsed: 32 second(s)Memory Processes Infected: 0Memory Modules Infected: 0Registry Keys Infected: 0Registry Values Infected: 0Registry Data Items Infected: 0Folders Infected: 0Files Infected: 0Memory Processes Infected:(No malicious items detected)Memory Modules Infected:(No malicious items detected)Registry Keys Infected:(No malicious items detected)Registry Values Infected:(No malicious items detected)Registry Data Items Infected:(No malicious items detected)Folders Infected:(No malicious items detected)Files Infected:(No malicious items detected)00000000 0.00000000 MBAMSwissArmy!GetNTFSIndexEntryByName: No index entry for "Application Data" found in file record 88401 00000001 0.00001306 MBAMSwissArmy!EnumerateNTFSDirectory: OpenNTFSFileRecordByName( "C:\Users\Default\Local Settings\Application Data" ) failed with status 0xc0000034 00000002 0.00002109 MBAMSwissArmy!HandleIoctlEnumerate: EnumerateDirectory( "C:\Users\Default\Local Settings\Application Data" ) failed on query operation with status 0xc0000034 00000003 0.01705503 MBAMSwissArmy!GetNTFSIndexEntryByName: No index entry for "Application Data" found in file record 118562 00000004 0.01706488 MBAMSwissArmy!EnumerateNTFSDirectory: OpenNTFSFileRecordByName( "C:\Users\Guest\Local Settings\Application Data" ) failed with status 0xc0000034 00000005 0.01707214 MBAMSwissArmy!HandleIoctlEnumerate: EnumerateDirectory( "C:\Users\Guest\Local Settings\Application Data" ) failed on query operation with status 0xc0000034 00000006 0.02852758 MBAMSwissArmy!ProcessNTFSIndexData: ProcessNTFSAttributeData (INDEX_ALLOCATION) failed with status 0xc0000034 00000007 0.02853498 MBAMSwissArmy!GetNTFSIndexEntryByName: No index entry for "Local Settings" found in file record 79423 00000008 0.02854246 MBAMSwissArmy!EnumerateNTFSDirectory: OpenNTFSFileRecordByName( "C:\Users\Public\Local Settings\Application Data" ) failed with status 0xc0000034 00000009 0.02854993 MBAMSwissArmy!HandleIoctlEnumerate: EnumerateDirectory( "C:\Users\Public\Local Settings\Application Data" ) failed on query operation with status 0xc0000034 00000010 0.03449384 MBAMSwissArmy!GetNTFSIndexEntryByName: No index entry for "Application Data" found in file record 118657 00000011 0.03450257 MBAMSwissArmy!EnumerateNTFSDirectory: OpenNTFSFileRecordByName( "C:\Users\shogun\Local Settings\Application Data" ) failed with status 0xc0000034 00000012 0.03450969 MBAMSwissArmy!HandleIoctlEnumerate: EnumerateDirectory( "C:\Users\shogun\Local Settings\Application Data" ) failed on query operation with status 0xc0000034 00000013 24.47245407 MBAMSwissArmy!HandleIoctlReadFile: Output buffer too small ( "C:\Windows\system32\Config\COMPONENTS" ): 10485760 bytes supplied, 19398656 bytes required 00000014 24.90485954 MBAMSwissArmy!HandleIoctlReadFile: Output buffer too small ( "C:\Windows\system32\Config\SOFTWARE" ): 10485760 bytes supplied, 22020096 bytes required 00000015 25.01861572 MBAMSwissArmy!HandleIoctlReadFile: Output buffer too small ( "C:\Windows\system32\Config\SYSTEM" ): 10485760 bytes supplied, 20447232 bytes required 00000016 26.10724068 MBAMSwissArmy!HandleIoctlReadFile: Output buffer too small ( "C:\hiberfil.sys" ): 10485760 bytes supplied, -540540928 bytes required 00000017 26.12587929 MBAMSwissArmy!HandleIoctlReadFile: Output buffer too small ( "C:\pagefile.sys" ): 10485760 bytes supplied, -224837632 bytes required 00000018 27.33609009 MBAMSwissArmy!GetNTFSIndexEntryByName: No index entry for "Application Data" found in file record 118657 00000019 27.33610535 MBAMSwissArmy!EnumerateNTFSDirectory: OpenNTFSFileRecordByName( "C:\Users\shogun\Local Settings\Application Data\Microsoft\Internet Explorer" ) failed with status 0xc0000034 00000020 27.33611298 MBAMSwissArmy!HandleIoctlEnumerate: EnumerateDirectory( "C:\Users\shogun\Local Settings\Application Data\Microsoft\Internet Explorer" ) failed on query operation with status 0xc0000034 00000021 27.35254860 MBAMSwissArmy!GetNTFSIndexEntryByName: No index entry for "Application Data" found in file record 118657 00000022 27.35256195 MBAMSwissArmy!ReadNTFSFile: OpenNTFSFileRecordByName( "C:\Users\shogun\Local Settings\Application Data\Microsoft\Internet Explorer\MSIMGSIZ.DAT" ) failed with status 0xc0000034 00000023 27.35257339 MBAMSwissArmy!HandleIoctlReadFile: ReadFile( "C:\Users\shogun\Local Settings\Application Data\Microsoft\Internet Explorer\MSIMGSIZ.DAT" ) failed on query operation with status 0xc0000034 00000024 27.35690498 MBAMSwissArmy!GetNTFSIndexEntryByName: No index entry for "Application Data" found in file record 118562 00000025 27.35691833 MBAMSwissArmy!EnumerateNTFSDirectory: OpenNTFSFileRecordByName( "C:\Users\Guest\Local Settings\Application Data\Microsoft\Internet Explorer" ) failed with status 0xc0000034 00000026 27.35692787 MBAMSwissArmy!HandleIoctlEnumerate: EnumerateDirectory( "C:\Users\Guest\Local Settings\Application Data\Microsoft\Internet Explorer" ) failed on query operation with status 0xc0000034 Link to post Share on other sites More sharing options...
Root Admin RubbeR DuckY Posted July 20, 2008 Author Root Admin ID:23383 Share Posted July 20, 2008 This is the code I call from the installer.procedure TerminateMBAM(); var nResultCode: Integer; begin Exec(ExpandConstant('{app}\mbam.exe'), '/uninstall', '', SW_SHOW, ewWaitUntilTerminated, nResultCode) Sleep (500)end;mbam.exe processes the /uninstall command. Link to post Share on other sites More sharing options...
Cordialis Posted July 20, 2008 ID:23389 Share Posted July 20, 2008 Dear Malwarebytes'Thank you for the new MBAM 1.21. It performed a full scan on my fully updated XP Home SP3 without any problems at all and didn't find any malware. I also ran Secunia PSI RC3 and it no longer flags Zlib as outdated. A genuine top-standard tool! Everything works just excellent! Link to post Share on other sites More sharing options...
mynorgeek Posted July 20, 2008 ID:23415 Share Posted July 20, 2008 Technically, mbam.exe is terminated during install. Why it is not happening on your system, I do not know. I don't make the installer, Inno Setup does.I'd like to get this straight... you're saying that a Code 5 error message encountered while using the program updater isn't MBAM's problem because you "don't make the installer". Tell me if I've got that right, because it sure sounds to me like that is precisely what you are saying. Link to post Share on other sites More sharing options...
Root Admin RubbeR DuckY Posted July 20, 2008 Author Root Admin ID:23416 Share Posted July 20, 2008 No, it means that something went terribly wrong either in installer execution of mbam.exe or mbam.exe's processing of the uninstall command. Either way, this happens on a very small fraction of systems, so the code must be working correctly.Please terminate mbam.exe using task manager and I will look at the code again Link to post Share on other sites More sharing options...
Recommended Posts