LiquidTension

Hi @ToddLemire, Thanks for trying out the beta. There is a known issue currently where detections that should be displayed in the user interface at the end of the scan are still displayed. To help us confirm, please carry out the instructions linked below and attach the generated file: https://support.malwarebytes.com/docs/DOC-2396 Thank you!

Hi @rlkufrin, Thanks for sharing your feedback with us. This is a known issue which we hope to have fixed in the next release. Regarding the other issues you mentioned - please could you carry out the instructions linked below and provide the generated file so we can take a closer look. https://support.malwarebytes.com/docs/DOC-2396 Thank you!

Hi @Durew, Thanks again for testing out the Malwarebytes beta. In regards to the concern you raised on the HitmanPro.Alert test - here are a few points of consideration: Malwarebytes is committed to providing excellent protection against real-word threats and attack vectors that pose a true danger to computer users. We believe everyone is entitled to a malware-free existence and thus dedicate as many resources as we can to helping achieve this. We consider any indication of Malwarebytes Anti-Exploit being unable to provide protection against a real-world exploit as a serious and urgent matter. Test utilities such as the HitmanPro.Alert test are not real-world exploits with no guarantee of even closely resembling a real threat. It would be a disservice to Malwarebytes Anti-Exploit users if we were to dedicate time and resources away from combating actual threats that pose a true danger to computers. Third-party utilities may be updated and changed on a regular basis, with no rules or guarantees in place that such utilities still function as intended. As a result, not only an initial but also a continual dedication of resources would be required to maintain "support" for these utilities. We simply believe time and resources are better spent fighting actual malware. As a result, we cannot commit to providing support for any and all third-party exploit test utilities.

Thanks @NeilA! Am I correct in saying that when you rebooted the machine (after you were able to open Malwarebytes and run a scan), the program will now no longer open? Prior to the first Malwarebytes version 4 installation attempt, are there any details you can provide on your previous Malwarebytes version 3 installation? For example: Was Self-Protection enabled? How long had version 3 been installed? Did you have any issues with installing version 3? When you ran the Malwarebytes version 4 installer, was version 3 running at the time? Please could you provide us with the following: Export Event Logs Press the Windows Key + R on your keyboard at the same time. Type eventvwr.msc and click OK. Expand Windows Logs. Right-click Application and click Save All Events As.... Name the file application and click OK. Repeat for Security and System. Expand Applications and Services Logs in the panel on the left. Expand Microsoft followed by Windows. Scroll down the list and expand CodeIntegrity. Right-click Operational and click Save All Events As.... Name the file CodeIntegrity and click OK. Navigate to the location of the files. Highlight the four files, right-click one and click Send to followed by Compressed (zipped) folder. Name the Zip file EventLogs.zip and attach the file in your next reply.

Excellent. Thanks for confirming! We have a defect filed for this issue. For now, I recommend leaving the Enable self-protection early start turned off.

Hi @f14tomcat, Just following up to see how you're getting on. We'd very much appreciate the information mentioned above to help us troubleshoot this issue.

Hi @RTL434, Thanks again for the latest information. Have you tried a scenario where Malware Protection is on, only Malwarebytes Service is enabled as a startup item and the machine is restarted? Do you still see the hang with this scenario? It will be useful for us to obtain a memory dump captured when the machine is in the hung state. We can accomplish this by forcing a blue screen. Start by ensuring complete/full memory dumps are enabled: https://www.tenforums.com/tutorials/5560-configure-windows-10-create-minidump-bsod.html Then proceed with the steps below. Download enable_forced_bsod.reg using the link below: → https://malwarebytes.box.com/s/8rxpxrwm4jmdz95dg5p1kudymdl4vtzm Open your Downloads folder or location of the downloaded enable_forced_bsod.reg file. Double-click enable_forced_bsod.reg and click Run followed by Yes if prompted by User Account Control. Click Yes when prompted to continue. Click OK. Restart your computer. Once the machine is in the hung state, hold down the rightmost Ctrl key on your keyboard and press the Scroll Lock key twice. This will force your machine to blue screen. After the computer has rebooted, open the C:\Windows folder and verify a file named MEMORY.dmp is present. Right-click MEMORY.dmp and click Send to followed by Compressed (zipped) folder. If prompted to save the file to your Desktop, click Yes. Upon completion, upload the Zip file to a file hosting service of your choice and provide a download link in your next reply.

Hi @lgkahn, Thanks for the report. The old user interface is expected but the missing results is not. What type of scan did you run? What were the exact steps you took to reach this state? Please could you carry out the instructions in the article linked below and attach the generated file: https://support.malwarebytes.com/docs/DOC-2396

Hi @Dark_IT, Thanks for trying out the beta and providing feedback! This is expected behaviour. The default scan type is only for the system drive. When you configured this scheduled scan, did you also change the scan date? Or just the start time? Thanks for this feedback. We've had similar feedback from other users on the status information that's displayed during an in-progress scan. Our user interface team are aware of this. That's great to hear. Thank you!

Hi @JamieBrown, Thanks for trying out the beta! What type of scan are you running? In addition to the information mentioned above, could you also carry out the instructions in the article linked below and attach the generated file to a forum post: https://support.malwarebytes.com/docs/DOC-2396 Thanks!

Hi cofused, That's OK - thanks for trying out the beta and we're sorry you encountered these issues. If you'd like to revisit troubleshooting, just let us know.

Thanks Kevin!

Thanks for the file! Please do the following: Open Malwarebytes. Click Settings. Click Security. Under Windows startup, click Advanced. Turn the, "Enable self-protection early start" setting off. Close Malwarebytes. Once done, please restart the computer and check if the issue still occurs.

Thanks for the feedback, @John A! The update check functionality in Malwarebytes 4 is currently being worked on. This behaviour is being looked into.

Thanks for the file. If you're able to reproduce the behaviour again (significant difference in the time it takes for the UAC prompt to appear when disabling one protection modules vs another), please enable debug logging using the steps below and let us know. Open Malwarebytes Click Settings Turn the Event Log Data setting on.

Hi NeilA, Thanks for the report. Please could you provide the following files as well: C:\Users\Neil\AppData\Local\Temp\mbsetup.log C:\Windows\temp\mbamiservice.log Thank you!

Hi cofused, When clicking the link, there should be a Download button in the top right corner that will allow you to download and run the file.

Thanks for the information. Please let us know if you find the behaviour returns. In the meantime, please carry out the "technical issue" instructions and provide the generated file. This might give us additional information on the cause. https://forums.malwarebytes.com/topic/190532-having-problems-using-malwarebytes-please-follow-these-steps/

Hi @JayWoz, Thanks for the feedback! We appreciate you testing this beta. The issue with sorting by date/time should be fixed in the next release.

Hello @bbotzong, Yes, the link and file is legitimate. https://malwarebytes.box.com/s/rh184fejmd9iyt3hrh0d2krchdobqcy5 VirusTotal report: https://www.virustotal.com/gui/file/f2005a401fa0ae630afde4fc2d095d0c39610ae5f289af600db670f347d76ac1/detection If you'd like us to double-check, please refer to the post below and provide the requested information.

Hi @cofused, Thanks for reporting the issue and providing the file. The logs indicate that the service responsible for installing Malwarebytes version 4 crashed. Would you be willing to provide us with additional information to help determine the cause of this issue? Please do the following: Enable User Mode Crash Dumps Please download enable_crash_dumps.bat using the link below. → https://malwarebytes.box.com/s/eug9gmk7i1xqeugb0xobjlqcsfb4uv1e Open your Downloads folder. Double-click enable_crash_dumps.bat to run the file. Note: If you are prompted by Windows SmartScreen, click More info followed by Run anyway. A blue Command Prompt window will appear. Upon completion, press any key to exit. Afterwards, please restart the computer (Start button -> Power -> Restart). Once the computer has restarted, please wait at least 5-10 minutes and then proceed with the steps below. ----- Collect Troubleshooting Logs Please download collect_mbst_logs.bat using the link below. → https://malwarebytes.box.com/s/xpz34itvz4kqekayhoplqalehqh9eqnd Open your Downloads folder. Double-click collect_mbst_logs.bat to run the file. Note: If you are prompted by Windows SmartScreen, click More info followed by Run anyway. A blue Command Prompt window will appear. Upon completion, a file named mbst-logs.zip will be saved to your Desktop. Please attach the file in your next reply. Export Event Logs Press the Windows Key + R on your keyboard at the same time. Type eventvwr.msc and click OK. Expand Windows Logs. Right-click Application and click Save All Events As.... Name the file application and click OK. Repeat for Security and System. Navigate to the location of the files. Highlight the three files, right-click one and click Send to followed by Compressed (zipped) folder. Name the Zip file EventLogs.zip and attach the file in your next reply.

Hi @ssnoke, Just to confirm, are you referring to a User Account Control (UAC) prompt? When a Real-Time Protection module prompt is clicked, the time it takes for this to be displayed should be consistent for all Real-Time Protection modules (with one potential exception mentioned below). The actual time it takes for the prompt to appear is dependent on various system/environment factors, but there shouldn't be any particular differences between Web Protection and the others. The reason being - when the toggle is clicked, the disabling of the module and any associated actions are not performed until after the UAC prompt is confirmed. How much of a difference are you seeing with Web Protection when compared to the others? When you've tested, are you disabling Web Protection first in each Malwarebytes session? Please try the following: Reboot the computer. Open Malwarebytes. Do not disable Web Protection. Instead, disable one of the other protection modules such as Malware Protection. After accepting the UAC prompt, disable Web Protection. What are the results? Is the time it takes for the UAC prompt to appear after disabling Malware Protection still quick? What about Web Protection? ----- In regards to the actual disabling of the protection module - we're aware of an issue with the Web Protection driver taking significantly longer to uninstall when compared with Web Protection in Malwarebytes version 3. However, this appears to be unrelated to what you're reporting here as your issue involves a delay prior to the actual disabling of the module commencing. Yes, this is intended behaviour. We don't want to block/lock the Malwarebytes UI to wait on something (the UAC prompt) that is ultimately out of our control.

Hi @WaterWolfman, Thanks for the report. Please carry out the "technical issue" instructions in the topic linked below so we can take a closer look at the issue. https://forums.malwarebytes.com/topic/190532-having-problems-using-malwarebytes-please-follow-these-steps/

Hi @bellamy22, Thanks for the report. You mentioned both a crash and deadlock/hang. When this issue occurred, what exactly did you see? Was the screen completely frozen? Did the screen turn black? Did you encounter a blue screen? Was keyboard/mouse input no longer possible? Does this only occur immediately after activating? What if you install the beta but do not attempt to activate your license? Do you encounter any issues over a few different Windows sessions? Please could you provide us with the following event logs: Press the Windows Key + R on your keyboard at the same time. Type eventvwr.msc and click OK. Expand Windows Logs. Right-click Application and click Save All Events As.... Name the file application and click OK. Repeat for Security and System. Expand Applications and Services Logs in the panel on the left. Expand Microsoft followed by Windows. Scroll down the list and expand CodeIntegrity. Right-click Operational and click Save All Events As.... Name the file CodeIntegrity and click OK. Navigate to the location of the files. Highlight the four files, right-click one and click Send to followed by Compressed (zipped) folder. Name the Zip file EventLogs.zip and attach the file in your next reply. Please provide the following files as well: mbsetup.log from the user accounts in which an install was performed from C:\Windows\temp\mbamiservice.log

Thanks very much for the feedback, @sa-shadow! Let us know if you encounter any issues in the upcoming days.