Jump to content

MBAM Crashes During Full Scan


Recommended Posts

WER REPORT FOLLOWS:

Version=1

EventType=APPCRASH

EventTime=128694378048283993

ReportType=2

Consent=1

Response.type=4

Sig[0].Name=Application Name

Sig[0].Value=mbam.exe

Sig[1].Name=Application Version

Sig[1].Value=1.30.0.0

Sig[2].Name=Application Timestamp

Sig[2].Value=48ff95f7

Sig[3].Name=Fault Module Name

Sig[3].Value=USER32.dll

Sig[4].Name=Fault Module Version

Sig[4].Value=6.0.6001.18000

Sig[5].Name=Fault Module Timestamp

Sig[5].Value=4791a773

Sig[6].Name=Exception Code

Sig[6].Value=c0000005

Sig[7].Name=Exception Offset

Sig[7].Value=00014ad7

DynamicSig[1].Name=OS Version

DynamicSig[1].Value=6.0.6001.2.1.0.768.3

DynamicSig[2].Name=Locale ID

DynamicSig[2].Value=1033

DynamicSig[22].Name=Additional Information 1

DynamicSig[22].Value=cc77

DynamicSig[23].Name=Additional Information 2

DynamicSig[23].Value=ef1a5c26c968aa33f0b7c9bb536b7677

DynamicSig[24].Name=Additional Information 3

DynamicSig[24].Value=230d

DynamicSig[25].Name=Additional Information 4

DynamicSig[25].Value=309b696341d0dd8a61184072c85f0f9a

UI[2]=C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe

UI[3]=Malwarebytes' Anti-Malware has stopped working

UI[4]=Windows can check online for a solution to the problem the next time you go online.

UI[5]=Check online for a solution and close the program

UI[6]=Check online for a solution later and close the program

UI[7]=Close the program

FriendlyEventName=Stopped working

ConsentKey=APPCRASH

AppName=Malwarebytes' Anti-Malware

AppPath=C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe

Link to post
Share on other sites

And the directory tree:

Directory of C:\Program Files\Common Files\microsoft shared\OFFICE12

09/09/2008 13:18 <DIR> .

09/09/2008 13:18 <DIR> ..

12/11/2007 14:43 <DIR> 1033

10/26/2006 20:13 764,800 ACECNF.DLL

10/26/2006 20:13 56,192 ACECNFLT.EXE

08/29/2007 00:22 1,754,536 ACECORE.DLL

08/29/2007 00:22 579,008 ACEDAO.DLL

08/29/2007 00:22 50,616 ACEERR.DLL

08/29/2007 00:22 193,992 ACEES.DLL

08/24/2007 04:46 341,440 ACEEXCH.DLL

08/24/2007 04:46 632,248 ACEEXCL.DLL

08/24/2007 04:46 210,368 ACELTS.DLL

08/24/2007 04:46 281,992 ACEODBC.DLL

08/24/2007 04:46 17,800 ACEODDBS.DLL

08/24/2007 04:46 17,800 ACEODEXL.DLL

08/24/2007 04:46 17,800 ACEODPDX.DLL

08/24/2007 04:46 17,800 ACEODTXT.DLL

08/29/2007 00:22 390,600 ACEOLEDB.DLL

08/24/2007 04:46 394,688 ACEPDE.DLL

08/24/2007 04:46 263,616 ACER2X.DLL

08/24/2007 04:46 292,288 ACER3X.DLL

08/24/2007 04:46 58,760 ACERCLR.DLL

08/24/2007 04:46 554,440 ACEREP.DLL

08/24/2007 04:46 226,744 ACETXT.DLL

10/26/2006 20:13 826,232 ACEWDAT.DLL

08/29/2007 01:52 201,664 ACEWSS.DLL

08/24/2007 04:46 374,200 ACEXBE.DLL

12/11/2007 14:41 <DIR> Cultures

10/27/2006 15:26 97,072 EXP_PDF.DLL

10/26/2006 19:59 57,136 EXP_XPS.DLL

10/10/2007 08:08 <DIR> HTML

10/26/2006 19:52 460,616 MODHELP.DLL

10/26/2006 19:52 48,424 MSE7.EXE

10/26/2006 19:59 19,768 MSMH.DLL

08/07/2008 18:26 16,903,728 MSO.DLL

10/26/2006 14:06 93,968 MSOICONS.EXE

10/26/2006 19:52 66,368 MSOMSE.DLL

08/27/2007 21:20 6,637,960 MSORES.DLL

09/06/2007 18:55 935,832 msoshext.dll

10/27/2006 15:10 44,304 MSOXEV.DLL

10/26/2006 21:41 59,152 MSOXMLED.EXE

10/26/2006 21:41 44,344 MSOXMLMF.DLL

08/29/2007 00:14 759,648 MSPTLS.DLL

10/26/2006 19:59 43,832 MSSH.DLL

08/23/2007 02:12 507,768 MSSOAP30.DLL

10/26/2006 19:47 7,691 MUAUTH.CAB

10/26/2006 19:47 20,304 MUOPTIN.DLL

08/24/2007 04:19 443,776 ODSERV.EXE

08/24/2007 04:19 2,874,752 OFFDIAG.EXE

08/08/2008 16:31 <DIR> Office Setup Controller

06/08/2006 16:18 1,490 officebutton.gif

03/23/2005 17:07 2,070 officelogo.gif

10/26/2006 19:59 13,584 OFFREL.DLL

08/07/2008 18:28 1,663,008 OGL.DLL

10/26/2006 19:59 16,728 OPTINPS.DLL

08/29/2007 01:08 1,083,248 RICHED20.DLL

09/11/2000 18:36 38,375 VIEWSSPT.XML

08/07/2000 15:31 39,514 VIEWSSRC.XML

10/26/2006 13:40 5,828 VISUALUI.TTF

10/10/2007 08:08 <DIR> VS Runtime

10/26/2006 13:56 123,720 WISC30.DLL

54 File(s) 41,633,632 bytes

Directory of C:\Program Files\Common Files\microsoft shared\OFFICE12\1033

12/11/2007 14:43 <DIR> .

12/11/2007 14:43 <DIR> ..

10/26/2006 20:13 49,536 ACECNFRC.DLL

08/29/2007 00:22 181,704 ACEINTL.DLL

10/26/2006 20:13 52,024 ACEODBCI.DLL

10/26/2006 20:13 35,640 ACERECR.DLL

08/29/2007 00:22 603,576 ACEWSTR.DLL

06/19/2006 14:33 1,680,383 ADO210.CHM

10/26/2006 20:06 144,656 ALRTINTL.DLL

03/01/2006 17:29 0 DAO360.CHM

03/01/2006 17:29 0 JETDEF40.CHM

03/01/2006 17:29 0 JETERR40.CHM

03/01/2006 17:29 0 JETSQL40.CHM

10/26/2006 19:52 12,104 MODHLPUI.DLL

10/26/2006 19:52 59,736 MSEINTL.DLL

03/01/2006 17:29 0 MSJRO.CHM

08/27/2007 21:22 10,342,792 MSOINTL.DLL

10/26/2006 13:56 41,288 MSSOAPR3.DLL

10/26/2006 19:46 7,419 ODINFO.HTM

10/26/2006 19:49 30,512 ODINTL.DLL

10/02/2006 18:16 2,480 README.HTM

08/29/2007 01:29 83,336 xlsrvintl.dll

20 File(s) 13,327,186 bytes

Directory of C:\Program Files\Common Files\microsoft shared\OFFICE12\Cultures

12/11/2007 14:41 <DIR> .

12/11/2007 14:41 <DIR> ..

08/28/2007 23:58 2,855,776 OFFICE.ODF

1 File(s) 2,855,776 bytes

Directory of C:\Program Files\Common Files\microsoft shared\OFFICE12\HTML

10/10/2007 08:08 <DIR> .

10/10/2007 08:08 <DIR> ..

10/26/2006 13:40 1,483 context.html

10/26/2006 13:40 128 ctxhelp_cls.gif

10/26/2006 13:40 133 ctxhelp_opn.gif

10/26/2006 13:40 99 ctxmsc_cls.gif

10/26/2006 13:40 99 ctxmsc_opn.gif

10/26/2006 13:40 915 ctxtrain_cls.gif

10/26/2006 13:40 915 ctxtrain_opn.gif

10/26/2006 13:40 127 ctxwiz_cls.gif

10/26/2006 13:40 127 ctxwiz_opn.gif

10/10/2007 08:08 <DIR> XMLLINKS

9 File(s) 4,026 bytes

Directory of C:\Program Files\Common Files\microsoft shared\OFFICE12\HTML\XMLLINKS

10/10/2007 08:08 <DIR> .

10/10/2007 08:08 <DIR> ..

08/08/2008 16:31 <DIR> 1033

10/26/2006 13:40 182 DEF_CTX.XML

1 File(s) 182 bytes

Directory of C:\Program Files\Common Files\microsoft shared\OFFICE12\HTML\XMLLINKS\1033

08/08/2008 16:31 <DIR> .

08/08/2008 16:31 <DIR> ..

11/29/2000 22:57 615 CONTEXT.XML

12/20/2000 17:30 166,212 CSDEBUG.XML

12/20/2000 17:29 231,732 CSENVIR.XML

11/29/2000 22:57 180 MSDNTRN.XML

02/26/2003 16:48 274,823 OFFICE.XML

5 File(s) 673,562 bytes

Directory of C:\Program Files\Common Files\microsoft shared\OFFICE12\Office Setup Controller

08/08/2008 16:31 <DIR> .

08/08/2008 16:31 <DIR> ..

08/08/2008 16:30 <DIR> Access.en-us

10/10/2007 08:04 <DIR> Excel.en-us

09/02/2007 02:55 235,456 ODEPLOY.EXE

08/08/2008 16:30 <DIR> Office.en-us

09/02/2007 02:55 6,540,656 OSETUP.DLL

10/26/2006 19:59 46,936 OSETUPPS.DLL

10/10/2007 08:05 <DIR> Outlook.en-us

10/10/2007 08:05 <DIR> PowerPoint.en-us

12/11/2007 14:42 <DIR> PROHYBRIDR

08/08/2008 16:31 <DIR> Proof.en

10/10/2007 08:05 <DIR> Proofing.en-us

10/10/2007 08:06 <DIR> Publisher.en-us

09/02/2007 02:55 442,240 SETUP.EXE

10/10/2007 08:06 <DIR> Word.en-us

4 File(s) 7,265,288 bytes

Directory of C:\Program Files\Common Files\microsoft shared\OFFICE12\Office Setup Controller\Access.en-us

08/08/2008 16:30 <DIR> .

08/08/2008 16:30 <DIR> ..

10/10/2007 08:04 1,344 AccessMUI.XML

10/10/2007 08:04 821 AccessMUISet.XML

10/10/2007 08:04 2,315 SETUP.XML

3 File(s) 4,480 bytes

Directory of C:\Program Files\Common Files\microsoft shared\OFFICE12\Office Setup Controller\Excel.en-us

10/10/2007 08:04 <DIR> .

10/10/2007 08:04 <DIR> ..

10/10/2007 08:04 1,801 ExcelMUI.XML

10/10/2007 08:04 2,527 SETUP.XML

2 File(s) 4,328 bytes

Directory of C:\Program Files\Common Files\microsoft shared\OFFICE12\Office Setup Controller\Office.en-us

08/08/2008 16:30 <DIR> .

08/08/2008 16:30 <DIR> ..

10/10/2007 08:04 509,007 BRANDING.XML

08/31/2006 16:22 57,678 OCT.CHM

10/10/2007 08:03 6,003 OfficeMUI.XML

10/10/2007 08:03 821 OfficeMUISet.XML

10/26/2006 20:06 184,632 OSETUPUI.DLL

08/17/2006 11:35 41,279 PSCONFIG.CHM

08/17/2006 11:35 26,920 PSS10O.CHM

08/17/2006 11:35 27,084 PSS10R.CHM

10/08/2006 13:13 52,984 SETUP.CHM

10/10/2007 08:04 9,952 SETUP.XML

10 File(s) 916,360 bytes

Directory of C:\Program Files\Common Files\microsoft shared\OFFICE12\Office Setup Controller\Outlook.en-us

10/10/2007 08:05 <DIR> .

10/10/2007 08:05 <DIR> ..

10/10/2007 08:04 2,945 OutlookMUI.XML

10/10/2007 08:04 3,861 SETUP.XML

2 File(s) 6,806 bytes

Directory of C:\Program Files\Common Files\microsoft shared\OFFICE12\Office Setup Controller\PowerPoint.en-us

10/10/2007 08:05 <DIR> .

10/10/2007 08:05 <DIR> ..

10/10/2007 08:04 1,553 PowerPointMUI.XML

10/10/2007 08:04 2,004 SETUP.XML

2 File(s) 3,557 bytes

Directory of C:\Program Files\Common Files\microsoft shared\OFFICE12\Office Setup Controller\PROHYBRIDR

12/11/2007 14:42 <DIR> .

12/11/2007 14:42 <DIR> ..

08/23/2007 01:30 1,926 ID_10031.DPC

10/10/2007 08:05 15,236 ProHybridrWW.XML

10/10/2007 08:07 25,901 SETUP.XML

3 File(s) 43,063 bytes

Directory of C:\Program Files\Common Files\microsoft shared\OFFICE12\Office Setup Controller\Proof.en

08/08/2008 16:31 <DIR> .

08/08/2008 16:31 <DIR> ..

10/10/2007 08:04 1,350 Proof.XML

1 File(s) 1,350 bytes

Directory of C:\Program Files\Common Files\microsoft shared\OFFICE12\Office Setup Controller\Proofing.en-us

10/10/2007 08:05 <DIR> .

10/10/2007 08:05 <DIR> ..

10/10/2007 08:04 813 Proofing.XML

10/10/2007 08:05 5,884 SETUP.XML

2 File(s) 6,697 bytes

Directory of C:\Program Files\Common Files\microsoft shared\OFFICE12\Office Setup Controller\Publisher.en-us

10/10/2007 08:06 <DIR> .

10/10/2007 08:06 <DIR> ..

10/10/2007 08:05 1,470 PublisherMUI.XML

10/10/2007 08:05 1,826 SETUP.XML

2 File(s) 3,296 bytes

Directory of C:\Program Files\Common Files\microsoft shared\OFFICE12\Office Setup Controller\Word.en-us

10/10/2007 08:06 <DIR> .

10/10/2007 08:06 <DIR> ..

10/10/2007 08:05 2,678 SETUP.XML

10/10/2007 08:05 1,798 WordMUI.XML

2 File(s) 4,476 bytes

Directory of C:\Program Files\Common Files\microsoft shared\OFFICE12\VS Runtime

10/10/2007 08:08 <DIR> .

10/10/2007 08:08 <DIR> ..

08/08/2008 16:31 <DIR> 1033

10/26/2006 13:40 64,512 ATL70.DLL

10/26/2006 13:40 36,864 CMDDEF.DLL

10/26/2006 13:40 106,496 Compsvcspkg.dll

10/26/2006 13:40 2,181 CSSMetaDataSchema.xml

10/26/2006 13:40 200,704 CSSPKG.DLL

10/26/2006 13:40 234 DISCO.GIF

10/26/2006 13:40 126,976 HTMDLGS.DLL

10/26/2006 13:40 909,312 HTMED.DLL

10/26/2006 13:40 3,035,136 MSENV.DLL

10/26/2006 13:40 487,424 MSVCP70.DLL

10/26/2006 13:40 344,064 MSVCR70.DLL

10/26/2006 13:40 348,160 MSVCR71.DLL

10/26/2006 13:40 232 SCHEMA.GIF

10/10/2007 08:08 <DIR> SCHEMAS

10/26/2006 13:40 256 SERVICE.GIF

10/26/2006 13:40 311,296 TRIDSN.DLL

10/26/2006 13:40 356,352 VisualStudioTeamCore.dll

10/26/2006 13:40 212,992 VSBROWSE.DLL

10/26/2006 13:40 224,256 VSTLBINF.DLL

18 File(s) 6,767,447 bytes

Directory of C:\Program Files\Common Files\microsoft shared\OFFICE12\VS Runtime\1033

08/08/2008 16:31 <DIR> .

08/08/2008 16:31 <DIR> ..

01/16/2001 14:23 192,512 CMDDEFUI.DLL

01/16/2001 11:51 8,704 compsvcspkgui.dll

01/01/2001 15:03 14,571 CSSMetaData.xml

01/16/2001 05:30 40,960 CSSPKGUI.DLL

11/29/2000 22:57 4,679 DISCO.XSL

11/29/2000 22:57 500 EMPTY.HTM

11/29/2000 22:57 1,643 HelpWatermark.htm

01/16/2001 05:28 22,528 htmdlgsUI.dll

01/16/2001 05:30 143,360 HTMEDUI.DLL

01/16/2001 11:51 204,800 MSENVUI.DLL

01/16/2001 05:56 12,800 VisualStudioTeamCoreUI.dll

08/22/2002 07:45 32,768 vsbrowseUI.dll

12 File(s) 679,825 bytes

Directory of C:\Program Files\Common Files\microsoft shared\OFFICE12\VS Runtime\SCHEMAS

10/10/2007 08:08 <DIR> .

10/10/2007 08:08 <DIR> ..

10/10/2007 08:08 <DIR> HTML

10/10/2007 08:08 <DIR> XML

0 File(s) 0 bytes

Directory of C:\Program Files\Common Files\microsoft shared\OFFICE12\VS Runtime\SCHEMAS\HTML

10/10/2007 08:08 <DIR> .

10/10/2007 08:08 <DIR> ..

10/26/2006 13:40 17,828 HTM32DOM.TLB

10/26/2006 13:40 731,688 HTM40DOM.TLB

10/26/2006 13:40 79,259 HTML32.XSD

10/26/2006 13:40 177,943 HTML40.XSD

10/26/2006 13:40 23,244 NSC40DOM.TLB

10/26/2006 13:40 108,380 NSCP40.XSD

6 File(s) 1,138,342 bytes

Directory of C:\Program Files\Common Files\microsoft shared\OFFICE12\VS Runtime\SCHEMAS\XML

10/10/2007 08:08 <DIR> .

10/10/2007 08:08 <DIR> ..

10/26/2006 13:40 1,465 adrotator.xsd

10/26/2006 13:40 70,215 ASP.XSD

10/26/2006 13:40 2,481 WSHMETA.XSD

10/26/2006 13:40 15,876 xsdschema.xsd

4 File(s) 90,037 bytes

Total Files Listed:

163 File(s) 75,429,716 bytes

65 Dir(s) 95,964,667,904 bytes free

Link to post
Share on other sites

i just updated malwarebytes today and did a quick scan and it crashed my system.

update-

10-25-08

database version 1324

version 1.30

ive been getting a popup saying windows wants to send info about this program to microsoft while scanning with version 1.30

ive had several full scan system crashes since around version 1.17

but this is the first time a quick scan crashed my system.

xp home sp2.

nice program ive liked it a lot but just too unstable for me.

Link to post
Share on other sites

This has something to do with our mbamswissarmy.sys driver and direct disk access. Would you mind scanning with ZoneAlarm disabled please?

Same result with ZA disabled. This is not new behavior with 1.30; it has been around awhile. This is on an HP Pavilion dv6000 with, I believe, a SATA drive.

Link to post
Share on other sites

Would it be an inconvenience to uninstall ZoneAlarm, restart the system and see if the program crashes again? I have had multiple users complain while using ZoneAlarm that this crash has happened. If you can help us resolve this, I can offer you a free license key :).

I can do this easily tomorrow.

I take a full backup on Monday (conveniently the day prior to the Microsoft updates on 2nd Tuesday) to an external drive. I also have a spare internal drive that I use to periodically validate the restore of the backups (do not want any write-only data), and it is that time again.

So, tomorrow I will take a full backup, swap the internal drives, restore the backup I just took to the spare drive, validate the backup/restore is still functioning properly, leave the spare drive in and uninstall ZA, install MBAM, and test.

When I am done I will simply swap back to my "real" internal drive.

Link to post
Share on other sites

I can do this easily tomorrow.

I take a full backup on Monday (conveniently the day prior to the Microsoft updates on 2nd Tuesday) to an external drive. I also have a spare internal drive that I use to periodically validate the restore of the backups (do not want any write-only data), and it is that time again.

So, tomorrow I will take a full backup, swap the internal drives, restore the backup I just took to the spare drive, validate the backup/restore is still functioning properly, leave the spare drive in and uninstall ZA, install MBAM, and test.

When I am done I will simply swap back to my "real" internal drive.

It is currently running a full scan on the PC with ZA completely uninstalled and it appears to be recursively rescanning the ...\HTML\ directory. I believe it is simply a matter of time before it fails.

Link to post
Share on other sites

  • Root Admin

You can download from here: AutoRuns for Windows v9.35

AutoRuns for Windows v9.35

By Mark Russinovich and Bryce Cogswell

Published: October 16, 2008

Introduction

This utility, which has the most comprehensive knowledge of auto-starting locations of any startup monitor, shows you what programs are configured to run during system bootup or login, and shows you the entries in the order Windows processes them. These programs include ones in your startup folder, Run, RunOnce, and other Registry keys. You can configure Autoruns to show other locations, including Explorer shell extensions, toolbars, browser helper objects, Winlogon notifications, auto-start services, and much more. Autoruns goes way beyond the MSConfig utility bundled with Windows Me and XP.

Autoruns' Hide Signed Microsoft Entries option helps you to zoom in on third-party auto-starting images that have been added to your system and it has support for looking at the auto-starting images configured for other accounts configured on a system. Also included in the download package is a command-line equivalent that can output in CSV format, Autorunsc.

You'll probably be surprised at how many executables are launched automatically!

Autoruns works on Windows 2000 SP4 Rollup 1 or above.
Link to post
Share on other sites

So, I'm not quite sure where to go with this next. It seems that there is some conflict in the full configuration of my my machine with MBAM that is not there with the minimal driver loading performed in safe mode. There is not a great deal of bloat on this PC; it is leaner than most already. Lte me know what you would like me to try next.

And thanks for taking the interest and effort, too!

Link to post
Share on other sites

  • 1 month later...
  • 3 weeks later...

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
 Share

  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.