Jump to content

NCStafford

Staff
  • Posts

    31
  • Joined

  • Last visited

Reputation

0 Neutral

About NCStafford

Contact Methods

  • Website URL
    https://www.malwarebytes.com

Profile Information

  • Location
    San Francisco Bay Area
  • Interests
    Bycling, hacky sack, video games, anything tech related, and of course helping to detect and crush malware.

Recent Profile Visitors

6,654 profile views
  1. Hello temp, It looks like this is due to a default setting in Chrome that prefetches the items in the query. Malwarebytes blocks that particular site, "ausajocs.com", from the prefetch list. There is a setting in Chrome that you can adjust so that this prefetching does not occur: 1. In the top-right corner of the browser window, click the Chrome menu icon Chrome menu. Select Settings. 2. At the bottom of the page, click Show advanced settings. 3. In the "Privacy" section, check "Predict network actions to improve page load performance.” If you want to undo this permission, simply uncheck the box. Perhaps the other person that does not have that issue has already performed these steps on their browser. Let me know if that helps.
  2. Hello PollyKate, I am glad that we can help learn about new tools. Learning something new each day is something I try to do . Thank you very much for the proc mon logs. I will be handing these over to the development team for analysis. In the meantime, I have been informed by support that you may have an infection: The FRST shows this: HKU\S-1-5-21-2602612520-1628966450-300582549-1001\...\Run: [bRS] => C:\Program Files (x86)\WSE_Astromenda\BRS\brs.exe -runBRS HKU\S-1-5-21-2602612520-1628966450-300582549-1001\...\RunOnce: [WSE_Astromenda] => wscript /E:vbscript /B "C:\Users\penny\AppData\Roaming\WSE_Astromenda\UpdateProc\bkup.dat" Which sure looks like an infection --- astromenda. The error MIGHT be the result of that malware infection, software conflicts or other problems. Moreover, the absence of symptoms does NOT mean that a computer is clean -- some malware hides very well. And malware is one possible reason for MBAM scans to have errors. Further investigation and repair will require tools whose use is not permitted in this particular section of the forum. So, that is why @AdvancedSetup suggested posting a new topic in the malware removal section after reading the advice here: Available Assistance for Possibly Infected Computers I would suggest that you go ahead and click on that link. The experts there will assist you with looking into your issue and with getting MBAM up and running properly. Please let me know afterwards if those steps help you with your issue. Thanks again for all your assistance, Noah
  3. Hello Delphin136, Thank you for using Malwarebytes Anti-Malware. Great find! We are aware of many translation errors and will add this to our list. Thank you, Noah
  4. Hello PollyKate, Thanks for all your help, we here really do appreciate your efforts . If you still have all those zip files, we can try another method for sending them. Please zip the file and then upload it as mentioned below... (if the zip file is still that large after zipping that is) Upload File(s) to WeTransfer: Visit WeTransfer.comClick on I Agree Click on the icon on the lower left indicated in the below image Select the Link option Click on +Add Files Browse to the location of the file and double-click on it or click once on it and select Open Click on Transfer Once the transfer completes, click on Copy link Once you receive the Copied! message as indicated below, paste the link into your next reply
  5. Hello PollyKate, Thank you for the logs and checkresult. And yes, please have all the log(s) zipped when you post. Thank you, Noah
  6. Hello PollyKate, I am sorry that you are having difficulties with Malwarebytes Anti-Malware. There are a couple of actions that I would like you to take for me, so that I can better understand the issue that you are having. 1) First, if you could post the scan log where your error occurred along with the protection log of the day when this issue occurred. 2) Second, if you could run mbam-check and post that log: Create and mbam-check log: Download mbam-check.exe from here and save it to your desktopDouble-click on mbam-check.exe to run it, it should then open a log filePlease copy and paste the entire contents of the log into your next post, or, if you prefer, you may attach theCheckResults.txt file which should now be located on your desktop to your next post instead3) Third, it would be great if you could run another threat scan and get a process monitor log during that scan: Create a Process Monitor Log: Create a new folder on your desktop called LogsPlease download Process Monitor from here and save it to your desktopDouble-click on Procmon.exe to run itIn Process Monitor, click on File at the top and select Backing Files...Click the circle to the left of Use file named: and click the ... buttonBrowse to the Logs folder you just created and type MBAM Log in the File name: box and click SaveExit Process Monitor and open it again so that it starts creating the logsINSERT INSTRUCTIONS FOR USER TO REPLICATE ISSUE HERE, I.E., SCAN WITH MBAM ETC.Close Process MonitorRight-click on the Logs folder on your desktop and hover your mouse over Send To and select Compressed (zipped) FolderPlease attach the Logs.zip file you just created to your next reply. All of these will greatly help us in determining the issue you are experiencing. Thank You, Noah
  7. Hello nginerd, How about trying this for us please. Run another threat scan, except after about 1000 detections, cancel the scan quickly. Let the scanner process the scan, so that we can have a scan log that shows what file name the detections have and where they are located (we dont need to know the full list of detections). If you could do that and then export us the scan log, that would be most helpful. Thanks again, Noah
  8. Hello nginerd, Thank you for the logs. You have provided us with a protection log. If you have any, could you export one of the threat scan logs, in particular, the scan log where our scanner has detected that large number of objects. Thank you, Noah
  9. Hello nginerd, Sorry that you are having issues with Malwarebytes Anti Malware. Please do not take any action on items from your scan: ***NOTE: If your last scan was with database update 2104.07.26.09 and you have detected items that need attention (especially windows files) do not Quarantine those files, there was a bug with that update. Thank you for the logs you have provided, please if you can can you also: Please create an mbam-check log: Download mbam-check.exe from here and save it to your desktopDouble-click on mbam-check.exe to run it, it should then open a log filePlease do not copy and paste the entire contents of the log into your next post, instead please attach the log CheckResults.txt file which should now be located on your desktop to your next post.Click on the More Reply Options button, then click on the Browse button to locate your log then click the Attach button to attach the log to your post. If you can also export the scan log from one of the scans where you had detected these large number of files. All of these will greatly help us in determining what issue is happening. Thank you, Noah
  10. Hello Lekkerb, Looking over the Process Monitor log, it appears that there are a couple of crash dump files for mbam.exe at the following location: C:\Users\Geest\AppData\Local\CrashDumps Could you please zip the ones labeled mbam.exe.4720. dmp and mbam.exe.3812.dmp and post them? If there are more than one, please use the largest file you can find. Thank you, Noah
  11. Hello Lekkerb, Thank you for providing those logs. Question though, are these logs when using the bad net.conf file that was causing you issues? If not, could you please rerun both wireshark and procmon with that net.conf. Thanks for your cooperation, Noah
  12. Hello Lekkerb, I was wondering if you could help us out by: 1) Providing the protection logs from the day that you were experiencing your issue? 2) Download Process Monitor, http://technet.microsoft.com/en-us/sysinternals/bb896645.aspx. Run this while trying to update and MBAM crashes. Get a log of when this happens and attach that log in a zipped file. 3) Download Wireshark, http://www.wireshark.org/download.html. Run this while trying to update as well. Get a log of when this happens and attach that log in a zipped file. Those two logs will help us out in determining the issue you are experiencing.
  13. Hello TripleTripe, I was wondering if you could do something for us please: try to get another database update and when your Malwarebytes Anit-Malware stops working, could you provide us with a dump file from that particular process that is causing the issue. This would be greatly appreciated. Thank you for you cooperation.
  14. @BallyIrish - the latest version of Anti-Exploit should be available for download here: http://www.malwarebytes.org/antiexploit/
  15. @BallyIrish - Which version of MBAE are you currently running?
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.