Jump to content

Malwarebytes

Enabling MBAM Protection slows down my PC


19 replies to this topic

#1
joe53

    Advanced Member

  • Honorary Members
  • PipPipPip
  • 125 posts
Reluctantly, I have had to remove MBAM's resident protection from my PC, and re-instate Windows Defender real-time protection.

Ever since enabling MBAM's protection, I have experienced progressively worse slowdowns in opening apps or folders, particularly "My Computer", "Outlook Express", desktop IE7 links, etc. Some folders/apps take up to 5-10 second to open. The longer my Windows session between reboots, the worse the problem. Eventually, when I click on "My Computer", I get the "searching flashlight" for many seconds before it opens:
Posted Image

Apart from MBAM, the only programs I load at Startup are:
NOD32 2.7
Comodo BOClean 4.25
Comodo FW Pro 3.0

By trial and error, I have eliminated NOD32 and BOClean as the source of this slowdown, by disabling them from startup. Disabling MBAM protection definitely solves the problem. Enabling Windows Defender real-time protection does not result in this slowdown problem. This is highly reproducible on my XP MCE system.

Just FYI.

#2
GT500

    Mostly Cantankerous

  • Trusted Advisors
  • PipPipPipPipPipPip
  • 5,527 posts
  • Gender:Male
  • Location:Fortville, IN
You can't use Comodo's BOClean and the real-time protection in Malwarebytes' Anti Malware at the same time. Only keep one of them (since you paid for Malwarebytes, then I imagine you'll want to stick with it).

Also, you may want to disable the Defense+ feature of Comodo Firewall Pro v3.0 if you are still experiencing slowdowns after removing BOClean.

Quote

For we wrestle not against flesh and blood, but against principalities, against powers, and against the worldly governors, the princes of the darkness of this world...

#3
RubbeR DuckY

    Marcin

  • Root Admin
  • PipPipPipPipPipPip
  • 4,049 posts
  • Gender:Male
Joe was a beta tester that received a free license :).

Have you seen this issue before 1.07?
Marcin Kleczynski
President and CEO

Posted Image

Follow me on Twitter or check out my Blog!

#4
joe53

    Advanced Member

  • Honorary Members
  • PipPipPip
  • 125 posts
Marcin, I can't say for sure when this started, but it pre-dated 1.07. It certainly wasn't apparent with v1.0, but I noticed it a few weeks ago, and it's been getting progressively worse.

I certainly ruled out BOC, since the problem persists even when BOC isn't loaded. It might well be related to some conflict with CFP 3.0, or its D+ module, both of which I'm reluctant to disable, since they have been trouble-free otherwise. There haven't been any updates to CFP in the last few weeks that I recall, though.

Even opening MCE to watch TV displays this lag when MBAM's protection is enabled; maybe it is specific to my OS, since I've never seen this behaviour before.

#5
RubbeR DuckY

    Marcin

  • Root Admin
  • PipPipPipPipPipPip
  • 4,049 posts
  • Gender:Male
I will point Mahesh toward this thread. Any other information you can post would be great.
Marcin Kleczynski
President and CEO

Posted Image

Follow me on Twitter or check out my Blog!

#6
AdvancedSetup

    Forum Deity

  • Administrators
  • PipPipPipPipPipPip
  • 22,574 posts
  • Gender:Male
  • Location:US
How much CPU/RAM is MBAM using when the system is being slowed?
Are there any RED or YELLOW error message in the Event Viewer?

This is probably not related but could potentially improve your speeds when opening My Computer

Open Explorer, go to Tools -> Folder Options and click on the View tab. At the top of the File and Folders list, uncheck "Automatically search for network folders and printers" and click OK.




View PostRubbeR DuckY, on Mar 7 2008, 09:34 PM, said:

I will point Mahesh toward this thread. Any other information you can post would be great.

Ron Lewis
Manager, Online Support

Posted Image

Follow us: Twitter, Become a fan: Facebook

If you've posted to the HJT forum and it has been over 5 days without a response please send a Private Message asking for assistance.

#7
GT500

    Mostly Cantankerous

  • Trusted Advisors
  • PipPipPipPipPipPip
  • 5,527 posts
  • Gender:Male
  • Location:Fortville, IN

View Postjoe53, on Mar 8 2008, 12:32 AM, said:

I certainly ruled out BOC, since the problem persists even when BOC isn't loaded. It might well be related to some conflict with CFP 3.0, or its D+ module, both of which I'm reluctant to disable, since they have been trouble-free otherwise. There haven't been any updates to CFP in the last few weeks that I recall, though.

You've tried uninstalling BOClean and restarting your computer? BOClean has a kernel module that runs even when BOClean itself is disabled and not running, so the problem could still be a conflict with that.

Quote

For we wrestle not against flesh and blood, but against principalities, against powers, and against the worldly governors, the princes of the darkness of this world...

#8
joe53

    Advanced Member

  • Honorary Members
  • PipPipPip
  • 125 posts
Thanks to all for the suggestions.

GT500:
I uninstalled BOClean and rebooted, but the problem persists, with only MBAM, my FW and AV running. Disabling MBAM protection continues to solve the problem.

AdvancedSetup:
MBAM uses about 40-50% CPU when this problem happens.
Unchecking that Folder Option you suggested made no difference.

Further info:
Since uninstalling BOC, I'm experiencing a 5-15 second lag opening some programs/folders for the first time after a reboot. Thereafter, they open without problem, so things are somewhat better. I also see this lag the first time I right-click on a file to open the context menu, but not thereafter.

#9
Scavenger

    New Member

  • Members
  • Pip
  • 38 posts
  • Gender:Male
  • Location:Netherlands, Europe
I must admit the last couple of times i had BOClean installed i got the same troubles. Can you restore to a date when boclean wasn't installed yet?

I don't even notice i got MBAM installed here.
FW: OA
AM: MBAM

#10
RubbeR DuckY

    Marcin

  • Root Admin
  • PipPipPipPipPipPip
  • 4,049 posts
  • Gender:Male
Joe, Mahesh wants to know whether there are any odd event log entries with anything pertaining to our program.
Marcin Kleczynski
President and CEO

Posted Image

Follow me on Twitter or check out my Blog!

#11
joe53

    Advanced Member

  • Honorary Members
  • PipPipPip
  • 125 posts
Nothing seen in Event Viewer recently, but I did find numerous entries from Feb. 24:

Event Type: Error
Event Source: MBAMService
Event Category: None
Event ID: 1
Date: 24/02/2008

Description:
The description for Event ID ( 1 ) in Source ( MBAMService ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: MBAMService, Error: Monitor::ScanDLL failed.

#12
Zachary

    New Member

  • Members
  • Pip
  • 2 posts
Sorry to say, but 1.08 slows my wife's system down as well. Latest XP, Nod32, Superantispyware 4, and Winpatrol.

Firefox took 35 seconds to launch. Usually it is 2 or 3 seconds. MBAM program took almost 20 seconds to launch.

Uninstalled and reinstalled program with same results.

Dang.

Followup: Just uninstalled MBAM and reinstalled BOClean. Restarted. Firefox took 7 seconds to launch--not quite the 3 seconds I estimated, but quite a bit faster than 35 seconds.

#13
RubbeR DuckY

    Marcin

  • Root Admin
  • PipPipPipPipPipPip
  • 4,049 posts
  • Gender:Male
Zachary, NOD32 or SAS4 use kernel level hooks and may also be impeding on the speed of the system. So far the best protected and quickest systems we have used were MBAM with AntiVir. We are still working on compatibility issues and speed increases. Should have some better results in following releases.

Joe, Mahesh is looking into that error.
Marcin Kleczynski
President and CEO

Posted Image

Follow me on Twitter or check out my Blog!

#14
Zachary

    New Member

  • Members
  • Pip
  • 2 posts

View PostRubbeR DuckY, on Mar 12 2008, 07:33 PM, said:

Should have some better results in following releases.

I 100% believe that and am still a happy purchaser in spite of this temporary hiccup. Your integrity and dedication are what impressed me enough to buy two copies so far.

Zach

#15
RubbeR DuckY

    Marcin

  • Root Admin
  • PipPipPipPipPipPip
  • 4,049 posts
  • Gender:Male
We try to be 'unique' and not have our own customers wait days for a reply :).
Marcin Kleczynski
President and CEO

Posted Image

Follow me on Twitter or check out my Blog!

#16
beynac

    New Member

  • Members
  • Pip
  • 11 posts
I use NOD32. After I activated real-time protection with MBAM, I found that the initial launch of Firefox, Thunderbird and some other programs was slow (7-10 seconds). This didn't affect all programs (e.g. MS Office was unaffected). Subsequent launches of the programs were back to normal speed. After a reboot the initial launches were, again, slow. During the delay, the CPU use is nearly 100% - shared between NOD32 and MBAM (60/40).

I've not got a problem with this, as it only occurs after a reboot, but I thought that the info' might help.
Member of the Alliance of Security Analysis Professionals (ASAP)

#17
GT500

    Mostly Cantankerous

  • Trusted Advisors
  • PipPipPipPipPipPip
  • 5,527 posts
  • Gender:Male
  • Location:Fortville, IN
I wonder if it's a conflict between NOD32 and MBAM while the applications are being cached in the prefetch? Do you have something set up to delete the prefetch on reboot/shutdown? If not, have you tried booting in Safe Mode, deleting your prefetch, and seeing if other applications experience the same issue after a reboot?

Quote

For we wrestle not against flesh and blood, but against principalities, against powers, and against the worldly governors, the princes of the darkness of this world...

#18
beynac

    New Member

  • Members
  • Pip
  • 11 posts
I don't have anything which clears prefetch on reboot/shutdown. I've tried restarting with prefetch "as is" and with it cleared before reboot. There doesn't seem to be any difference.

As I said, I'm not worried by this delay. It's not a long one and only happens when I start up the computer in the morning. I only posted about it because I thought that the info' might help with the OP's problem.
Member of the Alliance of Security Analysis Professionals (ASAP)

#19
topeson

    New Member

  • Members
  • Pip
  • 1 posts
I am experiencing the same issue on Windows XP SP3. I purchased after being a semi-frequent user, but now the protection module is virtually useless since I cant run it without effectively freezing my machine. I installed all other virus protection programs so no other anti-malware/adware/virus software is running.

#20
GT500

    Mostly Cantankerous

  • Trusted Advisors
  • PipPipPipPipPipPip
  • 5,527 posts
  • Gender:Male
  • Location:Fortville, IN

View Posttopeson, on Dec 23 2008, 10:09 PM, said:

I am experiencing the same issue on Windows XP SP3. I purchased after being a semi-frequent user, but now the protection module is virtually useless since I cant run it without effectively freezing my machine. I installed all other virus protection programs so no other anti-malware/adware/virus software is running.

Do you know what other applications you have starting up with Windows?

Quote

For we wrestle not against flesh and blood, but against principalities, against powers, and against the worldly governors, the princes of the darkness of this world...





1 user(s) are reading this topic

0 members, 1 guests, 0 anonymous users

Follow Us