Problem with Protection Module

[Ryan Van Zandt]

Hi there, I am having a problem with my purchased version of Malwarebytes. When I start up the protection module I get one of two codes : Error Code 2, (then, if i try to open it again ) error code 1073. These problems started fairly recently ( I don't know exactly how long because it's on my parents computer.). I've tried UnInstalling it with Revo and reinstalling, and nothing. I've tried clearing the registry keys, nothing. I've tried all of the above with Zone Alarm disabled and still nothing. I've also tried using the mbam-clean.exe and no luck. I'm running windows xp pro. So after about 3 hours of searching the internet and 30 restarts, I give up. Any ideas?

[prairie dog]

Have a look at this FAQ and see if it helps.

[Ryan Van Zandt]

Have a look at this FAQ and see if it helps.

Thank you for responding, I have tried that as well. I've also scanned with my anti-virus along with trendmicro's housecall all to no prevail.

[Ryan Van Zandt]

Oh, and it allows me to install, it's just once I actually click "Protection Module" is when I have the problem. I can even scan with Malwarebytes.

[Swandog46]

Ryan Van Zandt, please post the contents of the protection logs to see if there are any error messages. They may be found in:

* Windows 2000 & Windows XP:

C:\Documents and Settings\All Users\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Logs

* Windows Vista & Win7:

C:\ProgramData\Malwarebytes\Malwarebytes' Anti-Malware\Logs

[Ryan Van Zandt]

Ryan Van Zandt, please post the contents of the protection logs to see if there are any error messages. They may be found in:

* Windows 2000 & Windows XP:

C:\Documents and Settings\All Users\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Logs

* Windows Vista & Win7:

C:\ProgramData\Malwarebytes\Malwarebytes' Anti-Malware\Logs

This is what I'm getting. And I thought it might be because I just installed it on my brothers computer; so, I bought another license (which I needed to anyways), but, this did not fix the problem.

18:57:02 (null) ERROR WTSQueryUserToken failed with error code 1245

18:57:03 (null) MESSAGE Protection stopped

[Ryan Van Zandt]

This is kind of a unique situation; I went into Control Panel/Administrative Tools/Computer Management/Services and Applications/Services , scrolled down the list, saw MBAM service and said to myself "Hmm... maybe I should click "Start the service"; interestingly enough, a little pop-up came up and said something about protection module is enable and sure enough, now it's all working. I don't know what will happen when I restart, but I guess I'll find out. Tell me what you all think....

[Swandog46]

Please go back into the Services console and make sure the "Startup Type" for MBAMService is set to "Automatic". Your problem will certainly occur if the service is set not to start at boot automatically -- did you make this change yourself?

[Ryan Van Zandt]

It was/is set on automatic, I just don't know what the heck is wrong with it. I didn't set any of that before. I actually have to start it up in this particular order in order for it to work (and ip protection still isn't working btw) start Mbamservice, open Malwarebytes and click "start protection", click start Mbamservice again, then click the "Ok" on the pop-up saying that it has been enabled. If I do not do it in that order, it will not work. Now once it has started the 2nd time, I can not stop the service unlike other programs (the button for stop is not bold).

[Ryan Van Zandt]

Oh, and if I restart windows it doesn't work that way either.

[Swandog46]

Is this a Terminal Server or any other kind of multi-logon server? Or is it your desktop that you are sitting at and no one else is logged into? That error code means "no one logged in" when the service tried to start.

[Ryan Van Zandt]

Is this a Terminal Server or any other kind of multi-logon server? Or is it your desktop that you are sitting at and no one else is logged into? That error code means "no one logged in" when the service tried to start.

This is on a desktop that only has me logged into it.

[AdvancedSetup]

Can you please run the following scanner and post back both logs which will provide us with more details about your system in order to track down a possible cause.

Download

DDS

and save it to your desktop

http://download.bleepingcomputer.com/sUBs/dds.scr

Disable any script blocker if your Anti-Virus/Anti-Malware has it.

Once downloaded you can disconnect from the Internet and disable your Ant-Virus temporarily if needed.

Then double click

dds.scr

to run the tool.

When done, the

DDS.txt

will open.

Click Yes at the next prompt for Optional Scan.

When done, DDS will open two (2) logs:

1. DDS.txt
   
   
2. Attach.txt
   
   

• Save both reports to your desktop
  
  
• Please include the following logs in your next reply:
  DDS.txt
  and
  Attach.txt
  
  

[Ryan Van Zandt]

Alrighty, here are the attachments you asked for. Thank you all so much for all the help with this. I really do appreciate it.

Attach.txt

DDS.txt

[AdvancedSetup]

The system actually appears to possibly be infected. You also have more issues than MBAM not starting as seen in the Event Logs at the bottom of Attach.txt.

==== Event Viewer Messages From Past Week ========

You also have remnants of Kaspersky still loading, yet no sign of it in your Add/Remove. You're using a lot of CODEC packages, etc which often are not really needed depending on what you're attempting to do in Media and many of them depending on source are either infected or install invalid versions on your system - but that is a bit beyond the scope of Malware removal here unless one of them did install some infection.

I would recommend that you follow the advice below and have someone assist you with scanning and cleaning of your system.

We don't work on Malware removal in the general forums.

Please print out, read and follow the directions here, skipping any steps you are unable to complete. Then post a NEW topic here.

One of the expert helpers there will give you one-on-one assistance when one becomes available.

After posting your new post make sure under options that you select Track this topic and choose one of the Email options so that you're alerted when someon has replied to your post.

Alternatively, as a paying customer, you can contact the help desk at support@malwarebytes.org

[low_tech]

I am having the same problems ... followed the instructions in the FAQ posted above. But now the protection module will not open and I get the error code 1073.

Attached are my DDS results.

Attach.txt

DDS.txt

[AdvancedSetup]

@low_tech

Is this a registered version of MBAM?

Please post the protection logs so that we can see what might be going on.

[mertxkaan]

Hi All,

I have the same problem here, too. I am using XP Pro and I made a clean install of MBAM. and when I start windows, i get the error Mbamservice unexpectedly stopped. Today I searched about that "Mbamservice stopping" issue around all forums and i couldnt get any valuable information. And when i try a little search inside my computer's services and drivers section, i see that: MbamService has an dependencies section of MbamProtector[mbam.sys] (which is a driver, and also has stopped)

I couldnt get MbamProtector started, so i couldnt get MbamService start, too.

If anyone got any point about that, maybe it is the problem??

Thanks,

[gsb]

I am having the same issue on XP Home SP2. Text in log shows WTSQueryUserToken failed with error code 1245. Services already show set as Automatic. I have deleted and reinstalled. I'll try it again and look through registry for any leftover goodies.

[noknojon]

Hi to others with this problem -

Please follow the advice listed above in this thread by Swandog46 and by

AdvancedSetup - (quick link provided) --> http://forums.malwarebytes.org/index.php?s...st&p=164403

Thank You -

EDIT - Please use ADD REPLY tab , not reply when you answer -

Also note this thread is being over written too often - Please start your own New Topic in the future - Thank You -