-
Posts
365 -
Joined
-
Last visited
Content Type
Events
Profiles
Forums
Everything posted by Jekko
-
Feedback on Malwarebytes version 3.1.0.1716 beta
Jekko replied to TempLost's topic in Malwarebytes for Windows Support Forum
@TempLost - Was this MBAM 3.1.0.1716 over MBAM 3.0.6.1469? Or was this installing over our previous MBAE release (1.09.1.1334)? -
For what it's worth, the results I posted earlier with my screenshots regarding the benchmark tool was done on a heavily used system with multiple programs running. As Exile stated, it's unfortunate to hear a user will be uninstalling MBAM, but we will always be here to provide what help we can.
-
web protection keeps turning off in 3.0
Jekko replied to PaulAllen's topic in Malwarebytes for Windows Support Forum
For others running 3.0.6 and Component Update 1.0.75, if you are still seeing issues, we would like to see your diagnostic logs so we can analyze why web protection is not turning on. -
web protection keeps turning off in 3.0
Jekko replied to cmdd's topic in Malwarebytes for Windows Support Forum
@cmdd - Could you follow Firefox's suggestion above? You are using 3.0.6 with Component 1.0.50 which is the older version released. Following these directions will safely update you to 3.0.6 with Component 1.0.75: -
QA guy reporting. I've tested on two systems here and my findings show a slight difference in test results, but not as apparent as what you are seeing @bdg2. I also ran on a laptop with an Intel i7-6650U CPU @ 2.20 GHz and the numbers for the multi-threading benchmark was: MBAM On: 3631 MBAM Off: 3468 Do you think there may be another process that may be conflicting? It's interesting that your test showed such a huge difference compared to what I am seeing. What version of MBAM did you run? I tested with MBAM 3.0.6.1469 with the latest Component Update package 1.0.75
-
web protection keeps turning off in 3.0
Jekko replied to mumof3kiwis's topic in Malwarebytes for Windows Support Forum
@mumof3kiwis and @CodeOperator Have you tried installing the latest version of 3.0.6 with Component Update Package 1.0.75? https://downloads.malwarebytes.com/file/mb3/ -
@jru - I've spoken to our developers and they agree that running mbam-clean and reinstalling is the best course of action. We will begin researching why this can happen in the first place, but I think we've collected the logs we need. Please let us know if reinstalling after running mbam-clean resolves your issue.
-
@jru - Did you reboot and see web protection off? Could you also turn on Event Log Data under Application Settings and attempt to turn on Web Protection again? This will add additional logging to MBAM. Then some fresh logs from you may help us understand what's happening with your installation. Could you run the following tools, as well as get your mbamservice logs: FRST Will generate Addition.txt and FRST.txt. mbam-check Will generate mb-checkResult.txt. C:\ProgramData\Malwarebytes\MBAMService\logs
-
web protection keeps turning off in 3.0
Jekko replied to PaulAllen's topic in Malwarebytes for Windows Support Forum
To any users experiencing web protection starting issues, please ensure you install the version posted here. As @cchilderhose posted, the versions you want to see are Malwarebytes version 3.0.6.1469, and component package version 1.0.75. If you want to be extra careful, you can use the tool mbam-clean to remove your previous version before installing the new version with component package 1.0.75. -
Web protection not working - 3.06 new beta update
Jekko replied to Acrobaze's topic in Malwarebytes for Windows Support Forum
@TempLost - Are you seeing this error? Do you see "DNS address could not be found" or "ERR_NAME_NOT_RESOLVED"? -
new beta 3.0.6.1469/1.0.75 DNS error
Jekko replied to mightaswell's topic in Malwarebytes for Windows Support Forum
Also, just to make sure, when you get the DNS error, what error is shown? Do you see "DNS address could not be found" or "ERR_NAME_NOT_RESOLVED"? -
Web protection not working - 3.06 new beta update
Jekko replied to Acrobaze's topic in Malwarebytes for Windows Support Forum
Thanks TempLost! We will take a look and see what we can figure out. -
new beta 3.0.6.1469/1.0.75 DNS error
Jekko replied to mightaswell's topic in Malwarebytes for Windows Support Forum
@mightaswell Could you run FRST and attach the files Addition.txt and FRST.txt? Could you also run mbam check and attach the generated log mb-checkResult.txt? -
Web protection not working - 3.06 new beta update
Jekko replied to Acrobaze's topic in Malwarebytes for Windows Support Forum
@TempLost If you are still seeing issues with Web Protection not showing a block page, please try installing the new version of MBAM 3.0.6 posted by bdubrow on Feb 24th. This version seemed to solve the issues for @Acrobaze so I am curious if it will also help you. If you do try this, be sure to check the about page for Component Package Version: 1.0.75. -
@Acrobaze - That was my mistake! Previously in MBAM 2.x we protected the desktop shortcut for malwarebytes. Another way to test if self-protection is working is, while it's turned on, to create a new folder in the Malwarebytes Program Files directory. C:\Program Files\Malwarebytes\Anti-Malware @TempLost - Thank you for your response! I'll look into the 2 sets of logs you've sent, but if you have any clear instructions on program compatibility or conflict please don't hesitate to respond. You originally opened this thread for Web Protection issues so we can continue the conversation here.
-
Thanks for the logs @TempLost. Unfortunately nothing clear has been found from procmon. We did see there were accesses by aswidagenta.exe which is Avast Identity Protection software. Could you try disabling Avast temporarily and running the batch script I gave you to see if self-protection can be enabled? Also, can I ask you to enable Event Log Data in MBAM's Application settings? This will give more advanced logging to the MBAMSERVICE.log file. Please try those steps and attach your mbamservice.log file afterwards.
-
Here is the process to get logs from ProcessMonitor: Run procmon.exe. Agree to the License Agreement. Process Monitor will open and being collecting events from your computer. Follow the other steps I've outlined earlier regarding SP_Replace.bat: Run SP_Replace.bat as Administrator. Wait for MBAM's UI to open. Turn on/off self-protection in MBAM's Protection Settings. Click on the save icon. Look at the path for Logfile.PML. Click OK. Zip and Attach Logfile.PML back here on the forums. If the file is too big, I can provide a box.com folder for you to upload to. Please let me know if you have any questions.
-
Thanks for the logs @TempLost. Your cooperation has been great! For some reason it looks like mbamchameleon.sys is being blocked when it should be created. Could you try the following? Download ProcessMonitor. Run ProcessMonitor. Run SP_Replace.bat as Administrator. Wait for MBAM's UI to open. Turn on/off self-protection in MBAM's Protection Settings.
-
Could you try the following? Open cmd.exe with admin credentials and run the command: net stop mbamservice Delete the file C:\ProgramData\Malwarebytes\MBAMService\config\SpConfigFile.json Open MBAM. Adversely, if you do not know how to do those steps, I am also attaching a file "SP_Replace.bat" which will do those steps listed. You will need to run SP_Replace.bat as administrator for it to work correctly. After doing those steps, and MBAM is running again, please check if MBAMChameleon.sys has been replaced. SP_Replace.zip