-
Posts
533 -
Joined
-
Last visited
Content Type
Events
Profiles
Forums
Posts posted by Rsullinger
-
-
Hey everyone,
We have a new build we would like to have everyone test:
https://malwarebytes.box.com/s/iu4ii7jafj05cdktv1hqkzghkuzja7jj 1403.
This build is to fix the IE issue on some use cases where the last build did not fix it. We would like to get your feedback if this build still fixes the issue. Also, if the last build did not fix it, we want a confirmation if this build does. Let me know if you run into any issues with this build!
-
Hey Kippykip,
I want to have you collect me a couple of logs so I can look into this issue further.
Can you please collect the files in this folder location:
C:\ProgramData\Malwarebytes\MBAMService\logs\
and
C:\ProgramData\Malwarebytes\MBAMService\mbae-default.log
Along with that, I want to have you run a tool called FRST to collect some information on the computer. To do this:
1: Please download FRST from the link below and save it to your desktop:
FRST 32-bit version: https://downloads.malwarebytes.com/file/FRST
FRST 64-bit version: https://downloads.malwarebytes.com/file/FRST64
2: Double-click the purple FRST icon to run the program. Click Yes when the disclaimer appears.3: Click the Scan button
4: When the scan has finished, it will make 2 log files in the same directory the tool is run, FRST.txt and Addition.txt. Please attach both files in your reply.
-
hello Jwoodskitsap,
So the files in that tmp directory are the new update files. If the files cannot be swapped out on an upgrade, we will place the files there and create an entry to swap out those files on reboot. So those files look like they were not swapped in this case. If you stopped the service and swapped the files it would work, but wouldn't fix it for all of your other users. Do you mind looking at another computer having this issue an confirm if it is the same two files in question?
-
Hey Everyone,
I am sorry to hear that. Thank you for the feedback. Let me get this information back to our developer to see why it had no impact.
-
It does not, you can just install it on a test client directly.
-
Hello Everyone,
Seems like soon came sooner then I thought. We have a test build that we would like everyone to try on one or two computers with the issue. If you are willing to test this, please download this build and install it over the top:
https://malwarebytes.box.com/s/8ma5jwu414jnlolvg0s5zvyk20j4n07y
This is business build. So if anyone is using the consumer build, please use the one posted here:
https://forums.malwarebytes.com/topic/184939-mbae-109-latest-standalone-beta/
Please let me know any feedback you have on the build!
-
Awesome! Thank you for the confirmation!
-
Hello Everyone,
We are currently working on a build to fix this like I mentioned yesterday. I should have an update soon on this.
To answer your question @BrentB9193, if you can't use another browser like firefox or chrome currently, you can disable the IE shield and that should allow you to use IE while we get this build completed. It will still protect you with every other shielded application and allow you to use the IE applications that you may use in your environment.
-
Hello Everyone,
Wanted to give you a brief update on this. We found what we believe is the problem. We are going to be looking into and making sure that it is the issue. We will have something soon for you to test and see if it fixes the issue on your side. I will make sure to update this thread when I have a build in hand to give all of you!
-
Hey REGITDept,
I have an update for you on this issue. They created a test build that they believe should fix the issue but they want to get a few confirmations. Can you try this build on the machine:
https://malwarebytes.box.com/s/1wfy1x2dbjud4bt6i5f97qm8v3wq19rf
and let me know if it fixes it or not?
Thank you!
-
Hello All,
Thank you for the information and logs you provided. The team is currently looking into this issue and will see about getting a fix for this soon. I may reach out to a few of you directly for some additional logging based on what the team finds. I will also make sure to update this thread when I have more information.
@JimF As a temporary work around you can disable the IE shield. It disables the protection for IE, but you won't lose the protection for the other programs. Not the greatest of work around currently, but it will save you for disabling the entire program. If I get a better one (that just involves disabling some advanced settings) I will let you know!
-
Hey Jwoodskitsap,
Do you mind taking a screenshot of your C:\Program Files (x86)\Malwarebytes Anti-Exploit directory. If you notice a tmp folder in there, can you take a picture of what is in that folder as well? I am curious if the files from the upgrade swapped correctly and if there is any files in there, then it could be the reason why.
-
@DanJordan No problem. I am going to send you a PM to gather some additional information much like with the earlier poster. Since it is business issue in this case, I will need you to collect specific logs compared to the first.
-
Hello RegitDept,
Thank you for the logs.
@everone can you make sure to grab the logs from the same link and attach them here?
-
Thank you for the logs.
I am getting this over to the team right now to take a look at it. I will let you know when I have an update from them!
-
Hello Alsoeric,
Do you mind reproducing the issue one more time. When you do, can you please collect these two logs for me:
C:\ProgramData\Malwarebytes\MBAMService\mbae-default.log
C:\ProgramData\Malwarebytes\MBAMService\logs\MBAMSERVICE.logThe directory is hidden by default so you might have to click on "View -> Hidden items" in Explorer to see it.
There is also a post here from Microsoft on how to do this for the more recent OS: https://support.microsoft.com/en-us/help/14201/windows-show-hidden-files -
Hello Clint and Dan,
We do have some reports of this issue however, collecting the logs for this is important to see if it is a new issue or if it is the same as another issue already reported. With out that to confirm, I would be throwing builds at you that may or may not fix the issue especially if it is a unique case.
@danjordan Are you a consumer or a business user. I want to make sure what build you would be using as that may affect the issue you are experiencing.
-
Hey REGITDept,
Do you mind getting me the frst logs from this post:
Going to get this over to our team so they can look into it and get it fixed.
-
Hello REGITDept,
Do you mind collecting the logs from this location:
We are getting a few reports of this and want to look into the data. Make sure you grab both the FRST logs and the Mbae logs as well.
-
Hey drdas,
I am going to send you a PM with some instructions to collect some further logging. Go ahead and send the logs back in that PM just so I can reveiw them.
-
Hey Lwphipps,
Where did you e-mail the logs? I want to make sure an agent can grab them and review them for you!
-
Hello Greensysadmin,
Thank you for that. Let me get this over to our team to review further.
-
Hey drdas,
All vbscript.dll does is allows programs to call it to run vbscripts. So if this is only happening in IE when you launch it, something may be trying to run a VB script in IE. If you are not sure the contents of this, I would reset IE back to defaults just to be safe. Check IE for any suspicious looking add-ins and remove them as well. Also make sure the home page is set to the default loading and not any strange redirect sites.
-
Hello Greensysadmin,
I do apologize for the delay. We want to have you test out a beta build on one machine to see if it fixes the issue. Go ahead and download the build here and run it over the top:
https://malwarebytes.box.com/s/h0bltpx2iqf3q80tvukv170gxmvr2q32
Please try this and let me know if it fixes the issue!
MBAE 1.09.2.1384 - Internet Explorer 11 (Latest Updates) Random Freezes
in Malwarebytes Anti-Exploit for Business
Posted
Hey REGITDept,
I would at least confirm on one pc if possible. We had a few customers that even after using that last build it was not fixed or the issue came back. So we made a minor change to help as well and we want to make sure everyone is good with this now.