MrEPM

Application Error on Win7 x64 locks up PC

7 posts in this topic

Log Name: Application

Source: Application Error

Date: 1/24/2013 9:44:04 PM

Event ID: 1000

Task Category: (100)

Level: Error

Keywords: Classic

User: N/A

Computer: V1520-KATHIE

Description:

Faulting application name: mbamservice.exe, version: 1.70.0.0, time stamp: 0x50cb9148

Faulting module name: mbamservice.exe, version: 1.70.0.0, time stamp: 0x50cb9148

Exception code: 0x40000015

Fault offset: 0x0005f6eb

Faulting process id: 0x7d4

Faulting application start time: 0x01cdfa95e3595e20

Faulting application path: C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe

Faulting module path: C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe

Report Id: 14a0b466-6699-11e2-ad54-904ce5fee62d

Event Xml:

<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">

<System>

<Provider Name="Application Error" />

<EventID Qualifiers="0">1000</EventID>

<Level>2</Level>

<Task>100</Task>

<Keywords>0x80000000000000</Keywords>

<TimeCreated SystemTime="2013-01-25T02:44:04.000000000Z" />

<EventRecordID>2579</EventRecordID>

<Channel>Application</Channel>

<Computer>V1520-KATHIE</Computer>

<Security />

</System>

<EventData>

<Data>mbamservice.exe</Data>

<Data>1.70.0.0</Data>

<Data>50cb9148</Data>

<Data>mbamservice.exe</Data>

<Data>1.70.0.0</Data>

<Data>50cb9148</Data>

<Data>40000015</Data>

<Data>0005f6eb</Data>

<Data>7d4</Data>

<Data>01cdfa95e3595e20</Data>

<Data>C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe</Data>

<Data>C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe</Data>

<Data>14a0b466-6699-11e2-ad54-904ce5fee62d</Data>

</EventData>

</Event>

Share this post


Link to post
Share on other sites

Hello and Welcome to Malwarebytes,

Sorry to hear you're having issues with the program. It may be your antivirus that is blocking the program causing this event.

Please run the following scans and post back the logs as attachments and we'll take a look and see what we can find.

Please create an mbam-check log:

  • Download mbam-check.exe from here and save it to your desktop
  • Double-click on mbam-check.exe to run it, it should then open a log file
  • Please do not copy and paste the entire contents of the log into your next post, instead please attach the log CheckResults.txt file which should now be located on your desktop to your next post

Next, Please run the following scanner and send back the logs.

Download DDS from one of the locations below and save to your Desktop

dds.scr

dds.com

Temporarily disable your antivirus while running the scan and re-enable it when done.

How To Temporarily Disable Your Anti-virus, Firewall And Anti-malware Programs

Once downloaded you can disconnect from the Internet and disable your Ant-Virus temporarily if needed.

Then double click dds.scr or dds.com to run the tool, on Vista or Win 7 right click and select Run as administrator

Click the Run button if prompted with an Open File - Security Warning dialog box.

A black DOS console should open and run for a moment.


    When done, DDS will open two (2) logs:

    1. DDS.txt
    2. Attach.txt

  • Save both reports to your desktop
  • Please include the following logs in your next reply: DDS.txt and Attach.txt
    You can ignore the note about zipping the Attach.txt file in most cases.

Share this post


Link to post
Share on other sites

The results from all three tests are in the attched files. Please let me know what you find. I also learned that I had Windows Firewall and Bitdefender Firewall enabled, only one is enabled now. The same was true for Windows Defender and Bitdefender Spyware/Malware.

Attach.txt

CheckResults.txt

DDS.txt

Share this post


Link to post
Share on other sites

Well based on the Event Logs from your computer it would appear the computer is either infected or has some serious software conflicts going on.

I would recommend following the advice from here Available Assistance for Possibly Infected Computers and let one of the Experts assist you in reviewing your computer for any infections.

==== Event Viewer Messages From Past Week ========

.

1/28/2013 7:01:04 AM, Error: Service Control Manager [7001] - The Computer Browser service depends on the Server service which failed to start because of the following error: The dependency service or group failed to start.

1/28/2013 6:53:21 PM, Error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: GizmoDrv

1/28/2013 6:51:37 AM, Error: Service Control Manager [7001] - The HomeGroup Provider service depends on the Function Discovery Provider Host service which failed to start because of the following error: The dependency service or group failed to start.

1/28/2013 6:51:33 AM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1084" attempting to start the service WSearch with arguments "" in order to run the server: {7D096C5F-AC08-4F1F-BEB7-5C22C517CE39}

1/28/2013 6:51:32 AM, Error: Microsoft-Windows-WLAN-AutoConfig [10000] - WLAN Extensibility Module has failed to start. Module Path: C:\Windows\System32\IWMSSvc.dll Error Code: 21

1/28/2013 6:51:32 AM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1084" attempting to start the service WSearch with arguments "" in order to run the server: {9E175B6D-F52A-11D8-B9A5-505054503030}

1/28/2013 6:51:32 AM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1084" attempting to start the service EventSystem with arguments "" in order to run the server: {1BE1F766-5536-11D1-B726-00C04FB926AF}

1/28/2013 6:51:26 AM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1084" attempting to start the service ShellHWDetection with arguments "" in order to run the server: {DD522ACC-F821-461A-A407-50B198B896DC}

1/28/2013 6:51:13 AM, Error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: avc3 BDVEDISK discache GizmoDrv gzflt spldr trufos Wanarpv6

1/28/2013 6:49:18 PM, Error: Service Control Manager [7034] - The MBAMService service terminated unexpectedly. It has done this 1 time(s).

1/28/2013 1:41:06 AM, Error: Service Control Manager [7011] - A timeout (30000 milliseconds) was reached while waiting for a transaction response from the SENS service.

1/28/2013 1:40:36 AM, Error: Service Control Manager [7011] - A timeout (30000 milliseconds) was reached while waiting for a transaction response from the Schedule service.

1/28/2013 1:40:06 AM, Error: Service Control Manager [7011] - A timeout (30000 milliseconds) was reached while waiting for a transaction response from the IKEEXT service.

1/28/2013 1:39:36 AM, Error: Service Control Manager [7011] - A timeout (30000 milliseconds) was reached while waiting for a transaction response from the iphlpsvc service.

1/28/2013 1:39:06 AM, Error: Service Control Manager [7011] - A timeout (30000 milliseconds) was reached while waiting for a transaction response from the wuauserv service.

1/26/2013 3:26:30 AM, Error: Service Control Manager [7011] - A timeout (30000 milliseconds) was reached while waiting for a transaction response from the AudioEndpointBuilder service.

1/26/2013 3:25:30 AM, Error: Service Control Manager [7011] - A timeout (30000 milliseconds) was reached while waiting for a transaction response from the Wlansvc service.

1/26/2013 3:24:30 AM, Error: Service Control Manager [7011] - A timeout (30000 milliseconds) was reached while waiting for a transaction response from the BFE service.

1/26/2013 3:23:30 AM, Error: Service Control Manager [7011] - A timeout (30000 milliseconds) was reached while waiting for a transaction response from the MBAMScheduler service.

1/26/2013 3:23:00 AM, Error: Service Control Manager [7011] - A timeout (30000 milliseconds) was reached while waiting for a transaction response from the SysMain service.

1/25/2013 8:18:35 PM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1068" attempting to start the service fdPHost with arguments "" in order to run the server: {D3DCB472-7261-43CE-924B-0704BD730D5F}

1/25/2013 8:18:35 PM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1068" attempting to start the service fdPHost with arguments "" in order to run the server: {145B4335-FE2A-4927-A040-7C35AD3180EF}

1/24/2013 9:46:10 PM, Error: Service Control Manager [7011] - A timeout (30000 milliseconds) was reached while waiting for a transaction response from the WerSvc service.

1/24/2013 4:45:54 PM, Error: Service Control Manager [7001] - The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error: The dependency service or group failed to start.

1/24/2013 4:45:53 PM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1068" attempting to start the service netprofm with arguments "" in order to run the server: {A47979D2-C419-11D9-A5B4-001185AD2B89}

1/24/2013 4:45:53 PM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1068" attempting to start the service netman with arguments "" in order to run the server: {BA126AD1-2166-11D1-B1D0-00805FC1270E}

1/24/2013 4:44:14 PM, Error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: AFD avc3 BdfNdisf bdfwfpf BDVEDISK CSC DfsC discache GizmoDrv gzflt NetBIOS NetBT nsiproxy Psched rdbss spldr tdx trufos Wanarpv6 WfpLwf

1/24/2013 4:44:14 PM, Error: Service Control Manager [7001] - The Workstation service depends on the Network Store Interface Service service which failed to start because of the following error: The dependency service or group failed to start.

1/24/2013 4:44:14 PM, Error: Service Control Manager [7001] - The TCP/IP NetBIOS Helper service depends on the Ancillary Function Driver for Winsock service which failed to start because of the following error: A device attached to the system is not functioning.

1/24/2013 4:44:14 PM, Error: Service Control Manager [7001] - The SMB MiniRedirector Wrapper and Engine service depends on the Redirected Buffering Sub Sysytem service which failed to start because of the following error: A device attached to the system is not functioning.

1/24/2013 4:44:14 PM, Error: Service Control Manager [7001] - The SMB 2.0 MiniRedirector service depends on the SMB MiniRedirector Wrapper and Engine service which failed to start because of the following error: The dependency service or group failed to start.

1/24/2013 4:44:14 PM, Error: Service Control Manager [7001] - The SMB 1.x MiniRedirector service depends on the SMB MiniRedirector Wrapper and Engine service which failed to start because of the following error: The dependency service or group failed to start.

1/24/2013 4:44:14 PM, Error: Service Control Manager [7001] - The Network Store Interface Service service depends on the NSI proxy service driver. service which failed to start because of the following error: A device attached to the system is not functioning.

1/24/2013 4:44:14 PM, Error: Service Control Manager [7001] - The Network Location Awareness service depends on the Network Store Interface Service service which failed to start because of the following error: The dependency service or group failed to start.

1/24/2013 4:44:14 PM, Error: Service Control Manager [7001] - The IP Helper service depends on the Network Store Interface Service service which failed to start because of the following error: The dependency service or group failed to start.

1/24/2013 4:44:14 PM, Error: Service Control Manager [7001] - The DNS Client service depends on the NetIO Legacy TDI Support Driver service which failed to start because of the following error: A device attached to the system is not functioning.

1/24/2013 4:44:14 PM, Error: Service Control Manager [7001] - The DHCP Client service depends on the Ancillary Function Driver for Winsock service which failed to start because of the following error: A device attached to the system is not functioning.

1/24/2013 2:04:13 PM, Error: Service Control Manager [7011] - A timeout (30000 milliseconds) was reached while waiting for a transaction response from the ShellHWDetection service.

1/24/2013 1:11:16 PM, Error: Service Control Manager [7011] - A timeout (30000 milliseconds) was reached while waiting for a transaction response from the vsserv service.

1/23/2013 7:58:20 PM, Error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\DR1.

1/23/2013 7:20:19 AM, Error: Service Control Manager [7023] -

1/23/2013 7:19:02 AM, Error: Service Control Manager [7034] - The Bing Desktop Update service service terminated unexpectedly. It has done this 1 time(s).

1/23/2013 6:42:20 AM, Error: Service Control Manager [7030] - The Creative OEM013 RunApp Service service is marked as an interactive service. However, the system is configured to not allow interactive services. This service may not function properly.

1/23/2013 10:20:27 PM, Error: Microsoft-Windows-WER-SystemErrorReporting [1001] - The computer has rebooted from a bugcheck. The bugcheck was: 0x0000007e (0xffffffffc0000005, 0xfffff800028d4280, 0xfffff880031dfec8, 0xfffff880031df720). A dump was saved in: C:\Windows\MEMORY.DMP. Report Id: 012313-14882-01.

.

==== End Of File ===========================

Share this post


Link to post
Share on other sites

Thank you for the initial analysis. I won't rule out a virus or malware completely but I think that is unlikely. I purchased a new hard drive and reinstalled windows (from CD) and MS office from an ISO image. I have run some utilities (Gizmo and ISO Mount) to help determine why my laptop was locking up. I thought the lockups could have been due to a bad driver. Bitdefender has been running since Windows was installed and before any other programs were installed. I've also scanned the disk numerous times with MBAM and Bitdefender with only once getting a few browser cookie items.

I've also had to reboot many times after lockup and went into safe mode also several time -- this could be the cause of some MS error events.

I think all my drivers are updated including the BIOS. I think the problem relates to having conflicts with to much virus protection.

  • Bitdefender Total Security 2013
    • AV with real time protection
    • Firewall
    • Internet Protection
    • Malware

    [*]Malwarebytes Pro with real time protection

    [*]Spybot Search and Destroy with active protection

    [*]Windows Firewall Enabled

    [*]Windows Defender Enabled

My previous experience was that MBAM and Spybot worked with AV but I was only using the free versions. I've now disabled Windows Firewall and Defender in place of Bitdefender and uninstalled Spybot and Malwarebytes. I've alwas left the Microsoft items enabled but with only a single purpose AV enabled. The laptop has not locked up for a whole day.

I like the Bitdefender UI and it had top ratings for 2013. I also ran a full scan in recovery mode and found no virus. Bitdefender actually boots into a Linux OS to scan in recover mode scan.

How can I revert back to MBAM Free from PRO? I reinstalled and it kept the Pro enabled?

Share this post


Link to post
Share on other sites

You can download and run mbam-clean.exe from here and it will completely remove the program and the registration.

You can then reinstall but do not use the Trial or activate the program to use just the Free version - (not recommended, but up to you).

I would think though that more than likely all that is needed is to setup the appropriate exclusions within Bitdefender and Malwarebytes programs.

Share this post


Link to post
Share on other sites

I removed MBAM and SpyBot as a temporary measure and have not had any problems since. I hope to add the full versions back eventually by adding the correct exclusions between Windows and all Firewall, AV, and Malware programs. Bitdefender is now the registered Firewall and Malware program with Windows also. There were definitely some conflicts with all these running.

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!


Register a new account

Sign in

Already have an account? Sign in here.


Sign In Now

  • Recently Browsing   0 members

    No registered users viewing this page.