LiquidTension

Hi all, We hope to have a fix for this issue in an upcoming update. Thank you for your patience. An update to this forum topic will be posted once we have more information.

Hi @Taffy1812, The log file mentioned in post #2 will help us track down this issue (in addition to the issue you're seeing with the improper appearance of the notification). Please consider running the Malwarebytes Support Tool and providing the generated file so that we can improve/address any issues with this experience.

Hi @AngryStomper, Yes, this is a legitimate notification. However, there does appear to be an issue with the notification's appearance. Could you carry out the instructions in post #2 to help us determine the cause of this issue please?

Hi @boneto74, Please run the Malwarebytes Support Tool and gather logs: https://support.malwarebytes.com/hc/en-us/articles/360039023453-Upload-Malwarebytes-Support-Tool-logs-manually This will allow us to determine if the issue you've encountered is one of the known issues we're currently aware of.

Hi all, After further investigation of this issue with the data we've received so far, we believe this issue may involve process injection that is being performed at startup by a McAfee product. For users who have not provided logs, please could we get confirmation that affected machines have a McAfee product installed (e.g. McAfee Endpoint Security). Is there anyone in a position to temporarily uninstall the McAfee product, reboot the machine and verify if the detection persists or not?

Please run the Malwarebytes Support Tool and gather logs: https://support.malwarebytes.com/hc/en-us/articles/360039023453-Upload-Malwarebytes-Support-Tool-logs-manually

Hello, Thanks for reporting the issue. We're aware of some issues with the upgrade process. Please gather logs with the Malwarebytes Support Tool on any machines that you've encountered an installation issue with. https://support.malwarebytes.com/hc/en-us/articles/360039023453-Upload-Malwarebytes-Support-Tool-logs-manually Please attach the mbst-grab-results.zip file to a forum post or send a private message with it attached.

Hi @EvilPeppard, The latest beta does not contain a fix for the issue you're experiencing. We hope to have something available to try in an upcoming update.

Thanks for the update, Bill. We still have a defect filed for this issue currently in our backlog. We hope to get to it in a future product update.

Hi all, There's a two-part process here involving a component update and a service update. In cases where 4.1.0 (the service update) does not appear to install, we believe it may be due to this taking place in the wrong order. If you've encountered an issue with getting 4.1.0 installed, please gather logs with the Malwarebytes Support Tool: https://support.malwarebytes.com/hc/en-us/articles/360039023453-Upload-Malwarebytes-Support-Tool-logs-manually Thank you!

Thanks for the feedback, @MikeW!

Hi all, Thanks for reporting the issue. We're aware of some issues with the upgrade process. Please gather logs with the Malwarebytes Support Tool on any machines that you've encountered an installation issue with. https://support.malwarebytes.com/hc/en-us/articles/360039023453-Upload-Malwarebytes-Support-Tool-logs-manually Please attach the mbst-grab-results.zip file to a forum post or send a private message with it attached.

We don't have any updates at this current time. If you do not wish to leave Web Protection disabled, you have the option of reverting to an earlier version. Here's the installer: https://malwarebytes.box.com/s/z6cravnwptrzx5tyjw36jq6zt6c7apsx Once installed, you will need to disable the "Application updates" settings found in Settings -> General to prevent the program from automatically updating to the affected version.

Hi @PiRat, Please provide us with the information mentioned in the following post: https://forums.malwarebytes.com/topic/256682-false-positive-userinitexe/?do=findComment&comment=1363624

Hi @jeffadelaide, It looks like you've been running a combination of different Malwrebytes installers. Install issues are to be expected when the old version 3 installer is run on top of the new version 4 installer. To confirm, Malwarebytes is now correctly installed and running? Assuming you currently have the trial enabled, if you wish to revert to free version, please refer to the following article: https://support.malwarebytes.com/hc/en-us/articles/360040972954-Deactivate-Premium-Trial-in-Malwarebytes-for-Windows-v4

Hi @DeanAnderson, This does appear to be a false-positive, but we'll need additional information to confirm. What Malwarebytes product and version do you have installed? What version of Windows was this encountered on? Please zip up and provide the contents of the C:\ProgramData\Malwarebytes Anti-Exploit folder.

@AndyGarside The reports from the above users are indeed a false-positive. To confirm with certainty if this applies to your 3 affected machines, we would need to see the MBAMService.log file (found in %programdata%\Malwarebytes\MBAMService\logs or %programdata%\Malwarebytes\MB3Service\logs). The additional information requested in post #13 is to aid our efforts in finding a solution for the false-positive.

Hi @RichardMills, If you still encounter an issue, please disable hardware acceleration for the Malwarebytes user interface. This can be accomplished by running the following batch file: https://downloads.malwarebytes.com/file/disable_hwacc_bat You should find the user interface opens normally afterwards.

The only option currently available is to disable Malwarebytes from registering with Windows Security Center. You can find the option to disable this in Settings -> Security -> Windows Security Center.

Hello @Nj2020, An incompatibility between Malwarebytes Ransomware Protection and Kaspersky 2020 products currently exists. We've released a fix for this issue in the standalone Malwarebytes Anti-Ransomware and hope to bring this across to the main Malwarebytes product in an upcoming update. See here: https://forums.malwarebytes.com/topic/255936-kaspersky-2020-version-issues-incompatibility-and-more/?do=findComment&comment=1359179 Until that time, you can either use the 2019 version of your Kaspersky product or disable Ransomware Protection (and reboot at least once).

Thank you for the additional information. We're still looking for Process Monitor boot time logs captured as the issue is reproduced. If you're able to reproduce the detection once more, please generate a boot time log using the instructions in the article below: https://support.malwarebytes.com/hc/en-us/articles/360039025073-Use-Process-Monitor-to-create-real-time-event-logs (refer to the "Create a boot log" steps) Once you have the log, please zip up and provide the following: Process Monitor boot time log MBAMService.log Contents of the C:\ProgramData\Malwarebytes\MB3Service\ARW directory. Farbar Recovery Scan Tool logs: https://support.malwarebytes.com/hc/en-us/articles/360039025013-Run-Farbar-Recovery-Scan-Tool-to-gather-logs Please ensure the second, third and forth items are uploaded after generating the Process Monitor log.

Hi @TigerByte, When you run Process Monitor, could you save the results to a log file and provide us with a copy, please. This will help us determine if what you're experiencing is a known issue or not. You can find instructions for saving a log in the following article: https://support.malwarebytes.com/hc/en-us/articles/360039025073-Use-Process-Monitor-to-create-real-time-event-logs Thank you!

Thank you for the logs, @biomembrain The issue is evident in the logs, but unfortunately there's not enough information to determine why this is occurring. I've sent you follow-up instructions to gather more information on the issue.

Hi @raphaelmsx, What you're seeing is likely caused by your last scan time. If a scan has not been performed within the last 7 days, Windows Security Centre will be instructed to display the warning you're currently seeing. Please run a Threat Scan (open the user interface and click Scan Now). After the scan, confirm the warning is no longer displayed.

Hi all, Thank you for your patience with this issue. We are still working on this and hope to make a fix available in a future update. In the meantime, if you would prefer not to leave Web Protection disabled, you can revert to an earlier version of Malwarebytes that does not contain this issue. See this post for details.