TempLost

@FoolishITThanks for the additional information - it's reassuring for me to know that I can carry on using CryptoPrevent with confidence alongside Malwarebytes, my other favourite piece of security software ?

I agree about the need for the capability to export settings - I've raised this request before.

No argument with your input, Durew, just amazed at some of the cretinous comments in this thread

About time the moderators closed this thread - sounding more presidential with every post?

All seems fine now - thanks MB staff for sorting it so quickly.

Probably someone else has already suggested it, but opening Malwarebytes, turning off Start with Windows and rebooting let's you get on with your life until a solution is released - easier than uninstalling.

OK, since the last clean install I still have the occasional instances of the Anti-Rootkit DDA Driver being unable to load. I understand from @vbarytskyy post that it's something you're actively investigating but I attach current MB-Chk results including FarBar scans and the latest clean install log in case they help. Windows shows no other obvious anomalies since then and runs as well as can be expected considering the age and spec of the laptop. Though can't say I'm looking forward to the inevitable move to Windows 10 which will probably mean buying a new one......... mb-check-results.zip

Thanks, I'll bear that in mind.

No, I've got Self Protection on. But I've not had any issues since the last clean install/uninstall...........

@FoolishIT @Porthos Thanks to both of you for your help. Just to confirm, I am using default setting in CryptoPrevent with no additional rules. I've recently carried out a clean uninstall /reinstall of MB as I still have occasional problems of the System Tray icon not launching or Protection Modules not loading, but the issues have generally been resolved by relaunching MB.

@vbarytskyy OK, I've added the list of exceptions to the Whitelist in CryptoPrevent and I'll see whether that solves the problem - meanwhile, I've raised a support ticket with CryptoPrevent for their advice,

@vbarytskyy I'll research whether it's possible to set exclusions and post back - thanks again.

Hi @vbarytskyy - thanks for your prompt attention. There's nothing in the Report Queue Folder, but there are loads of sub-folders in the ReportArchive Folder. I've zipped the whole folder and attached it here in case it helps. I have to go out shortly so may not be able to review your response until tomorrow. ReportArchive.zip

I've been a Malwarebytes Premium user for some time now. Mostly, it behaves itself but lately I have had a couple of problems, as follows:- Infrequent warnings that Web Protection or Malware Protection were off. I've generally been able to repair that by turning the module back on in the program's settings. Twice, Malwarebytes has been unable to load the Anti-Rootkit DDA Driver (see attachment) and warns that it may be due to rootkit activity. On the recommended reboot, MB runs a scan but finds nothing. This last happened on booting up this morning. When I've had problems with MB in the past I've generally solved them by reinstalling the latest version or using the Clean tool, but the latter is a nuisance because of the necessity to manually reapply settings like language and scan schedule. From memory, the last time I did this was when I tried the latest BETA but reinstalled the current version because of problems with domain names being blocked. I've run the FarBar Tool and MB-Check, and files are attached. I'm as sure as I can be that I don't have any malware on this laptop. I'm the only user on this machine and computer savvy enough generally to stay out of harm's way, although no expert. Any suggestions apart from another clean and install? Windows 7 Home Premium SP1 64x Malwarebytes Premium 3.3.1 Microsoft Security Essentials CryptoPrevent Premium 9.0.0.0 Casper 10.1 Backup mb-check-results.zip ThreatScan20180119.txt

Hear, hear !

Hi Porthos. I did, but the messages persisted - however, they seem to have stopped now - here's hoping........... Iain

Some new quirks cropping up now. Malwarebytes displayed repeated messages about an outgoing threat being blocked:- Malwarebytes www.malwarebytes.com -Log Details- Protection Event Date: 20/11/2017 Protection Event Time: 21:23 Log File: 9b59ccb0-ce30-11e7-84d1-88ae1dd686ce.json Administrator: Yes -Software Information- Version: 3.3.1.2183 Components Version: 1.0.236 Update Package Version: 1.0.3304 Licence: Premium -System Information- OS: Windows 7 Service Pack 1 CPU: x64 File System: NTFS User: System -Blocked Website Details- Malicious Website: 1 , , Blocked, [-1], [-1],0.0.0 -Website Data- Domain: IP Address: 255.255.255.255 Port: [17500] Type: Outbound File: C:\Users\xxxxxxxxx\AppData\Roaming\Dropbox\bin\Dropbox.exe (end) Is this a false positive? I rebooted and the warnings continue but I also got a message that Ransomware Protection was switched off. Stopping and re-starting Malwarebytes solved the latter problem. I am now running FRST64 and MB-Check yet again and will attach the results below. Iain Windows 7 Home Premium SP1 64x MB Premium 3.3.1 MSE CryptoPrevent Premium 8.0.4.3 Casper 10 Backup mb-check-results.zip

@lmacri No, I didn't show all users in Task Manager - and hasn't happened since, but I'll bear it in mind for next time.........

Hi Ron, OK, ran the FRST64.exe fix and rebooted as it directed - the log is attached. No problems visible anywhere. Regards, Iain Windows 7 Home Premium SP1 64xMB Premium 3.3.1MSECryptoPrevent Premium 8.0.4.3 Casper 10 Backup Fixlog.txt

Thanks, Ron, it's getting very late here so I'll follow your advice in the morning and re-post. Thanks very much for your help, Iain

@AdvancedSetup Well, I spoke too soon - should have known I'd jinx it! Everything loaded as expected this morning when I booted up the laptop to do a little work. This evening, I booted up the computer and there was no sign of the MB System Tray Icon. Looking at Task Manager, I can see no sign of any MB processes running. I'm just going to run FRST64 and MB-Check and attach the results below., then I'll reboot the computer and see if things are back to normal. Rebooted, and MB System Tray Icon then loaded and MB services are running Iain Windows 7 Home Premium SP1 64xMB Premium 3.3.1MSECryptoPrevent Premium 8.0.4.3 Casper 10 Backup mb-check-results.zip

@AdvancedSetup Hi Ron, Yes, I'm really pleased it's running well now. I appreciate how complex it must be to develop a product that spends a great deal of its time stopping things happening rather than the converse, and has to do that with minimum fuss across an enormous range of hardware, operating system and installed software combinations. There are still minor niggles like the language reverting to the default on upgrade, but I understand these will get sorted down the line. Great product! Regards, Iain Windows 7 Home Premium SP1 64xMB Premium 3.3.1MSECryptoPrevent Premium 8.0.4.3 Casper 10 Backup

Just an update. I've been running 3.3.1 now for almost 2 weeks with no problems - the System Tray Icon has loaded every time and there have been no error messages nor problems with Real Time Protection Modules failing to load or drop out of service. Windows 7 Home Premium SP1 64xMB Premium 3.3.1MSECryptoPrevent Premium 8.0.4.3

Just to add to my original post - since running 3.3.1 after a clean uninstall / install 4 days ago, I've had no further problems. The only sad thing is that it seems I've eventually had to use the mb-clean process on every recent version of Malwarebytes I've installed to end up with a stable installation. Windows 7 Home Premium SP1 64xMB Premium 3.3.1MSECryptoPrevent Premium 8.0.4.3

Thanks, Porthos