Jump to content

LiquidTension

Staff
  • Content Count

    4,192
  • Joined

  • Last visited

Posts posted by LiquidTension

  1. Hi David,

    According to the most recent FRST logs, you still have a local system proxy configured which is likely the cause of your issue. Given you manually removed it previously, it's apparent there is something present on the machine that is regenerating it.

    You could start off by experimenting with a clean boot to see if a particular installed program is responsible. Beyond that, using something like Sysmon or boot time Process Monitor (assuming it's being regenerated at boot) may give you an indication of the source.

    I've attached a Sysmon config file that will monitor for and report changes to any value named "ProxyServer".

    Install Sysmon:

    sysmon -accepteula -i config.xml

    Events are logged to the Microsoft-Windows-Sysmon/Operational event log.

    Stop monitoring/uninstall Sysmon:

    sysmon -u

     

    config.zip

  2. Thank you. This is the issue:

    "Exception details: text=SSL Exception: error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed"


    You mentioned no proxy is in use, but the logs do indicate the presence of the following local system proxy configuration:

    ProxyEnable: [.DEFAULT] => Proxy is enabled.
    ProxyServer: [.DEFAULT] => localhost:8080


    Do you recognise this?

  3. 23 hours ago, Chris1AA said:

    Same problem have not been fixed over half year

    This is not an issue with the Malwarebytes installation process.

    The software in question (QQPCMgr) is preventing the Malwarebytes installer service from writing to the registry. This is an issue that should be taken up with and addressed by the vendor of the other software.

  4. Hello,

    Thank you for the troubleshooting data.

    Unfortunately, there are various Windows Filtering Platform collisions between Malwarebytes Web Protection and other network filtering software.

    We are actively looking into potential solutions. In the meantime, you will need to keep Web Protection disabled whilst using Private Internet Access.
    See here: https://support.malwarebytes.com/hc/en-us/articles/360051090194

    I've sent you a message with follow-up steps if you're able to consistently reproduce this BSOD.

  5. Hello,

    Thanks for the report. Please upload MEMORY.dmp to a file hosting service such as WeTransfer.com and share the download link in a forum post.

    Could you provide more details on what events took place leading up to either BSOD? Is there anything in particular you were doing around the time the BSODs occurred? Was Private Internet Access or any other type of network filtering software (aside from Malwarebytes Web Protection) running at the time?

    Are you able to reproduce the BSOD on-demand?

  6. There is a known issue with database updates hanging that we plan to release one fix for in an upcoming update. In the meantime, restarting the Malwarebytes service (right-click the Malwarebytes icon in the notification area, click Quit Malwarebytes and then relaunch Malwarebytes) or restarting the computer should be sufficient.

    As mentioned above, the logs from the Malwarebytes Support Tool will help confirm what you've encountered is the known issue.

  7. This is indeed a WFP collision between Malwarebytes and Kaspersky software. We have reproduced this behaviour internally.

    Please see https://support.malwarebytes.com/hc/en-us/articles/360051090194-Issues-running-other-security-applications-and-Malwarebytes-for-Windows.

    As you've found, exclusions are not sufficient for working around this problem. You will need to disable Web Protection in Malwarebytes or uninstall Kaspersky Total Security/disable the web protection-related functionality in Kaspersky Total Security.

  8. Hi there,
     

    Quote

    My worry was when the message where you can click "Later" or "Restart computer" literally keeps coming up every 1-5 minutes when I click 'Later'. When I tried actually opening MBAM from the tray icon it wouldn't open.

    It sounds you like you've run into an issue with a component update being installed - most likely it's in a hung state and the reboot notification is generated when this condition is detected.

    Are you certain the notification is reappearing as frequently as every minute?

    Please run the Malwarebytes Support Tool and gather logs:
    https://support.malwarebytes.com/hc/en-us/articles/360039023453-Upload-Malwarebytes-Support-Tool-logs-offline

  9. Hello,

    Thanks for reporting the issue.

    We're interested in learning more about the initial issue you encountered with launching and subsequently uninstalling Malwarebytes. Whilst most logging from the installation will now be gone, there should still be some logs present that may help determined what happened.

    If you're interested, please run the Malwarebytes Support Tool and gather logs:
    https://support.malwarebytes.com/hc/en-us/articles/360039023453-Upload-Malwarebytes-Support-Tool-logs-offline

    Thank you!

Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.