LiquidTension

Thank you for the dump. We're reviewing the data now. In the meantime, could you provide some additional information: How often does the BSOD occur? Are you able to reproduce it on-demand? Are there particular triggers of it or is it seemingly random? Any potential correlation with certain activities that result in it occurring? When the BSODs occurred previously, were you connected to a VPN? When did this first start occurring? Were any significant changes made around this time? Are you able to temporarily uninstall Avast, reboot and check if the BSOD persists? This is always the best approach to ruling out (or confirming) if third-party Anti-Virus software is involved.

Hi @Buzzman25, Thanks for the report. You've encountered a different bugcheck to the other BSODs reported. To confirm if your BSOD has the same underlying root cause, could you zip up and provide us with the C:\Windows\MEMORY.dmp file please. Thank you!

Hi @PCBungler, Can you provide a screenshot of what you're seeing, please? Are you referring to something found in the following Settings page?

Great, thanks for confirming!

Hi all, We're making good progress towards a fix for this issue, but currently do not have any details to share about a potential release date. Are you able to temporarily uninstall the McAfee product and confirm the detection stops? How often after startup does this occur? Does this occur immediately after startup or after a certain amount of uptime? How soon after startup is Excel launched?

Hi @biomembrain, We're in the process of reviewing the additional data you recently provided. We'll follow-up with an update shortly.

@torrey Thank you for clarifying. Yes, please start a new topic in this forum section with details on the explorer.exe detection. Please include the following: Details on the deployed Windows Updates (KB numbers, etc). Any Anti-Ransomware detection reports. MBAMService.log found in C:\ProgramData\MB3Service\logs. Contents of the C:\ProgramData\Malwarebytes\MB3Service\ARW directory. Farbar Recovery Scan Tool logs: https://support.malwarebytes.com/hc/en-us/articles/360039025013-Run-Farbar-Recovery-Scan-Tool-to-gather-logs

We will provide an update to this forum topic once it's released.

Thank you for confirming!

@Tguy27 If you still encounter an issue with activating, can you try temporarily disabling Windows Firewall or booting into Safe Mode with Networking and then attempting to activate?

Hi @Whovian, Thank you for reporting the issue. What you've encountered is a known issue currently with installing a new component update. In most cases, this can be resolved by simply restarting the computer. Please do the following: Click the Windows start button. Click the Power button. Click Restart (not Shut down). After the restart, please check if Malwarebytes will open.

Hi @Mtenks, Thank you for reporting the issue. It sounds like you may have been logged into a temporary user account after an issue was encountered at startup with loading your normal account. We'd like to look further into the issue encountered so that we can hopefully address the underlying cause of the issue. If you're willing, please carry out the instructions in post #2 and respond back with the generated file.

Hi @Taffy1812, The first post has been edited with the image above.

Unfortunately, it does not.

Hi @torrey, Could you clarify what you mean by "lock-up"? So far, we're only aware of an issue with userinit.exe being detected (albeit, not actually quarantined). Are you saying this is also resulting in the machine locking up/freezing?

Hi Bill, The user access restriction hasn't fully been implemented for the Display tab. We have a story filed to get this implemented with an upcoming update.

If you are unable to access the hardware acceleration option in the Settings, you can launch the UI with a command line parameter that will also disable hardware acceleration. Here's a batch file that will do this: https://downloads.malwarebytes.com/file/disable_hwacc_bat This should be run on any machine which exhibits a blank window when the Malwarebytes UI is opened. Once run, hardware acceleration will remain disabled for future sessions.

Hi @Tguy27, You have a Windows Firewall rule to block C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe, which is likely what's causing your issue with activating. You'll need to remove this rule from Windows Firewall.

Hi @xzerozal, Thanks for the report. What you've encountered is a known issue with installing component updates that we are in the process of addressing. It was the action of restarting the system that resolved your issue. If you experience any further problems, please let us know.

Hello @ChrisPbass, We released an update to the standalone Malwarebytes Anti-Ransomware that addresses this issue. https://forums.malwarebytes.com/topic/211708-latest-version-mbarw-beta-v-0918807-build-278-released-feb-5-2020/ We hope to bring this into the latest Malwarebytes version 4 product in an upcoming update. Until that time, the 2020 version of Kaspersky products cannot be run with Malwarebytes version 4 when Ransomware Protection is enabled. Thank you for your patience with this issue.

Hello, The forum announcement will mention IPv6. However, I will still post here to let you know when it's available. Note that before we release to all users, it will most likely be made to beta update users first and announced in the forum section linked below. https://forums.malwarebytes.com/forum/251-malwarebytes-4x-beta/ You can enable beta updates in Settings -> General.

Hi @Taffy1812, Thank you for the file. What we're dealing with is two potential issues here: The frequency of the notification. The appearance of notification. For #1, please answer the following: How many times in total have you seen this notification? How soon after you power on the machine do you see the notification? Is it consistently displayed whenever the machine is powered on? How often do you shut down and power on the machine? For #2, we'll need to collect additional information to help us determine the cause. Please open Internet Explorer and access the following: https://www.malwarebytes.com/lp/iris/169/ Does this display correctly in the browser? Please take a screenshot of what you see and provide it to us. Download the following batch file and run it: https://malwarebytes.box.com/s/95yz192s3ebf91yjn8u93s5wn3nb7b2w A file named mb-query.txt will be saved to your desktop. Please attach this file.

Hello, This is the same version that was released to beta a couple of days ago. It's now been released publicly to all users, so no change with the issue you're experiencing.

Thank you for confirming. We are in the process of investigating a potential fix for this issue and will provide an update to this topic as soon as possible. If the issue is consistently reproducible on any machine, we are still looking for the troubleshooting information mentioned in the following post (we do appreciate this may be difficult to generate if the issue only occurs randomly).

Hello @GoldSmoke, We released an update to the standalone Malwarebytes Anti-Ransomware that addresses this issue. https://forums.malwarebytes.com/topic/211708-latest-version-mbarw-beta-v-0918807-build-278-released-feb-5-2020/ We hope to bring this into the latest Malwarebytes version 4 product in an upcoming update. Thank you for your patience with this issue.