Malwarebytes crashes my computer

[ilikesoldat]

So after a lot of investigating, I realized this program single-handedly (it can be the only optional startup program selected and will still crash my computer, therefore doesn't need to be combined with other programs) freezes my computer. It took me a long time to figure this out, trying to disable many many different startup programs to narrow down the problem.

Why does Malwarebytes freeze my computer? I have Windows XP Home edition.

The only way I can get around with starting my computer with malwarebytes is to system restore, and then for one bootup my computer won't freeze with Malwarebytes. Then next restart it freezes again. When I first got the program I restarted my computer 2-3 times without a problem. Then upon running one scan it froze upon restart and has been that way ever since.

I am currently NOT infected with any malware (according to ESET Nod32 and Malwarebytes paid editions).

Anyone have a method to start my computer without it freezing because of malwarebytes? I have disabled it temporarily but I would like to be able to start my computer with it running.

Also, I have noticed that if I run a video file shortly before it freezes, it will keep playing with sound and perfect video until the end. I simply can't use my mouse or keyboard to do anything after a certain point. The computer keeps time normally.

So it isn't really "frozen", just locked from doing anything, like opening anything up or closing a program. But if I run some programs, they WILL stop loading. I can still move around my mouse cursor, but that's about it, nothing else responds.

[noknojon]

Sorry -

No person has replied to your topic yet - As you have the Pro/paid version please see the link below -

Alternatively, as you are a paying customer, you can contact the help desk at support@malwarebytes.org

There should be a company employee there to reply to your problem and give you advice via email -

[Firefox]

Hello and

I would start by adding exclusions in your anti-virus software for Malwarebytes files....

To add exclusions to Est Anti-Virus

This Item<--- was sent from a moderator at the Est A/V forum to show how to add the exclusions required -

Please exclude the following files from your Antivirus Software (not sure what version of you are using):

Note: If using a software firewall besides the built in Windows Firewall you'll need to exclude them from it as well

For Windows XP:

• C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe
  
• C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
  
• C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
  
• C:\Program Files\Malwarebytes' Anti-Malware\mbam.dll
  
• C:\Program Files\Malwarebytes' Anti-Malware\mbamext.dll
  
• C:\Documents and Settings\All Users\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\rules.ref
  
• C:\Windows\System32\drivers\mbam.sys
  
• C:\Windows\System32\drivers\mbamswissarmy.sys
  

For Windows Vista or Windows 7:

• C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe
  
• C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
  
• C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
  
• C:\Program Files\Malwarebytes' Anti-Malware\mbam.dll
  
• C:\Program Files\Malwarebytes' Anti-Malware\mbamext.dll
  
• C:\ProgramData\Malwarebytes\Malwarebytes' Anti-Malware\rules.ref
  
• C:\Windows\System32\drivers\mbam.sys
  
• C:\Windows\System32\drivers\mbamswissarmy.sys
  

For 64 bit versions of Windows Vista or Windows 7:

• C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbam.exe
  
• C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
  
• C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
  
• C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbam.dll
  
• C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamext.dll
  
• C:\ProgramData\Malwarebytes\Malwarebytes' Anti-Malware\rules.ref
  
• C:\Windows\System32\drivers\mbam.sys
  
• C:\Windows\SysWoW64\drivers\mbamswissarmy.sys
  

Note: If using a software firewall besides the built in Windows Firewall you'll need to exclude MBAM.EXE and MBAMSERVICE.EXE from it as well

Note: Once that's done, please make sure that if either of those programs has any sort of web filter, that you add the following as a trusted site:

data-cdn.mbamupdates.com

The FAQ contains examples of setting file exclusions for some known AV products

Please post back and let us know how it went.

[ilikesoldat]

to the spammer kid, major facepalm.

please READ my post before replying? k thx.

So after a lot of investigating, I realized this program single-handedly (it can be the only optional startup program selected and will still crash my computer, therefore doesn't need to be combined with other programs) freezes my computer.

[AdvancedSetup]

Please do not be rude to other members on the board.

You cannot simply stop your Anti-Virus from starting on startup as it uses a kernel level driver that always loads. Without directly disabling it or fully understanding how drivers work and how to manually disable them they will always start when the computer starts.

Please try the posted suggestion on setting up File and Folder exclusions for your Anti-Virus as that is one of the common reasons for a system freeze or lock-up.

If that proves not to help then we can go from there.

Thank you.

[mahler]

Hi!

I have also experienced such problems, from freezing the prog until crashing (restarting) the system after pressing the "remove"-button. I am running Panda AV and Comodo Firewall. Same procedure as bescribed above?

Thx!

[daledoc1]

Hello and welcome, mahler:

Yes, the basic principles are the same.

MBAM needs to have reciprocal permissions with your AV and FW.

Here are the specifics for Panda:

Set Exclusions for Malwarebytes' Anti-Malware in Panda Global Protection 2012:

1. Open Panda and click on Settings under the Protection section on the left hand side.
   
2. Click on Settings under the Threats to detect and Exclude section.
   
3. Click the Files tab and then click the Add button on this tab.
   
4. In the browse window that opens navigate to C:\Program Files\Malwarebytes' Anti-Malware Note: On 64 bit Windows versions this will be C:\Program Files (x86)\Malwarebytes' Anti-Malware
   
5. Double-click on mbam.exe to add it to the exclusions.
   
6. Do the same for each of the following:
   
   • mbamgui.exe
     
   • mbamservice.exe
     

[*]Then navigate to C:\Windows\System32\drivers

[*]Double-click on mbam.sys to add it to the exclusions.

[*]Once that is complete, click on OK to close the exclusions window.

[*]Now click the Firewall tab located on the left hand side.

[*]Under the Rules section, click the Top settings button next to "You can specific which programs can access the."

[*]A new window will open that has a list of the applications that have attempted to access the internet and how the program is allowing access.

• Malwarebytes should be on this list.
  
• If it is not, then you can add it by clicking the Add button.
  

[*]Set the access to Allow Inbound and Outbound traffic and then click the OK button which will take you back to the Settings page.

[*]Click on Apply at the bottom of the Settings window then click on OK

[*]Close the Panda main window and restart your computer.

Set Exclusions for Panda Global Protection 2012 in Malwarebytes' Anti-Malware:

• Open Malwarebytes' Anti-Malware and click on the Ignore List tab
  
• Click the Add button on the lower left
  
• In the small browse window that opens, navigate to C:\Program Files and click once on Panda Security and click OK
  Note: For 64 bit Windows versions this will be C:\Program Files (x86)
  
• Close Malwarebytes' Anti-Malware
  

Please post back and let us know how it goes.

Thanks!

daledoc1

[mahler]

Hello and welcome, mahler:

Yes, the basic principles are the same.

MBAM needs to have reciprocal permissions with your AV and FW.

Here are the specifics for Panda:

Set Exclusions for Malwarebytes' Anti-Malware in Panda Global Protection 2012:

1. Open Panda and click on Settings under the Protection section on the left hand side.
   
2. Click on Settings under the Threats to detect and Exclude section.
   
3. Click the Files tab and then click the Add button on this tab.
   
4. In the browse window that opens navigate to C:\Program Files\Malwarebytes' Anti-Malware Note: On 64 bit Windows versions this will be C:\Program Files (x86)\Malwarebytes' Anti-Malware
   
5. Double-click on mbam.exe to add it to the exclusions.
   
6. Do the same for each of the following:
   
   • mbamgui.exe
     
   • mbamservice.exe
     

[*]Then navigate to C:\Windows\System32\drivers

[*]Double-click on mbam.sys to add it to the exclusions.

[*]Once that is complete, click on OK to close the exclusions window.

[*]Now click the Firewall tab located on the left hand side.

[*]Under the Rules section, click the Top settings button next to "You can specific which programs can access the."

[*]A new window will open that has a list of the applications that have attempted to access the internet and how the program is allowing access.

• Malwarebytes should be on this list.
  
• If it is not, then you can add it by clicking the Add button.
  

[*]Set the access to Allow Inbound and Outbound traffic and then click the OK button which will take you back to the Settings page.

[*]Click on Apply at the bottom of the Settings window then click on OK

[*]Close the Panda main window and restart your computer.

Set Exclusions for Panda Global Protection 2012 in Malwarebytes' Anti-Malware:

• Open Malwarebytes' Anti-Malware and click on the Ignore List tab
  
• Click the Add button on the lower left
  
• In the small browse window that opens, navigate to C:\Program Files and click once on Panda Security and click OK
  Note: For 64 bit Windows versions this will be C:\Program Files (x86)
  
• Close Malwarebytes' Anti-Malware
  

Please post back and let us know how it goes.

Thanks!

daledoc1

thank you for your advice! How about Panda AV 2008? I am running this one. And what about Comodo Firewall (and Defense+)? Thx!

[daledoc1]

Hi, Mahler:

I'm afraid I can't provide specifics for Panda 2008.

I don't expect anyone will be able to do so.

Unfortunately, an AV program that old is no longer supported and would be very insecure -- I expect that it does not even get database updates.

See here: http://www.pandasecurity.com/homeusers-cms3/support/lifecycle/

So, we would not have instructions for the MBAM exclusions, unfortunately.

Your computer is severely at-risk from a security standpoint with such an old AV.

It would be most highly recommended that you either update to the current version, or perhaps move to another product.

There are several free AVs out there, such as Microsoft Security Essentials, if you do not wish to use a paid product.

You might wish to browse the forums here, as there are several threads about free AV and firewall combinations that run well with MBAM.

As for Comodo firewall, I'm afraid we'll need to wait for someone who uses it to reply.

But your Panda 2008 is the 1st priority....

In order to more effectively assist and advise you, when you reply please do the following:

1) Please provide some additional basic information about your computer:

• What is your Operating System (XP, Vista, or Win7)?
  
• Is your OS 32-bit or 64-bit?
  
• What is your OS Service Pack?
  
• How much RAM do you have?
  
• What version (if any) of MBAM have you run (current is 1.51.0.1200)?
  
• What MBAM database version did you use (current is 7071)?
  
• What brand and version of antivirus, antimalware, and firewall software do you have - please provide specific info about the Panda version and the Comodo version?
  

2) Please use the button instead of other ones when you reply here and at the other forums, so that it will be easier to read.

Having said all that, though....

3) Given that you are running such an old AV, it is possible that the system crashes/freezes you are experiencing may be due to infection. If you are infected, it may be hard to install some AV programs. So, you might first want to read this article, and then start a new post at the malware removal forum. The experts will provide free, one-on-one help to check and clean your system. Then you can install an up-to-date AV and firewall.

That's what I would personally recommend.

We shall see if the more expert folks have different advice.

Hope this helps!

daledoc1

[mahler]

Hi!

Well, I still get databese updates for Panda AV, it was actualised today and the prog licence is running till March 2012.

Information of my system:

XP

32-bit

SP3

1064 MB

MBAM Version is 1.51.0.2100

7045 (from 8.7.2011)

Panda AV 2008 (3.01.00)

Comodo Firewall 5.5.195786.1383

Thx

[daledoc1]

Thanks for the additional information.

I'm a bit surprised that they are still updating 2008, but you would know for sure.

Unfortunately, as a home user, I cannot help with providing instructions about this version of Panda.

The only information to which we regular members have access is for the current version.

If the settings for 2008 are so different from 2012, then your best bet might be to open a support ticket at the consumer help desk, by sending an email to support@malwarebytes.org. They might have something on file to help you.

If you choose to do that, please post back here and let us know, so that the moderators can lock this thread.

Thanks very much for your patience,

daledoc1

[mahler]

No prob :-)

Well, I am going to try your advice like PAV2012 and see what happens and come back here.

btw, that article about GMER and DDS: last year I had some infections and did all those things, advised from HijackThis-forum. But I can try that one more time, of course.

[daledoc1]

If you think you might be infected, then that needs to be the #1 priority.

Unfortunately, we cannot work on malware removal here in the General MBAM forum.

So, it's up to you -- you could EITHER start a new post at the HJT forum, OR open the support ticket (the help desk can assist with malware removal, too).

Please don't do both, though.

If you are clean or after they get you cleaned, then it would be good to update your AV.

The experts will help you with this, too.

Thanks!

daledoc1