LiquidTension

Hi @BillH99999, Thanks again for providing those logs. The source of the issue appears to have been with the Self-Protection module in the product you upgraded from. We have a defect filed and are looking further into the issue.

Thanks for the report, @Gmr!

Hi AlexSch, Thanks for the report. The files in the first scan were indeed related to your HP printer app. The file in the second scan (included in this topic's report) is same as one of the files from the first scan. We'll get this fixed as soon as possible.

Hi @BillH99999, Thanks for reporting this. Please attach the following files so we can look further into the issue: %temp%\mbsetup.log %systemroot%\temp\mbamiservice.log

Thanks for the report, @coggy9.

Thanks for the report, @siliconman01.

Thanks for the report, @Nazareno. The detections are indeed false-positives.

Thanks for the report, @RTL434.

Hi @Nazareno, Exclusions has been renamed to "Allow List". It can be found by clicking Detection History. For an overview of some of the key user interface changes, refer to the following post: https://forums.malwarebytes.com/topic/250841-mb-401-new-interface/?do=findComment&comment=1330702

Hi @John L. Galt, Please gather logs using the Malwarebytes Support Tool and provide mbst-grab-results.zip: https://forums.malwarebytes.com/topic/190532-having-problems-using-malwarebytes-please-follow-these-steps/ Also, please attach the following files: %temp%\mbsetup.log %systemroot%\temp\mbamiservice.log ----- Is there a file named log.txt inside the %temp%\fp_tracker folder? If so, please attach this. Do you have Windows Controlled Folder Access enabled? When FP Tracker is run, is any text outputted to the console window?

Thanks for the report, @exile360!

Thanks for the report, @gerardwil!

Thanks for the data. Could you try the Malwarebytes version 4 beta and check if you still see the issue please: https://forums.malwarebytes.com/topic/249586-malwarebytes-4-beta/?do=findComment&comment=1323728 If you do, we'll need to collect additional data as this issue is not reproducible for us. Enable Enhanced Event Log Data: Open Malwarebytes. Click Settings. Enable the Event Log Data setting. Afterwards, reproduce the issue. Once the machine has started back up, please carry out the technical issue instructions in the post linked below: https://forums.malwarebytes.com/topic/190532-having-problems-using-malwarebytes-please-follow-these-steps/

Thanks for the report!

Thanks for the feedback, @siliconman01! For anyone reading this topic, here is a breakdown for some of the main user interface changes. Detection History Quarantine, exclusions (renamed to "Allow List") and quarantine history can be found here. Scanner Threat Scan, Hyper Scan (renamed to "Quick Scan"), Custom Scan, Scan Scheduler and Reports can be found here. Settings Configuration settings have been split into three main categories: General, Notifications and Security. Real-Time Protection New pages have been added that break down detection details for each of the Real-Time Protection modules. In-Progress Scanner Page A new animation has been added to the in-progress scan page. Additional scan statistics have been added to the results as well. Allow List Exclusions has been renamed to "Allow List", with new graphics and exclusion type selection page added.

Hi @siliconman01, Thanks for trying out the beta. We will have an update for the Malwarebytes Support Tool released shortly that adds better support for Malwarebytes version 4. However, as AdvancedSetup mentioned, the tool will not be installing the beta version of Malwarebytes until it is officially released. If you need to clean install the beta version, your best option is to use the Advanced -> Clean functionality, click no when prompted to install Malwarebytes and then manually install the beta.

Hi @Max-H, Thanks for the report!

Hi @nheimler, Do you only see the error logged when shutting down/restarting the machine? If you exit out of Malwarebytes manually by right-clicking the notification area/system tray icon and clicking Quit Malwarebytes, do you see any errors suggesting the Malwarebytes service was slow to stop/respond? Please provide the following event logs from an affected machine: Export Event Logs Press the Windows Key + R on your keyboard at the same time. Type eventvwr.msc and click OK. Expand Windows Logs. Right-click Application and click Save All Events As.... Name the file application and click OK. Repeat for Security and System. Navigate to the location of the files. Highlight the three files, right-click one and click Send to followed by Compressed (zipped) folder. Name the Zip file EventLogs.zip and attach the file in your next reply.

Hi @boogeyman, Do you only see the error logged when shutting down/restarting the machine? If you exit out of Malwarebytes manually by right-clicking the notification area/system tray icon and clicking Quit Malwarebytes, do you see any errors suggesting the Malwarebytes service was slow to stop/respond? Please provide the following event logs: Export Event Logs Press the Windows Key + R on your keyboard at the same time. Type eventvwr.msc and click OK. Expand Windows Logs. Right-click Application and click Save All Events As.... Name the file application and click OK. Repeat for Security and System. Navigate to the location of the files. Highlight the three files, right-click one and click Send to followed by Compressed (zipped) folder. Name the Zip file EventLogs.zip and attach the file in your next reply.

Thanks for the information. Please enable enhanced event log data using the steps below: Open Malwarebytes. Click the Settings menu. Ensure the Application tab is selected. Scroll down to Event Log Data. Turn the Collect enhanced event log data for support setting On. Afterwards, generate an MBAMService memory dump. Note that this process is required due to MBAMService running as a protected service in Windows 10. Please download run_procdump.bat using the link below. → https://malwarebytes.box.com/s/e127cj2ppb2lq6njf67li2gls3kbfz24 Open your Downloads folder. Double-click run_procdump.bat. Click Yes if prompted by User Account Control. Note: If you are prompted by Windows SmartScreen, click More info followed by Run anyway. A blue window will appear. When prompted to reboot, type Y into the window and press Enter on your keyboard. After your computer has rebooted, please do the following: Reproduce the issue state. Once done, open your Downloads folder and double-click the run_procdump.bat file once more. Upon completion, a file named memorydump.zip will be saved to your Desktop. Please upload the file to a file hosting service and provide the download link. Finally, please repeat the Malwarebytes Support Tool steps from post #2 so we can obtain the event log data. The event log data combined with the memory dump should help provide further insight into the issue.

Hello, This issue is caused by a missing Windows Update. Refer to: https://support.microsoft.com/en-us/help/2922790/some-software-products-function-incorrectly-in-windows Ransomware and Malware Protection both utilise the Windows PsSetLoadImageNotifyRoutine API, which originally had a maximum of 8 concurrent uses. A Windows Update was released that increases this limit to 64. The article linked above references a hotfix for Windows 7. This was later included with a Windows Update. To resolve this issue, please run Windows Update, install all available updates and reboot the machine.

If a website isn't being blocked, you can assume it's not in the database. To confirm, use the steps provided earlier to report the website. For the components that utilise a form of an updatable database - yes.

Hi @mpgioia, Thanks for the report. How are you monitoring the network performance degradation? Does this issue affect all network activity or only when performing certain actions? Quite often, issues of this nature are caused by the interaction between Malwarebytes and one or more other programs installed on the machine. We have not had any other reports of this and the issue is not currently reproducible, so it is likely other factors specific to your machine/environment are involved here. Please could you perform a clean boot using the instructions linked below. Ensure you re-check Malwarebytes Service so it's left enabled. https://support.microsoft.com/en-gb/help/929135/how-to-perform-a-clean-boot-in-windows After the reboot, reassess the situation and let us know if you still encounter an issue.

Hello, Just to clarify, the issue you're having with Malwarebytes for Windows is the following: Visiting a website that you believe should be blocked is not blocked by Malwarebytes Web Protection. However, once a file is downloaded from the website and executed, it is detected by Malwarebytes Malware Protection. If this is indeed the issue, then it is likely a case we do not have the website blacklisted in our Web Protection database. As mentioned, the website(s) in question will need to be reported to our Research team for analysis.

Hi @Kanelakis, I'm afraid there's an issue with your license key that will need to be resolved as soon as possible. I will provide further details in a private message.