Jump to content

Jekko

Staff
  • Posts

    365
  • Joined

  • Last visited

Everything posted by Jekko

  1. @TempLost - Was this MBAM 3.1.0.1716 over MBAM 3.0.6.1469? Or was this installing over our previous MBAE release (1.09.1.1334)?
  2. For what it's worth, the results I posted earlier with my screenshots regarding the benchmark tool was done on a heavily used system with multiple programs running. As Exile stated, it's unfortunate to hear a user will be uninstalling MBAM, but we will always be here to provide what help we can.
  3. For others running 3.0.6 and Component Update 1.0.75, if you are still seeing issues, we would like to see your diagnostic logs so we can analyze why web protection is not turning on.
  4. @cmdd - Could you follow Firefox's suggestion above? You are using 3.0.6 with Component 1.0.50 which is the older version released. Following these directions will safely update you to 3.0.6 with Component 1.0.75:
  5. QA guy reporting. I've tested on two systems here and my findings show a slight difference in test results, but not as apparent as what you are seeing @bdg2. I also ran on a laptop with an Intel i7-6650U CPU @ 2.20 GHz and the numbers for the multi-threading benchmark was: MBAM On: 3631 MBAM Off: 3468 Do you think there may be another process that may be conflicting? It's interesting that your test showed such a huge difference compared to what I am seeing. What version of MBAM did you run? I tested with MBAM 3.0.6.1469 with the latest Component Update package 1.0.75
  6. @mumof3kiwis and @CodeOperator Have you tried installing the latest version of 3.0.6 with Component Update Package 1.0.75? https://downloads.malwarebytes.com/file/mb3/
  7. Also, be sure to grab the latest released version of mbam 3.0.6: https://downloads.malwarebytes.com/file/mbam We just posted this today!
  8. @jru - I've spoken to our developers and they agree that running mbam-clean and reinstalling is the best course of action. We will begin researching why this can happen in the first place, but I think we've collected the logs we need. Please let us know if reinstalling after running mbam-clean resolves your issue.
  9. @jru - Did you reboot and see web protection off? Could you also turn on Event Log Data under Application Settings and attempt to turn on Web Protection again? This will add additional logging to MBAM. Then some fresh logs from you may help us understand what's happening with your installation. Could you run the following tools, as well as get your mbamservice logs: FRST Will generate Addition.txt and FRST.txt. mbam-check Will generate mb-checkResult.txt. C:\ProgramData\Malwarebytes\MBAMService\logs
  10. To any users experiencing web protection starting issues, please ensure you install the version posted here. As @cchilderhose posted, the versions you want to see are Malwarebytes version 3.0.6.1469, and component package version 1.0.75. If you want to be extra careful, you can use the tool mbam-clean to remove your previous version before installing the new version with component package 1.0.75.
  11. @TempLost - Are you seeing this error? Do you see "DNS address could not be found" or "ERR_NAME_NOT_RESOLVED"?
  12. Also, just to make sure, when you get the DNS error, what error is shown? Do you see "DNS address could not be found" or "ERR_NAME_NOT_RESOLVED"?
  13. Thanks TempLost! We will take a look and see what we can figure out.
  14. @mightaswell Could you run FRST and attach the files Addition.txt and FRST.txt? Could you also run mbam check and attach the generated log mb-checkResult.txt?
  15. @TempLost If you are still seeing issues with Web Protection not showing a block page, please try installing the new version of MBAM 3.0.6 posted by bdubrow on Feb 24th. This version seemed to solve the issues for @Acrobaze so I am curious if it will also help you. If you do try this, be sure to check the about page for Component Package Version: 1.0.75.
  16. @Acrobaze - That was my mistake! Previously in MBAM 2.x we protected the desktop shortcut for malwarebytes. Another way to test if self-protection is working is, while it's turned on, to create a new folder in the Malwarebytes Program Files directory. C:\Program Files\Malwarebytes\Anti-Malware @TempLost - Thank you for your response! I'll look into the 2 sets of logs you've sent, but if you have any clear instructions on program compatibility or conflict please don't hesitate to respond. You originally opened this thread for Web Protection issues so we can continue the conversation here.
  17. I've modified the batch script I sent earlier. Based on the logs you sent with Event Logging on, we think this may solve your issue. Please run this file as admin again, and let us know how the results are. Do not worry about uninstalling Avast or CryptoPrevent yet. SP_Replace.zip
  18. Thanks for the logs @TempLost. Unfortunately nothing clear has been found from procmon. We did see there were accesses by aswidagenta.exe which is Avast Identity Protection software. Could you try disabling Avast temporarily and running the batch script I gave you to see if self-protection can be enabled? Also, can I ask you to enable Event Log Data in MBAM's Application settings? This will give more advanced logging to the MBAMSERVICE.log file. Please try those steps and attach your mbamservice.log file afterwards.
  19. Here is the process to get logs from ProcessMonitor: Run procmon.exe. Agree to the License Agreement. Process Monitor will open and being collecting events from your computer. Follow the other steps I've outlined earlier regarding SP_Replace.bat: Run SP_Replace.bat as Administrator. Wait for MBAM's UI to open. Turn on/off self-protection in MBAM's Protection Settings. Click on the save icon. Look at the path for Logfile.PML. Click OK. Zip and Attach Logfile.PML back here on the forums. If the file is too big, I can provide a box.com folder for you to upload to. Please let me know if you have any questions.
  20. Thanks for the logs @TempLost. Your cooperation has been great! For some reason it looks like mbamchameleon.sys is being blocked when it should be created. Could you try the following? Download ProcessMonitor. Run ProcessMonitor. Run SP_Replace.bat as Administrator. Wait for MBAM's UI to open. Turn on/off self-protection in MBAM's Protection Settings.
  21. @templost We're still looking into the issue, but if you could provide your latest mbamservice.log, that would be very helpful.
  22. @TempLost Do you still see self-protection enabled in the UI? Can you rename the shortcut for MBAM on desktop? This would prove to us if chameleon is protecting MBAM's files correctly.
  23. Could you try the following? Open cmd.exe with admin credentials and run the command: net stop mbamservice Delete the file C:\ProgramData\Malwarebytes\MBAMService\config\SpConfigFile.json Open MBAM. Adversely, if you do not know how to do those steps, I am also attaching a file "SP_Replace.bat" which will do those steps listed. You will need to run SP_Replace.bat as administrator for it to work correctly. After doing those steps, and MBAM is running again, please check if MBAMChameleon.sys has been replaced. SP_Replace.zip
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.