John A

I have been caught out a couple of times where I stopped protection, rebooted then forgot that protection was stopped. I know that the icon is a different colour when it is stopped, but I thought it would be a good idea for MBAE to put up a warning notification on startup if protection is off.

It happens all the time

Yes, same computer. How do I export the required group policy? Unsure how to locate it in GPEDIT - it will only export what is in view. Also, I normally operate using a LOCAL account, which may be relevant.

I haven't seen this one for a while. Symptom is two MBAM icons in task bar, each showing different database. Windows 7 x 32. All good on restart.

Issue resolved with 1.04.1.1008

Test machine Windows 8.1 x 64 Issue: No response upon right click on MBAE icon. Occasionally it works but 4/5 attempts fail. If the icon is hidden, there is no response. If the icon is showing, right click yields the attached Double click responds as expected. All other icons are immediately responsive Issue does not occur on Windows 7 x 32 or XP test computers

See PM

If MBAE is installed (or uninstalled) while IE is open, IE stops working during the install/uninstall process. Happened with 1.01.4.1007 and still happens with 1.01.4.1008. Tested on Windows 7 x 32 If this is inevitable, the install process should address this issue.

Also I have been intermittently (approx. weekly) getting this on the same W8.1 device: wscript.exe - application error on startup (The application was unable to start (0xc0000018).) Once it happens, it occurs permanently on startup and nothing requiring scripts will run - only way to recover is System Restore back a couple of days. So it is clear that somehow a system file is being corrupted. I am unsure yet, but I suspect that this also may be related to either MBAE or MBAM. I have removed both and will run for a while without them.

No custom shields. See PM

No EMET

Could MBAE 1.04.1.1006 be causing OneDrive to fail on startup? If I remove MBAE and restart OneDrive works fine. Windows 8.1 Log Name: Application Source: Application Error Date: 4/08/2014 8:10:14 PM Event ID: 1000 Task Category: (100) Level: Error Keywords: Classic User: N/A Computer: JohnAcer-PC Description: Faulting application name: SkyDrive.exe, version: 17.3.1165.612, time stamp: 0x539a47b7 Faulting module name: KERNELBASE.dll, version: 6.3.9600.17055, time stamp: 0x532943a3 Exception code: 0x80000003 Fault offset: 0x000b3425 Faulting process ID: 0x11b4 Faulting application start time: 0x01cfafcc4711b45f Faulting application path: C:\Users\mogoj_000\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe Faulting module path: C:\WINDOWS\SYSTEM32\KERNELBASE.dll Report ID: 8617fadd-1bbf-11e4-82ce-1c7508e2b2ec

I can't replicate it. As it only happens at computer startup I don't see how I can have ProcessExplorer running anyway. This event is happened about the same time during startup as https://forums.malwarebytes.org/index.php?/topic/152422-mbam-crash-on-system-startup/ a couple of weeks ago, but I notice that the faulting module is different

Windows7x32 Desktop On computer startup, this occurred, after program close, two MBAM icons were in tray, restarted, OK Problem signature: Problem Event Name: APPCRASH Application Name: mbam.exe Application Version: 1.0.0.532 Application Timestamp: 53518532 Fault Module Name: mbam.exe Fault Module Version: 1.0.0.532 Fault Module Timestamp: 53518532 Exception Code: c0000005 Exception Offset: 001a2580 OS Version: 6.1.7601.2.1.0.768.3 Locale ID: 3081 Additional Information 1: 0a9e Additional Information 2: 0a9e372d3b4ad19135b953a78882e789 Additional Information 3: 0a9e Additional Information 4: 0a9e372d3b4ad19135b953a78882e789

No, just browser based banking. Not even Java (I don't have Java Runtime installed)

I will restart after future crashes. Checked for updated LAN driver - found there was a later version so I have updated that. I have recently done a disk check using Windows disk checker, also Samsung HD diagnostic check - no issues found Thanks John

In IE I was logged in to my secure bank site, clicked on a link to go to an associated web site, MBAM crashes. - then able to navigate to the associated site. - restarted MBAM, attempted to navigate to associated site, received IE error "This page cannot be displayed" (same thing as in my thread on the help forum) - exited MBAM, all good - restarted MBAM, all good Unable to repeat exact procedure. Problem signature: Problem Event Name: APPCRASH Application Name: mbam.exe Application Version: 1.0.0.532 Application Timestamp: 53518532 Fault Module Name: mbam.exe Fault Module Version: 1.0.0.532 Fault Module Timestamp: 53518532 Exception Code: c0000005 Exception Offset: 001a2580 OS Version: 6.1.7601.2.1.0.768.3 Locale ID: 3081 Additional Information 1: 0a9e Additional Information 2: 0a9e372d3b4ad19135b953a78882e789 Additional Information 3: 0a9e Additional Information 4: 0a9e372d3b4ad19135b953a78882e789

Always the same story - after restarting Malwarebytes, all is well. I understand this is a difficult one, I will keep trying to isolate it.

Again it happened on W7 desktop this time the payment link to Paypal from a web site failed: exit Malwarebytes, link then worked.

Excellent!

I will do that, thanks.

There are no Minidump files in that folder

Windows 7, MBAM 2.0.2.1012, MSE During computer startup, "Malwarebytes Antimalware has stopped working" Problem signature: Problem Event Name: APPCRASH Application Name: mbam.exe Application Version: 1.0.0.532 Application Timestamp: 53518532 Fault Module Name: StackHash_9266 Fault Module Version: 6.1.7601.18247 Fault Module Timestamp: 521ea91c Exception Code: c0000374 Exception Offset: 000c3873 OS Version: 6.1.7601.2.1.0.768.3 Locale ID: 3081 Additional Information 1: 9266 Additional Information 2: 926603a979a5c8699c81d201f1daf6ba Additional Information 3: 15e7 Additional Information 4: 15e73c4524c9b0efe099378b22f080f5 Restarted Malwarebytes, all OK.

Some users will search the forum and try to work out things to try before posting. Others have a problem they can't solve so their starting point is a new thread. We are here to help other users, not be ironic, cynical or patronising: which helps no-one. I don't wish to discuss this further.

Most people require precise and detailed instructions, as supplied by the detailed posts by daledoc1 and 1PW. You did not specify what and how to uninstall, what and how to clean, what and how to reinstall.