LiquidTension

Hi all, If you're experiencing this issue, please start by ensuring component package version 1.0.875 is installed (see Settings -> About -> Component package version). For continued issues: Enable debug logging in Malwarebytes (Settings -> General -> Event log data). Quit Malwarebytes using the notification area icon. Download and double-click the following .reg file: https://malwarebytes.box.com/s/21gdrmaj74xbeiazf6km7tfube246eid Relaunch Malwarebytes and enable Web Protection. Reproduce the issue. Gather logs with the Malwarebytes Support Tool and provide the mbst-grab-results.zip: https://support.malwarebytes.com/hc/en-us/articles/360039023453-Upload-Malwarebytes-Support-Tool-logs-manually If you have other data points such as Process Monitor logs, those would also be appreciated. Thank you!

@chub_rock1, @Adam-P, @Reaper511 Hi all, We've released a new component update with various Web Protection-related fixes. The component package version is 1.0.875. Could you let us know if this addresses your VPN issue or not. Thank you!

Thanks for the information. We haven't been able to reproduce this behaviour. We see the scan report is created when the first scan in a given Windows session is cancelled. Could you enable enhanced event log data, reproduce the issue and then gather logs from the Malwarebytes Support Tool please? The service logging should help with identifying the root cause.

Hi @wildman424, Please check %temp%\mwb*tmp (* is a wildcard representing random characters) for mbst-grab-results.zip (it may be that the zip file was created but could not be moved to the Desktop). if the zip file doesn't exist, please provide the mb-support-log.txt file that you should find inside the same folder. Could you run Farbar Recovery Scan Tool as well please: https://support.malwarebytes.com/hc/en-us/articles/360039025013-Run-Farbar-Recovery-Scan-Tool-to-gather-logs

Thanks for letting us know. Could you zip up and provide C:\Windows\MEMORY.dmp please. Please run the Malwarebytes Support Tool as well and gather logs: https://support.malwarebytes.com/hc/en-us/articles/360039023453-Upload-Malwarebytes-Support-Tool-logs-manually

Hi @Pipps, In the latest version of Malwarebytes, you can suppress the "Scan complete" notification by disabling the, "Show all notifications in Windows notification area" setting found in Settings -> Notifications.

Hi @MAXBAR1, Thanks for the feedback. We are already evaluating potential changes to how the scan results are displayed in the UI. Your feedback is being considered.

Thanks. This is a translation issue. You'll see "No threats detected" or "x items detected" when your display language is English.

@MAXBAR1 Which version are you using? Please try the latest beta version (component package 1.0.875). When a scan is completed and threats are detected, you should see the number of items detected. For example: We have a defect filed for this issue. Thank you. This isn't reproducible with the latest beta version. Can you confirm the scan report isn't created with component package version 1.0.875?

Thanks for letting us know, @Hardhead. Could you run the Malwarebytes Support Tool and gather logs, please: https://support.malwarebytes.com/hc/en-us/articles/360039023453-Upload-Malwarebytes-Support-Tool-logs-manually Are you able to reproduce this crash? How soon after you booted did the crash take place?

Thanks for letting us know, @wildman424. Could you run the Malwarebytes Support Tool and gather logs, please: https://support.malwarebytes.com/hc/en-us/articles/360039023453-Upload-Malwarebytes-Support-Tool-logs-manually Also, do you recall what was taking place at the time the dump was created? Are you able to reproduce this crash?

Hi @Xauma95, The incorrect "Last updated" timestamp is now fixed with the latest beta version of Malwarebytes. https://forums.malwarebytes.com/topic/257042-malwarebytes-41-beta/?do=findComment&comment=1371934 The missing green text is due to be fixed in a future update.

Yes, this is indeed an issue caused by hardware acceleration and disabling the setting should address it. If you're unable to access/navigate the setting due to display issues, close the Malwarebytes window and download/run the following batch file. This will launch the Malwarebytes user interface with hardware acceleration disabled permanently. https://downloads.malwarebytes.com/file/disable_hwacc_bat

Hi @Krzychumag, How are you getting on with the current beta version of Malwarebytes? Are you still experiencing an issue?

Excellent, that's good to hear. The next 24-48 hours will be quite telling. Please do keep us informed. Thank you!

Thank you for the feedback, @celamantia. Whilst unfortunately there's no solution for your request currently, we have taken on board the feedback you've provided for future consideration.

Hi @hydr0, Just checking in to see how you're getting on. Have you experienced any further issues since your last update?

Hi @logank, Could you provide any details on where you obtained the Malwarebytes installer from? Was it downloaded from the Malwarebytes website?

The only known issue is during installation, where 360 Total Security prevents the Malwarebytes installer from writing to the registry. The following workaround has been used by other users: Uninstall 360 Total Security Install Malwarebytes Reinstall 360 Total Security After reinstalling 360 Total Security, users typically do not encounter any further issues.

Thank you for the update and feedback. With fresh installations, hardware acceleration is now disabled by default in Malwarebytes. It's likely it was enabled prior to the clean reinstallation and as noted above, may have been a contributing factor. You could test by re-enabling hardware acceleration in the Settings, then use the 'Quit Malwarebytes' option and relaunch the program.

Thank you for the folder. Please do let us know if you encounter any further PowerPoint detections.

The patch notes are quite conservative. We are hoping this latest release will address other Web Protection issues as well. If you've been experiencing any Web Protection issues, I'd encourage you to try out this latest beta update and see how you get on with it.

Hi @EvilPeppard, We've just released a new beta update that has fixes for various Web Protection-related issues. https://forums.malwarebytes.com/topic/257042-malwarebytes-41-beta/?do=findComment&comment=1371934 1.0.875 is the component package version for this release, so it looks like you're already up-to-date. We'd love to know how you get on with Web Protection in this latest release.

Thank you for the information. The detections for the other files shouldn't occur any more. What we're especially interested in is the PowerPoint detection which may occur again. It would definitely help us to better understand how PowerPoint was being used at the time of the detection so that we can hopefully reproduce the issue. Any details at all on how PowerPoint was being used will be greatly appreciated! One possible cause is McAfee process injection, which we've seen cause issues with other users. If you are able to reproduce the PowerPoint detection again, it would be interesting to see if the detection stops once McAfee is removed. An additional point - could you zip up and provide the C:\ProgramData\Malwarebytes\MBAMService\ARW folder please?

Thanks for this information. If you're able to reproduce this detection once more, it'd be very helpful if we could collect some additional troubleshooting information to assist our efforts with fixing this issue. Open Malwarebytes -> Settings -> Enable "Event log data". Download and run Process Monitor: https://docs.microsoft.com/en-us/sysinternals/downloads/procmon Reproduce the firefox.exe detection. Stop and save the Process Monitor capture. Click File -> Capture Events to stop the capture. Click Save and follow the prompts to save the logs. Provide logs: Rerun the Malwarebytes Support Tool and gather logs. Drag and drop the Process Monitor log into the mbst-grab-results.zip saved to your Desktop. Zip up C:\ProgramData\Malwarebytes\MBAMService\ARW once more.