mightaswell

After reinstalling MB3 again the IP protection is blocking in IE. Will see for how long this time.

I have also been wondering about the "outbound" description when websites are blocked. AFAIK all the website blocking (usually when visiting the IP test site) I have ever had with MBAM and now MB3 have always been outbound but usually the file is the browser currently being used. I've seen this on all my PC's.

Thanks for your reply @dcollins. I'll reinstall one more time and if problem still persists or re-emerges I'll stick with Chrome on that laptop.

Thanks @Firefox and I seem to have had a similar experience to what you describe. I had also previously reinstalled several times using the above steps, even rebooting after deactivating before running mb-clean which fixed all issues for 5 days till the IP block problem reoccurred. The Malwarebytes protection layer turning off issue is still fixed so some progress has been made. The other two PCs have no issues with the latest version, or with IE either. I'll give it one more reinstall.

Thanks @dcollins for your reply. Yes when I open in private browsing in Internet Explorer the pages are blocked correctly. Good to hear that it is being worked on. Am I correct in assuming it is wise not to use IE till this is sorted or is IP protection really working in IE but just not correctly being reported?

MBM 3 latest version component package 1.0.96 on Toshiba win 7 pro SP 1 laptop has been running without a problem for about a week. Then without warning today on bootup a message appeared that the “Mbamtray.exe had failed to start. " or words to that effect. I investigated using task manager and Malwarebytes tray application was running! Strange! The UI indicated everything was running and all protection layers were turned on. But I followed up by visiting the IP check site with IE and to my annoyance the old problem "If you are able to reach this page it means that IP protection is disabled on your machine." It had previously been working as it should the last week. I thought that was behind us. Thinking a restart would sort it out but even after restarting numerous times the IP protection isn't working on IE. Works okay with Chrome. Have not had another warning about mbamtray. MB-CheckResult.txt MBAMSERVICE (2).zip FRST.txt Addition.txt

@XBarbarian I believe @Aura has the answer to your problem as follows in another post Posted February 14 · Report post @phil2pa, open Malwarebytes, then go to the Settings tab followed by Scan Schedule. From there, click on the Add button in the bottom-right corner, and click on the Advanced button in the bottom-left corner. From there, you can check Scan for Rootkits. Or it is possible to edit an existing scheduled scan and simply enable the scan for rootkits always in that scheduled scan. Go to settings, then scan schedule, tick the existing scan schedule you wish to change, which activates the edit button for that scan, click on the edit button, then advanced and an option similar to above appears. Activate scan for rootkits and then Okay. Then whenever that scan is run it will scan for rootkits.

@JamesReadman I noticed from your log that you have the CU3 version 1.0.75 which is known for blue screens on some computers. I had that problem also until I installed the latest CU4 1.0.96 version which has fixed the BSOD for me. Please follow the advice given by @Firefox in the 1.56 am post. It has links to various files and the latest CU4 version. See how that goes for you.

Similar here. On win 7 X64 laptop, clean install after initially working fine then on one restart the Malware layer failed to start and was stuck on starting when prompted manually. I set MB3 to start self protection early and seems to have fixed it. This had also fixed previous versions layers failing to start but it was usually web protection which didn't start.

I clean installed "mb3-setup-consumer-3.0.6.1469-1.0.96" on win 10X64 PC and Win 7X64 laptop. The new beta has fixed the BSOD when on the web with both Chrome or IE (Win 10) and has fixed the IP blocking so now on both machines the correct block page appears. Memory usage for mbamservice is 374 MB down from 380 for the win 7 and 320 MB in win10 down from 580MB for a test build.

The install file name when following the link is "mb3-setup-consumer-3.0.6.1469-1.0.96" so I would bet on it that the component version should be 1.0.96 as you suggested

I am using a NetGear wifi adapter and have had BSOD problems with several V3 builds and latest 1.0.75 version as well. I am testing a new beta build which has fixed the BSOD issues and a few other things like incontext file scanning. So hopefully this will translate to a more stable release soon??

After uninstalling , using mb-clean, reinstalling, a succesion of mb 3 versions back to last years December version and then back to mbam 2.XXX all with the same result "If you are able to reach this page it means that IP protection is disabled on your machine." I thought that was odd as 2.XX web protection always worked perfectly. So I reinstalled the latest CU 1.0.75. Meanwhile also ran ccleaner plus a shut down for internet explorer via task manager and now when visiting http://52.21.84.70 I get the "has blocked a potentially malicious website" and "website blocked notification."! Not sure what has changed to make the difference. but still when visiting http://iptest.malwarebytes.org/ with IE get the This is a big improvement over the "IP protection is disabled on your machine" warning when Mb 3 said the web protection was on. I hope that the DNS issue will be fixed.

Exactly my experience.

@wordsworthI have exactly the same issue logged a week ago here with version 3.0.6 CU 1.0.75 on Win 10 x64. I had to revert to the previous version to stop BSOD or turn off web protection. The snag with 1.0.69 is the ip protection does not function correctly. Hopefully the memory.dmp files I uploaded will help the Mbam team to pinpoint the problem. To rub salt into the wound the laptop (win 7) also has problems with the latest mbam and I am waiting for a response to my post for that - no functioning web protection at all with IE now- . Gets a bit wearisome with uninstalling and reinstalling many times on both machines. I have decided to turn off updating on another win 7 laptop still running mbam2! I cant believe that two computers have serious issues but am hoping that these issues will be fixed sooner than later. I have used earlier versions of mbam and anti exploit for many years without a problem.

Hi @Jekko, Sorry for delay but in different time zones and been otherwise occupied. Here are the logs you asked for . Now when I browse to either http://iptest.malwarebytes.org/ or http://52.21.84.70 via IE , I see "If you are able to reach this page it means that IP protection is disabled on your machine." Yet MBAM reports all protections are on. When I visit http://iptest.malwarebytes.org/ with Chrome I get the message you mentioned "This site cannot be reached etc" When I visit http://52.21.84.70 using Chrome I get the correct blocked message. MB-CheckResult.txt FRST.txt Addition.txt

Hi @bdubrow I have 3 copied memory.dmp files if needed, all around 800Mb.

If I visit http://iptest.malwarebytes.org/ using Chrome a DNS error and page cannot be displayed message. Visiting http://52.21.84.70 via Chrome , I see "Malwarebytes has blocked a potentially malicious website."

I checked the mbam logs and there are many more now so have attached MBAMSERVICE.LOG.zip

Hi @bdubrow Have had some strange goings on today with MBAM 3 /1.0.75. Initially when I booted up and checked "Can you confirm that the DNS error still occurs if you close out the first tab and try navigating to https://iptest.malwarebytes.org ? " I received the DNS error. The I tried to undo the web protection but it did not. Then the interface wouldn't open from the task bar, then suddenly a program malwarebytes assist popped up. Then the icon disappeared from the task bar. I reinstalled mbam and then appeared okay with all protections on. Now if I visit http://iptest.malwarebytes.org/ using IE I get "If you are able to reach this page it means that IP protection is disabled on your machine". When visiting http://52.21.84.70 via IE , I see " If you are able to reach this page it means that IP protection is disabled on your machine" as well most times. A few times I got the message but also a small warning that the web site has been blocked also. attached file as requested. MBAMSERVICE.zip

Hi @Acrobaze Thanks for suggestion, uninstalled, rebooted, used the mb-clean tool , rebooted, installed , rebooted - but hasn't solved the issue. I even flushed the dns cache with no results.

With mbam beta 3.0.6.1469/1.0.75 on the win 7 x64 laptop. The DNS error is still occurring when visiting the iptest site. If I visit http://iptest.malwarebytes.org/ using IE I get a DNS error and page cannot be displayed message. Visiting http://52.21.84.70 via IE , I see "Malwarebytes has blocked a potentially malicious website." It seemed like a seamless install over the previous beta version and all protections are on and all buttons are responsive on the interface.

Extra info: The BSODS were "Bad pool Header" errors. Have 3 memory.dmp files but way too large to add here. Here are some logs which may or may not be useful. I have now uninstalled version 1.0.75 and gone back to 1.0.69 everything works except the DNS error but I'll live with that. MB-CheckResult.txt FRST.txt Addition.txt MBAM Service log.zip

Have had 3 BSOD events with the new beta 3.0.6.1469/1.0.75 when browsing using IE first 2 when viewing video on You tube and then when browsing this site. When I turn off web protection their no issues. The previous version MBAM 3.0.6.1469/1.0.69 had fixed those issues and ran well. Have Win 10 pro x64 version 6017 OS build 14393.693

The BSOD happened in IE on a Win 10 x64 PC.