Jump to content


Photo

Application Error on Win7 x64 locks up PC

Application Error

  • Please log in to reply
6 replies to this topic

#1 MrEPM

MrEPM

    New Member

  • Members
  • Pip
  • 4 posts

Posted 24 January 2013 - 10:31 PM

Log Name: Application
Source: Application Error
Date: 1/24/2013 9:44:04 PM
Event ID: 1000
Task Category: (100)
Level: Error
Keywords: Classic
User: N/A
Computer: V1520-KATHIE
Description:
Faulting application name: mbamservice.exe, version: 1.70.0.0, time stamp: 0x50cb9148
Faulting module name: mbamservice.exe, version: 1.70.0.0, time stamp: 0x50cb9148
Exception code: 0x40000015
Fault offset: 0x0005f6eb
Faulting process id: 0x7d4
Faulting application start time: 0x01cdfa95e3595e20
Faulting application path: C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
Faulting module path: C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
Report Id: 14a0b466-6699-11e2-ad54-904ce5fee62d
Event Xml:
<Event xmlns="http://schemas.micro...08/events/event">
<System>
<Provider Name="Application Error" />
<EventID Qualifiers="0">1000</EventID>
<Level>2</Level>
<Task>100</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2013-01-25T02:44:04.000000000Z" />
<EventRecordID>2579</EventRecordID>
<Channel>Application</Channel>
<Computer>V1520-KATHIE</Computer>
<Security />
</System>
<EventData>
<Data>mbamservice.exe</Data>
<Data>1.70.0.0</Data>
<Data>50cb9148</Data>
<Data>mbamservice.exe</Data>
<Data>1.70.0.0</Data>
<Data>50cb9148</Data>
<Data>40000015</Data>
<Data>0005f6eb</Data>
<Data>7d4</Data>
<Data>01cdfa95e3595e20</Data>
<Data>C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe</Data>
<Data>C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe</Data>
<Data>14a0b466-6699-11e2-ad54-904ce5fee62d</Data>
</EventData>
</Event>

#2 AdvancedSetup

AdvancedSetup

    Staff

  • Root Admin
  • PipPipPipPipPipPip
  • 41,245 posts
  • Gender:Male
  • Location:US

Posted 25 January 2013 - 12:16 AM

Hello and Welcome to Malwarebytes,

Sorry to hear you're having issues with the program. It may be your antivirus that is blocking the program causing this event.
Please run the following scans and post back the logs as attachments and we'll take a look and see what we can find.


Please create an mbam-check log:
  • Download mbam-check.exe from here and save it to your desktop
  • Double-click on mbam-check.exe to run it, it should then open a log file
  • Please do not copy and paste the entire contents of the log into your next post, instead please attach the log CheckResults.txt file which should now be located on your desktop to your next post

Next, Please run the following scanner and send back the logs.

Download DDS from one of the locations below and save to your Desktop
dds.scr
dds.com


Temporarily disable your antivirus while running the scan and re-enable it when done.
How To Temporarily Disable Your Anti-virus, Firewall And Anti-malware Programs

Once downloaded you can disconnect from the Internet and disable your Ant-Virus temporarily if needed.
Then double click dds.scr or dds.com to run the tool, on Vista or Win 7 right click and select Run as administrator
Click the Run button if prompted with an Open File - Security Warning dialog box.
A black DOS console should open and run for a moment.
  • When done, DDS will open two (2) logs:

  • DDS.txt
  • Attach.txt
  • Save both reports to your desktop
  • Please include the following logs in your next reply: DDS.txt and Attach.txt
    You can ignore the note about zipping the Attach.txt file in most cases.

Ron Lewis
Forum Community Manager

staff.png

Follow us: Twitter, Become a fan: Facebook


#3 MrEPM

MrEPM

    New Member

  • Members
  • Pip
  • 4 posts

Posted 28 January 2013 - 10:19 PM

The results from all three tests are in the attched files. Please let me know what you find. I also learned that I had Windows Firewall and Bitdefender Firewall enabled, only one is enabled now. The same was true for Windows Defender and Bitdefender Spyware/Malware.

Attached Files



#4 AdvancedSetup

AdvancedSetup

    Staff

  • Root Admin
  • PipPipPipPipPipPip
  • 41,245 posts
  • Gender:Male
  • Location:US

Posted 28 January 2013 - 10:47 PM

Well based on the Event Logs from your computer it would appear the computer is either infected or has some serious software conflicts going on.

I would recommend following the advice from here Available Assistance for Possibly Infected Computers and let one of the Experts assist you in reviewing your computer for any infections.

==== Event Viewer Messages From Past Week ========
.
1/28/2013 7:01:04 AM, Error: Service Control Manager [7001] - The Computer Browser service depends on the Server service which failed to start because of the following error: The dependency service or group failed to start.
1/28/2013 6:53:21 PM, Error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: GizmoDrv
1/28/2013 6:51:37 AM, Error: Service Control Manager [7001] - The HomeGroup Provider service depends on the Function Discovery Provider Host service which failed to start because of the following error: The dependency service or group failed to start.
1/28/2013 6:51:33 AM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1084" attempting to start the service WSearch with arguments "" in order to run the server: {7D096C5F-AC08-4F1F-BEB7-5C22C517CE39}
1/28/2013 6:51:32 AM, Error: Microsoft-Windows-WLAN-AutoConfig [10000] - WLAN Extensibility Module has failed to start. Module Path: C:\Windows\System32\IWMSSvc.dll Error Code: 21
1/28/2013 6:51:32 AM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1084" attempting to start the service WSearch with arguments "" in order to run the server: {9E175B6D-F52A-11D8-B9A5-505054503030}
1/28/2013 6:51:32 AM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1084" attempting to start the service EventSystem with arguments "" in order to run the server: {1BE1F766-5536-11D1-B726-00C04FB926AF}
1/28/2013 6:51:26 AM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1084" attempting to start the service ShellHWDetection with arguments "" in order to run the server: {DD522ACC-F821-461A-A407-50B198B896DC}
1/28/2013 6:51:13 AM, Error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: avc3 BDVEDISK discache GizmoDrv gzflt spldr trufos Wanarpv6
1/28/2013 6:49:18 PM, Error: Service Control Manager [7034] - The MBAMService service terminated unexpectedly. It has done this 1 time(s).
1/28/2013 1:41:06 AM, Error: Service Control Manager [7011] - A timeout (30000 milliseconds) was reached while waiting for a transaction response from the SENS service.
1/28/2013 1:40:36 AM, Error: Service Control Manager [7011] - A timeout (30000 milliseconds) was reached while waiting for a transaction response from the Schedule service.
1/28/2013 1:40:06 AM, Error: Service Control Manager [7011] - A timeout (30000 milliseconds) was reached while waiting for a transaction response from the IKEEXT service.
1/28/2013 1:39:36 AM, Error: Service Control Manager [7011] - A timeout (30000 milliseconds) was reached while waiting for a transaction response from the iphlpsvc service.
1/28/2013 1:39:06 AM, Error: Service Control Manager [7011] - A timeout (30000 milliseconds) was reached while waiting for a transaction response from the wuauserv service.
1/26/2013 3:26:30 AM, Error: Service Control Manager [7011] - A timeout (30000 milliseconds) was reached while waiting for a transaction response from the AudioEndpointBuilder service.
1/26/2013 3:25:30 AM, Error: Service Control Manager [7011] - A timeout (30000 milliseconds) was reached while waiting for a transaction response from the Wlansvc service.
1/26/2013 3:24:30 AM, Error: Service Control Manager [7011] - A timeout (30000 milliseconds) was reached while waiting for a transaction response from the BFE service.
1/26/2013 3:23:30 AM, Error: Service Control Manager [7011] - A timeout (30000 milliseconds) was reached while waiting for a transaction response from the MBAMScheduler service.
1/26/2013 3:23:00 AM, Error: Service Control Manager [7011] - A timeout (30000 milliseconds) was reached while waiting for a transaction response from the SysMain service.
1/25/2013 8:18:35 PM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1068" attempting to start the service fdPHost with arguments "" in order to run the server: {D3DCB472-7261-43CE-924B-0704BD730D5F}
1/25/2013 8:18:35 PM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1068" attempting to start the service fdPHost with arguments "" in order to run the server: {145B4335-FE2A-4927-A040-7C35AD3180EF}
1/24/2013 9:46:10 PM, Error: Service Control Manager [7011] - A timeout (30000 milliseconds) was reached while waiting for a transaction response from the WerSvc service.
1/24/2013 4:45:54 PM, Error: Service Control Manager [7001] - The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error: The dependency service or group failed to start.
1/24/2013 4:45:53 PM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1068" attempting to start the service netprofm with arguments "" in order to run the server: {A47979D2-C419-11D9-A5B4-001185AD2B89}
1/24/2013 4:45:53 PM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1068" attempting to start the service netman with arguments "" in order to run the server: {BA126AD1-2166-11D1-B1D0-00805FC1270E}
1/24/2013 4:44:14 PM, Error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: AFD avc3 BdfNdisf bdfwfpf BDVEDISK CSC DfsC discache GizmoDrv gzflt NetBIOS NetBT nsiproxy Psched rdbss spldr tdx trufos Wanarpv6 WfpLwf
1/24/2013 4:44:14 PM, Error: Service Control Manager [7001] - The Workstation service depends on the Network Store Interface Service service which failed to start because of the following error: The dependency service or group failed to start.
1/24/2013 4:44:14 PM, Error: Service Control Manager [7001] - The TCP/IP NetBIOS Helper service depends on the Ancillary Function Driver for Winsock service which failed to start because of the following error: A device attached to the system is not functioning.
1/24/2013 4:44:14 PM, Error: Service Control Manager [7001] - The SMB MiniRedirector Wrapper and Engine service depends on the Redirected Buffering Sub Sysytem service which failed to start because of the following error: A device attached to the system is not functioning.
1/24/2013 4:44:14 PM, Error: Service Control Manager [7001] - The SMB 2.0 MiniRedirector service depends on the SMB MiniRedirector Wrapper and Engine service which failed to start because of the following error: The dependency service or group failed to start.
1/24/2013 4:44:14 PM, Error: Service Control Manager [7001] - The SMB 1.x MiniRedirector service depends on the SMB MiniRedirector Wrapper and Engine service which failed to start because of the following error: The dependency service or group failed to start.
1/24/2013 4:44:14 PM, Error: Service Control Manager [7001] - The Network Store Interface Service service depends on the NSI proxy service driver. service which failed to start because of the following error: A device attached to the system is not functioning.
1/24/2013 4:44:14 PM, Error: Service Control Manager [7001] - The Network Location Awareness service depends on the Network Store Interface Service service which failed to start because of the following error: The dependency service or group failed to start.
1/24/2013 4:44:14 PM, Error: Service Control Manager [7001] - The IP Helper service depends on the Network Store Interface Service service which failed to start because of the following error: The dependency service or group failed to start.
1/24/2013 4:44:14 PM, Error: Service Control Manager [7001] - The DNS Client service depends on the NetIO Legacy TDI Support Driver service which failed to start because of the following error: A device attached to the system is not functioning.
1/24/2013 4:44:14 PM, Error: Service Control Manager [7001] - The DHCP Client service depends on the Ancillary Function Driver for Winsock service which failed to start because of the following error: A device attached to the system is not functioning.
1/24/2013 2:04:13 PM, Error: Service Control Manager [7011] - A timeout (30000 milliseconds) was reached while waiting for a transaction response from the ShellHWDetection service.
1/24/2013 1:11:16 PM, Error: Service Control Manager [7011] - A timeout (30000 milliseconds) was reached while waiting for a transaction response from the vsserv service.
1/23/2013 7:58:20 PM, Error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\DR1.
1/23/2013 7:20:19 AM, Error: Service Control Manager [7023] -
1/23/2013 7:19:02 AM, Error: Service Control Manager [7034] - The Bing Desktop Update service service terminated unexpectedly. It has done this 1 time(s).
1/23/2013 6:42:20 AM, Error: Service Control Manager [7030] - The Creative OEM013 RunApp Service service is marked as an interactive service. However, the system is configured to not allow interactive services. This service may not function properly.
1/23/2013 10:20:27 PM, Error: Microsoft-Windows-WER-SystemErrorReporting [1001] - The computer has rebooted from a bugcheck. The bugcheck was: 0x0000007e (0xffffffffc0000005, 0xfffff800028d4280, 0xfffff880031dfec8, 0xfffff880031df720). A dump was saved in: C:\Windows\MEMORY.DMP. Report Id: 012313-14882-01.
.
==== End Of File ===========================


Ron Lewis
Forum Community Manager

staff.png

Follow us: Twitter, Become a fan: Facebook


#5 MrEPM

MrEPM

    New Member

  • Members
  • Pip
  • 4 posts

Posted 29 January 2013 - 09:45 PM

Thank you for the initial analysis. I won't rule out a virus or malware completely but I think that is unlikely. I purchased a new hard drive and reinstalled windows (from CD) and MS office from an ISO image. I have run some utilities (Gizmo and ISO Mount) to help determine why my laptop was locking up. I thought the lockups could have been due to a bad driver. Bitdefender has been running since Windows was installed and before any other programs were installed. I've also scanned the disk numerous times with MBAM and Bitdefender with only once getting a few browser cookie items.

I've also had to reboot many times after lockup and went into safe mode also several time -- this could be the cause of some MS error events.

I think all my drivers are updated including the BIOS. I think the problem relates to having conflicts with to much virus protection.
  • Bitdefender Total Security 2013
    • AV with real time protection
    • Firewall
    • Internet Protection
    • Malware
  • Malwarebytes Pro with real time protection
  • Spybot Search and Destroy with active protection
  • Windows Firewall Enabled
  • Windows Defender Enabled
My previous experience was that MBAM and Spybot worked with AV but I was only using the free versions. I've now disabled Windows Firewall and Defender in place of Bitdefender and uninstalled Spybot and Malwarebytes. I've alwas left the Microsoft items enabled but with only a single purpose AV enabled. The laptop has not locked up for a whole day.

I like the Bitdefender UI and it had top ratings for 2013. I also ran a full scan in recovery mode and found no virus. Bitdefender actually boots into a Linux OS to scan in recover mode scan.

How can I revert back to MBAM Free from PRO? I reinstalled and it kept the Pro enabled?

#6 AdvancedSetup

AdvancedSetup

    Staff

  • Root Admin
  • PipPipPipPipPipPip
  • 41,245 posts
  • Gender:Male
  • Location:US

Posted 29 January 2013 - 11:27 PM

You can download and run mbam-clean.exe from here and it will completely remove the program and the registration.
You can then reinstall but do not use the Trial or activate the program to use just the Free version - (not recommended, but up to you).

I would think though that more than likely all that is needed is to setup the appropriate exclusions within Bitdefender and Malwarebytes programs.

Ron Lewis
Forum Community Manager

staff.png

Follow us: Twitter, Become a fan: Facebook


#7 MrEPM

MrEPM

    New Member

  • Members
  • Pip
  • 4 posts

Posted 05 February 2013 - 09:54 PM

I removed MBAM and SpyBot as a temporary measure and have not had any problems since. I hope to add the full versions back eventually by adding the correct exclusions between Windows and all Firewall, AV, and Malware programs. Bitdefender is now the registered Firewall and Malware program with Windows also. There were definitely some conflicts with all these running.





Also tagged with one or more of these keywords: Application Error

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users