Jump to content

Deneb

Honorary Members
  • Posts

    43
  • Joined

  • Last visited

Reputation

0 Neutral
  1. I don't know if it might help or not, but I posted in the forum about this happening to me on a couple of occasions. It happened on more than a couple of occasions, but I only posted about it twice because the stock answer was to use MBAM Clean and reinstall, which like Ken, I found only worked for a few days. Anyhow, the last time I reinstalled MBAM, I didn't enable the explorer context-menu setting. It must be over three weeks now and I haven't had a single re-occurrence. Just thought I'd mention this as I'm also using MBAM on a Win 8.1 pro 64-bit machine. Might or might not be relevant.
  2. I have both running here. The only issue I know of is that MBAM detects two registry modifications made by CP v6 as possible malware indications (by default, possibly more if you enable or add other filtering in CP). They can easily be excluded from detection. See the link below, or follow the "Read Me" link in the CP main interface. http://www.foolishit.com/vb6-projects/cryptoprevent/anti-virus-anti-malware-application-warning
  3. Hi Unicore, in the interests of getting the right information I deleted the two registry entries from my exclusions list and ran another scan. Its the drop-down action menu in the scan result screen of the MBAM main interface that you need. Click on the drop down menu for each entry - it gives three options: Quarantine, Add Exclusion or Ignore Once. Hope that helps. Good luck!
  4. All you need to do is to add the two registry detections for piffile and scrfile to Malware Exclusions. From memory, I think a right click on the quarantine entries allows this - it's been a few days since I did it now so I can't recall exactly.
  5. There is now an article on these detections on the Cryptoprevent author's website: http://www.foolishit.com/vb6-projects/cryptoprevent/anti-virus-anti-malware-application-warning/
  6. CryptoPrevent has just been updated to version 6, which has a real-time filter thatprevents execution of CPL, SCR and PIF files by default (configurable in settings). If you have the premium version you will have automatically updated. MalwareBytes sees the registry changes made by CryptoPrevent as an indication of possible malware alterations to the registry. The simplest solution is to choose to exclude the detections in MBAM. See the Technical Information and Forum menus in CryptoPrevent for more information.
  7. I came back from holiday last week, updated MBAM to the current version, and a couple of days later realised that Malwarebytes Secure Backup (a branded version of SOS) hadn't performed any scheduled backups since my return. Trying to run MBSB manually, I also got "Unable to connect to server" messages in the MBSB backup window. After much fiddling, I decided to uninstall and reinstall MBSB, but found that I couldn't delete the MBSB folders and files in the "ProgramData\Malwarebytes\Malwarebytes Secure Backup" folder. I kept getting the message that I needed administrator permission, even though I was logged on as an administrator account. Eventually, I realised that I had to disable self-protection in MBAM to gain access to that folder - it seems that MBAM locks the whole folder and therefore not only MBAM files but also MBSB files!. I've reinstalled MBSB but haven't re-enabled MBAM self protection, and it is now working fine again. I doubt that SOS backup installs files in the same folder, but it might be worth turning off MBAM self-protection if you have it enabled, and seeing if that makes a difference.
  8. Hi Firefox, The logs in my previous post are a couple of weeks old now. I was running 2.0.2.1010 when it happened. I'd completed an in-place install over the top of v1009 a couple of hours previously, and everything seemed fine up until the point where I rebooted the PC following an update for my UPS monitoring software. Anyway, I've done as you suggested and completely removed MBAM using the clean tool. I installed v1010 again and rebooted - all OK. Set up exclusions and rebooted - no tray icon. This time though, Task Manager showed that MBAM was running and I found I could get the tray icon back by manually running "Malwarebytes Anti-Malware Notifications". I re-booted a couple more times just for good measure, and both times again the tray icon was missing when the PC restarted, although MBAM was running. I unticked the option to start MBAM with Windows in Advanced Settings, then selected it again, and on a subsequent re-boot the tray icon was back. So far, all seems OK.
  9. Same thing has just happened again, following a reboot - MBAM icon disappeared from sys tray and MBAM not running. Got the screenshots this time after starting MBAM manually. Looking at the settings screen, it seems to think that it's a different version - Business Version I'm guessing. There's no version number in the title bar and my licence information is blank. Trying to update the database or clicking on Fix Now just gets a response that the update server is unreachable. Fixed again by an uninstall and re-install, with all my licence details and previous settings retained.
  10. I've removed Java from the machine, although it was disabled in the browser. The Cryptographic Services error is a known issue with Windows 8.1 and the Volume Shadow Copy Service. The MS recommended fix doesn't work, but Macrium state that although the error is generated when a backup starts, their software is not affected by it and it can be safely ignored. It hasn't caused any issues with either Macrium, Syncback or MBSB. I've attached the new logs generated following a reboot. Thank you for your help. FRST.txt Addition.txt CheckResults.txt
  11. Yes, could be, and Ssantoro's post "Malwarebytes won't open and Chameleon doesn't work" (sorry, I can't paste links) also posted today shows a screen shot of the exact errors I got when trying to run Chameleon. Is the notification menu that I saw in MB Business Edition? Maybe MBAM thought it was a different edition for some reason? Firefox, thanks for your reply. I don't actually need assistance, because I seem to have managed to fix whatever the problem was with a re-install. My offer to post the logs was just in case they might be helpful in debugging if it is more than an isolated issue. I did intend to take a screenshot, but then uninstalled before I remembered that was what I had intended to do - sorry. I've attached the logs anyway. I'm no expert, but the most useful information seems to me to be in Addition.txt as it contains details of the MBAM application errors. FRST.txt Addition.txt CheckResults.txt
  12. This is exactly what happened to me this morning, same error in Chameleon - see my post titled Strange Issue - sorry I can't paste a link. I unistalled and re-installed MBAM and now everything is fine.
  13. I'm running MBAM 2.1.0.1004 Premium on Win 8.1 64-bit with the spring update. This morning, I booted my PC, which had been powered off overnight, and noticed that the MBAM icon was no longer in the notification area. Further investigation revealed that MBAM wasn't running. I started MBAM manually, and the dashboard came up displaying a warning that the databases were out of date, and that real-time protection was disabled. I tried to do a manual update, but got an error that the server was not available. My internet connection was up and I verified that I could reach several external sites and perform manual updates on other applications, including Eset AV. Going in to MBAM settings, I found that all the log entries and exclusions were no longer showing in the lists. Start MBAM with Windows, enable Malware and Website protection were all enabled in settings, but disabled according to the dashboard, and could not be started. Full scans with Eset AV and Hitman Pro did not find anything untoward. I ran Chameleon, which started but came up with two errors, to the effect that it could not perform an update and could not start a system scan. One other thing I noticed that I had not seen before, was a menu in MBAM settings that appeared to allow configuration for various MBAM notifications to be sent by email, written to the syslog etc. I ended up uninstalling and re-installing MBAM, and everything is working fine again now. All my settings and licence details were preserved, the log entries and exclusions are showing in the console and it is updating and scanning fine. The notification configuration menu I mentioned above has disappeared again. The only other thing of note is that I accepted a Windows Update for KB2919355 again yesterday. This was originally installed last Patch Tuesday as part of the spring update, but appears to have been offered again yesterday as indicated by Microsoft here: http://support.microsoft.com/kb/2919355 Looking at the logs, MBAM had not written any entries since the update was installed, so possibly it is connected. Anyway, everything seems to be fine again now. I did download and run FRST and mbam-check.exe before uninstalling MBAM, and I still have the logs available if they are of interest.
  14. I have had both MBAM and Eset AV running together on my PC for several years with no problems. I have exclusions for Eset set in MBAM and for MBAM set in Eset as per advice on this site. Having updated MBAM to v2 I initially saw a fairly noticeable increase in CPU and disk activity when MBAM was scanning. On investigating further, I realised that my exclusions in Eset were set for "C:\Program Files (x86)\Malwarebytes' Anti-Malware\nnn" which was the correct patyh for MBAM v1, but that MBAM v2 had installed itself in "C:\Program Files (x86)\Malwarebytes Anti-Malware". Notice that the apostrophe following "Malwarebytes" is no longer present in the directory name. I altered my exclusion list accordingly, and MBAM's performance is as before, with no noticeable performance issues.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.