John A

On a different computer, also got FP on NCH's expressrip.exe, again, nothing listed in scan results. I assume this is the same issue.

Thanks for the explanation.

Yes I did that - after running FP Tracker I removed Stamp.exe from the allow list. The scanner no longer picks stamp.exe up as a detection so unable to reproduce. Stamp.exe has not been changed and it runs normally. If MB4 picks up Stamp.exe in a scan why doesn't real time protection stop Stamp.exe from running?

Thanks Exile360. Yes the correct version is listed in Programs and Features.

Last scan picked up NCH software Stamp.exe. I think this is a FP (image attached) Nothing listed in saved scan results??? (attached) Ran FP Tracker, failed - "No scan detections found" (image attached) JSON file attached MB didn't quarantine this even though settings says Auto quarantine. 8ceff076-d1b4-11e9-912b-382c4abd2e03.zip Scanresults.txt

Clean install yesterday MB4 UI reports version 4.0.1.31 is installed. Belarc reports the following version(s?) are installed: Malwarebytes - Malwarebytes version 4.0.0.62Malwarebytes - Service version 3.2.0.853 (64-bit) Install file MBSetup.exe also shows 4.0.0.62 (see attached)

Thank you Exile360, that has fixed it. I was particularly interested in dates in the scanner. Surprising that MB still doesn't honour the Windows setting by default.

Will we be able to change the date format in MB4 UI? Currently it shows mm/dd/yy yet my Windows 10 date format is set to dd/mm/yyyy. The same issue occurred in MB3 but there was a setting that could be changed to fix it

The original failure must have been associated with Windows feature update. I have done two further feature updates to Windows 10, both with MB4 Beta running - no issues occurred. Normally I would disable any third party security apps when doing a Windows 10 feature update. MB4Beta is running beautifully. It is much better than the early versions of MB3.

I had no problem using copy/paste (Ctrl V) of id and key with the Beta.

OK

BTW I don't have any MB exclusions in Defender

Attached EventLogs.zip

Sorry, I was a bit slack with details on this one. The MB icon disappeared from the tray. I didn't check services however around that time the event below was logged. There are two folders called "crashreports" in %localappdata%, both empty. Log Name: Application Source: MBAMService Date: 30-Aug-19 12:29:34 PM Event ID: 0 Task Category: None Level: Information Keywords: Classic User: N/A Computer: DESKTOP-GP3MKNM Description: Service stopped Event Xml: <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event"> <System> <Provider Name="MBAMService" /> <EventID Qualifiers="0">0</EventID> <Level>4</Level> <Task>0</Task> <Keywords>0x80000000000000</Keywords> <TimeCreated SystemTime="2019-08-30T02:29:34.819763200Z" /> <EventRecordID>43</EventRecordID> <Channel>Application</Channel> <Computer>DESKTOP-GP3MKNM</Computer> <Security /> </System> <EventData> <Data>Service stopped</Data> </EventData> </Event>

Attached. If it happens again I will run the tool before restarting Windows mbst-grab-results.zip

MB 4.01.31 1.0.12741 Just updated Windows 10 to 18970.1005 x32 Did not uninstall MB prior to upgrade Following successful Windows upgrade, MB scanned OK Then I turned off web protection from tray icon options Clicked on "Manage protection settings" in warning notification" MB disappears. Restarted, all OK, cannot reproduce error. Any logs needed?

Attached dfdd3ebe-c6fc-11e9-83be-c80aa97368fa.zip

Controlled folder access is off and no other security software installed

Failed Scan results attached FP Tracker yielded the following ============================== FP Tracker - Version 1.5.0.0 ============================== Selected Scan Report: C:\ProgramData\Malwarebytes\MBAMService\ScanResults\dfdd3ebe-c6fc-11e9-83be-c80aa97368fa.json An error occurred! Failed to create output Zip file. Check C:\Users\scugt\AppData\Local\Temp\fp_tracker\log.txt for details. Press the Enter key to exit. C:\Users\scugt\AppData\Local\Temp\fp_tracker\log.txt says 2019-08-25 15:59:38:5938 INFO - Logging started: C:\Users\scugt\AppData\Local\Temp\fp_tracker\log.txt. 2019-08-25 15:59:38:5938 INFO - Box Drive upload is disabled (neither Box path exists). 2019-08-25 15:59:41:5941 INFO - User did not pass 'ScanReport' parameter. Defaulting to latest scan report. 2019-08-25 15:59:41:5941 INFO - Checking #0 scan report: C:\ProgramData\Malwarebytes\MBAMService\ScanResults\dfdd3ebe-c6fc-11e9-83be-c80aa97368fa.json 2019-08-25 15:59:41:5941 INFO - Found 1 detection(s). 2019-08-25 15:59:41:5941 INFO - Selected Scan Report: C:\ProgramData\Malwarebytes\MBAMService\ScanResults\dfdd3ebe-c6fc-11e9-83be-c80aa97368fa.json 2019-08-25 15:59:46:5946 INFO - Successfully downloaded fixed.txt to C:\Users\scugt\AppData\Local\Temp\fp_tracker\fixed.txt. 2019-08-25 15:59:48:5948 INFO - Successfully downloaded ignore.txt to C:\Users\scugt\AppData\Local\Temp\fp_tracker\ignore.txt. 2019-08-25 15:59:48:5948 INFO - Finished processing detections. 2019-08-25 15:59:49:5949 ERROR - Failed to create Zip file from C:\Users\scugt\AppData\Local\Temp\fp_tracker\tmp directory to C:\Users\scugt\Desktop\fp_tracker_2019-08-25_Forum_dfdd3ebe-c6fc-11e9-83be-c80aa97368fa.zip. Line 566. Exception calling "CreateFromDirectory" with "4" argument(s): "Could not find a part of the path 'C:\Users\scugt\Desktop\fp_tracker_2019-08-25_Forum_dfdd3ebe-c6fc-11e9-83be-c80aa97368fa.zip'.". at System.Management.Automation.ExceptionHandlingOps.CheckActionPreference(FunctionContext funcContext, Exception exception) at System.Management.Automation.Interpreter.ActionCallInstruction`2.Run(InterpretedFrame frame) at System.Management.Automation.Interpreter.EnterTryCatchFinallyInstruction.Run(InterpretedFrame frame) at System.Management.Automation.Interpreter.EnterTryCatchFinallyInstruction.Run(InterpretedFrame frame)

FP on MailClient.exe, installed from https://www.emclient.com/download File quarantined. FP Tracker said "No scan detections were found (Total:2)" ??

This version installed OK on Windows 10 18965.1005 (with Beta Edge Version 77.0.235.9 installed). Initial scan no issues. I don't like that it turns Defender off by default. Will continue playing with it.

This is a known bug with Malwarebytes, yet to be fixed. The workaround is turn off Fast Startup in Windows 10 Power options: Right click in lower left hand corner of screen and left click Power Options Click on Choose what the Power buttons do Click on Change settings that are currently unavailable Scroll down to Shutdown settings and Uncheck the box Turn on Fast Start-up Click Save Changes

The instructions at ... ... don't work if Windows 10 Controlled Folder Access is on. The doco needs to be updated to tell users to turn CFA off before downloading FRST and MB-Check, or tell them how to use the Downloads folder rather than the Desktop. Problems are: FRST 1. Is not allowed to be downloaded to the Desktop 2. If it is already on the Desktop and it needs to update itself, it gets into a never-ending loop because the new download is never successfully downloads 3. It is not allowed to save its two text files on the Desktop MB-Clean Strangely, it is allowed to download to the desktop but the ".exe" file extension is omitted, so it can't be run from the Desktop unless the ".exe" file extension is manually added. Downloading it to the Downloads folder does not cause this problem It is allowed to create its output folder on the Desktop Testing done using Windows 10 Insider version 17046

I would suggest: uninstall Malwarebytes (deactivate licence first) restart uninstall Trend Micro restart. Then start the fall update again by clicking "Update now" from here https://www.microsoft.com/en-au/software-download/windows10 If it installs OK then install the latest versions of both products.

That would be the first thing to try. But before doing that, follow the instructions here, it may help staff identify the problem Then deactivate your licence, uninstall/restart/reinstall, activate.