S Sysnative Windows Update Inactive Joined Oct 9, 2014 Posts 773 May 25, 2020 #21 Not really. That would usually be a driver fault of the application accessing it. That is possible in the case of MBAM.
Not really. That would usually be a driver fault of the application accessing it. That is possible in the case of MBAM.
U usasma Retired Admin Joined Feb 20, 2012 Posts 2,126 May 25, 2020 #22 Just FYI - MBAM has a couple of drivers that are very finicky when confronted with other (non-MBAM) drivers. They tends to crash if the other drivers aren't behaving exactly as they expect. The last case that I saw was with BitDefender - and it took getting BitDefender to rewrite it's driver(s) in order to fix the MBAM crashes. Here's the procedure that they recommend for updating MBAM: BSOD from Malwarebytes Premium?
Just FYI - MBAM has a couple of drivers that are very finicky when confronted with other (non-MBAM) drivers. They tends to crash if the other drivers aren't behaving exactly as they expect. The last case that I saw was with BitDefender - and it took getting BitDefender to rewrite it's driver(s) in order to fix the MBAM crashes. Here's the procedure that they recommend for updating MBAM: BSOD from Malwarebytes Premium?
B Butters76 Member Joined May 19, 2020 Posts 23 May 27, 2020 #23 Still no restarts, maybe it was MBAM causing it.
B Butters76 Member Joined May 19, 2020 Posts 23 May 27, 2020 #25 What do you recommend me to use on a Win SRV 2016 instead of MBAM then?
S Sysnative Windows Update Inactive Joined Oct 9, 2014 Posts 773 May 27, 2020 #26 Windows Defender + uBlock Origin in the browser and a FW.
B Butters76 Member Joined May 19, 2020 Posts 23 May 27, 2020 #27 softwaremaniac said: Windows Defender + uBlock Origin in the browser and a FW. Click to expand... Thanks, atm its Windows defender and hardware firewall. I'll check out uBlock.
softwaremaniac said: Windows Defender + uBlock Origin in the browser and a FW. Click to expand... Thanks, atm its Windows defender and hardware firewall. I'll check out uBlock.
B Butters76 Member Joined May 19, 2020 Posts 23 May 27, 2020 #29 OK, I notice it now writes like crazy to c:\Windows\temp , goes over 300mb/sec at times. So everything hangs due to I/O que. Windows defender also had 100% cpu usage for a short while. I think this might be what has happened before when it gets a Critical stop and it restarts. Attachments diskread.JPG 90.1 KB · Views: 8
OK, I notice it now writes like crazy to c:\Windows\temp , goes over 300mb/sec at times. So everything hangs due to I/O que. Windows defender also had 100% cpu usage for a short while. I think this might be what has happened before when it gets a Critical stop and it restarts.
S Sysnative Windows Update Inactive Joined Oct 9, 2014 Posts 773 May 27, 2020 #30 Something is causing this. You may want to try using ProcMon to find out what's writing to the folder: How can I find out which program creates a file/folder in my C: drive?
Something is causing this. You may want to try using ProcMon to find out what's writing to the folder: How can I find out which program creates a file/folder in my C: drive?
B Butters76 Member Joined May 19, 2020 Posts 23 May 29, 2020 #31 This is strange. Its MSMPENG.EXE writing Windows\temp. Thats strange, why should Windows defender write hundreds of megabytes/sec to the tempfolder? Attachments write.JPG 303.8 KB · Views: 4
This is strange. Its MSMPENG.EXE writing Windows\temp. Thats strange, why should Windows defender write hundreds of megabytes/sec to the tempfolder?
S Sysnative Windows Update Inactive Joined Oct 9, 2014 Posts 773 May 29, 2020 #32 From browsing on Google, allegedly excluding C:\Windows\Temp folder from WinDef scan alleviates the issue somewhat, but it looks like to be some kind of glitch. Windows Defender constantly creates and reads etilqs files in C:\Windows\Temp\
From browsing on Google, allegedly excluding C:\Windows\Temp folder from WinDef scan alleviates the issue somewhat, but it looks like to be some kind of glitch. Windows Defender constantly creates and reads etilqs files in C:\Windows\Temp\
B Butters76 Member Joined May 19, 2020 Posts 23 Jun 5, 2020 #33 This one is solved, was MBAM. Not restarted since removal.