Jump to content

exile360

Experts
  • Content Count

    24,596
  • Joined

  • Last visited

Everything posted by exile360

  1. Interesting, thanks. I'll be sure to make a note of it for the Product team.
  2. Greetings, Thank you for reporting this issue and providing the details and logs that you did. I suspect you may be right with regards to the root cause having to do with both of those components as we're seeing multiple similar reports related to one or both of these components from other affected users. Hopefully whatever the cause of the issue might be, the Developers will be able to track it down soon and get it fixed. In the meantime I will alert a member of the Support team who has been working with users impacted by this issue and doing further research on the issue. @LiquidTension here is another user impacted by the intermittent system performance issues which seem to be related to Ransomware Protection and/or the Chameleon Self-Protection driver which began to roll in early this month.
  3. I just checked my list of installed updates and indeed the most recent installation of MRT shows as taking place on August 13th and was for the August version of the tool (obviously) so I guess they just haven't provided a build for September. I wonder what stirs at Microsoft? Between this and their recent breaking of both MSE and Windows Defender (I confirmed personally that the errant update affects MSE on Windows 7, not just Windows Defender on Windows 10) it might make a paranoid sort of person think something may be rotten in the security/anti-malware division over at Microsoft.
  4. Thanks for confirming that. To start, please try a clean install to see if that resolves the issue and hopefully it will: Download and run the Malwarebytes Support Tool Accept the EULA and click Advanced tab on the left (not Start Repair) Click the Clean button, and allow it to restart your system and then reinstall Malwarebytes, either by allowing the tool to do so when it offers to on restart, or by downloading and installing the latest version from here If the issue does return then you have a couple of options. You can either continue for now with Ransomware Protection disabled (and rest assured, I will be reporting this issue to the Product team for review and analysis), or you may try installing the new Malwarebytes v4 beta, however be aware that it is still very much a beta and is still in the early stages of development, and while I am confident in its stability, they are testing a new UI which is not fully complete yet so some functions/settings are missing (mostly advanced settings that most users never touch anyway, honestly; all the major items/controls are there), and they are testing a new heuristics module which is known to occasionally detect a false positive here and there, though they seem to have the bulk of those resolved already after the weeks of public and private testing they've been conducting. If you do decide to try the beta, you may download and install it from the link provided in this post and also be sure to review the information found there regarding the beta and report any questions or issues regarding the beta in this area of the forums just so there is no confusion as to which version of the program you're using. Please let us know how it goes and what you've decided to do based on the outcome of the clean install and we'll proceed from there, but hopefully the clean install will resolve it.
  5. Greetings, Please do the following so that we may take a closer look at what might be going on with your system: Download and run the Malwarebytes Support Tool (you may download it using a different system and copy it to a flash drive if necessary) Accept the EULA and click Advanced tab on the left (not Start Repair) Click the Gather Logs button, and once it completes, attach the zip file it creates on your desktop to your next reply Thanks
  6. That's great, I'm glad to hear that it is working well I suspect that as in the past, once conclusive data and validated testing results are presented to Kaspersky demonstrating full compatibility between the two applications as Malwarebytes has done in the past that they will once again remove Malwarebytes from their lengthy incompatible software list. It's simply a matter of proving to them that the two programs can function together in real-time without any issues. In the meantime please don't hesitate to let us know if you do experience any issues or problems and we'll do our best to assist, but I don't expect any to pop up, and otherwise just enjoy the excellent protection provided by the two applications you've chosen to keep your system secure
  7. Greetings, I suspect this is likely related to the Ransomware Protection component based on your description of the issue and circumstances since that particular protection module more than any other monitors disk activity and I/O in order to check for ransomware behavior. Please try disabling that component by right-clicking the Malwarebytes tray icon and clicking where it says Ransomware Protection: On and click Yes to the User Account Control prompt then see if the issue isn't cleared up and let us know how it goes. Additionally, just for future reference, it can be very risky to the stability of the program and your system to terminate Malwarebytes in an abnormal/forced manner such as through the user of Task Manager. Instead I would recommend simply right-clicking the Malwarebytes tray icon and selecting Quit Malwarebytes then clicking Yes to the User Account Control prompt and that should remove all of Malwarebytes' processes, services and drivers from memory (many components you cannot see remain functional/active when terminated via Task Manager and it has the potential to cause corruption of the application and potentially the system depending on what Malwarebytes was doing at the time). Thanks
  8. Yes, the 'Get Full Protection' banner promoting Premium is just a static image because at least for now, there is no way for an extension inside a web browser to detect what other software might be installed on the system because it is essentially 'sandboxed' inside the web browser and cannot check to determine if Premium is already installed/active or not. This has been reported to the Product team and we are hopeful that they will be able to find some kind of solution with the Developers so that it is able to detect when Malwarebytes Premium is already present on the system.
  9. Yes, absolutely it is possible. Fast startup has been known to cause issues with Malwarebytes and other software including countless incidents of unpredictable behaviors and software malfunctions due to the way it alters how the system starts up and how some items are retained in memory while others are shut down normally and expected to restart as they normally would, which is not always possible (particularly for an application like Malwarebytes which relies on its primary service, MBAMService.exe, to load the application's drivers and other startup components, including the tray/UI on every boot, but since it is retained in memory while the UI is shut down it doesn't go through its normal startup routine to load the tray as it would under normal circumstances).
  10. You'll find it located under the Scan Options section described as Use signature-less anomaly detection for increased protection. It uses advanced heuristics, AI algorithms and Machine Learning along with real-time cloud analysis to detect new and unknown threats. It's a relatively new feature that has been around for about a year if I recall correctly. It's very powerful but could certainly account for a large amount of the usage you're seeing due to the cloud aspects of this component, and though it is listed under Scan Options, it is actually used in both real-time protection as well as scans so it is always active and in-use by default.
  11. Please let us know how you get on with telemetry collection disabled, but if it doesn't help then please try disabling the anomalous threat detection component under Settings>Protection as its cloud component may be the culprit for the increase in data usage. Either way I will be reporting your feedback and experiences to the Malwarebytes Product team for review and consideration as that usage does seem awfully high regardless of what it's doing. Thank you for bringing this to our attention.
  12. Thank you for the feedback. I will make certain to pass it on to the Product team for their consideration. What Porthos said above regarding the forums is accurate; the forums software is a completely separate system/database so it cannot be tied to your My.Malwarebytes.com account (and it's actually more secure to keep such things separate anyway, in case any individual system is ever breached in any way it won't compromise your other accounts/services so my preference is always for companies to keep such things totally separate even when they are all owned and operated by a single entity just for better security though I may be in the minority on that; I've just seen too many massive data breaches, especially in recent years, to trust multiple accounts/services to a single logon; the same reason I don't use password managers or ever login to third party services using the likes of Google or Facebook and instead opt to create a unique logon with a unique password for every one, but again, that may be just me).
  13. It sounds like perhaps the service isn't starting properly after system boot. That's the component that launches the tray and executes scheduled scans. I'd suggest disabling fast startup if you haven't done so already as it's known to cause problems with Malwarebytes and other applications sometimes. Instructions on doing so can be found here as well as here.
  14. FYI I just checked on my own system (Windows 7 x64) and it indeed shows the date as August 2019 in the title bar for MRT and my system is fully patched.
  15. Greetings, You do not need to login to the support contact page, simply scroll down to the form at the bottom and fill it out and you will be contacted directly by Malwarebytes Support via email.
  16. Nope, no harm at all, I just wanted to make certain you added the 3 I mentioned as they are the primary ones used for protection, scanning and the main UI components so they're the ones that use the most resources and interact the most with other programs/files on the system.
  17. Interesting, I was not aware of this. I guess since clicking 'Show processes from all users' has been replaced with the new 'Users' menu, it doesn't provide the option or any way to show processes that run under the SYSTEM user/account like MBAMService.exe does. I guess I get why from a security perspective, but that's a real downer for anyone trying to fully monitor and manage all tasks and processes on their systems. Oh well, thanks for the info
  18. You should also add if possible MBAMService.exe, mbamtray.exe and mbam.exe as trusted applications in Kaspersky if you haven't done so already, but otherwise your exclusions look good to me.
  19. Please try refreshing the desktop if you haven't already by right-clicking your desktop background and clicking on Refresh and hopefully the ZIP file will show up.
  20. Self-protection should prevent you from terminating the service manually (it's also highly unstable to stop a service that way by force terminating it). I'm not sure why the dump isn't working, and I don't think it needs to stop the service to do so as it should just be copying the process's contents from memory to a dump file which can be done while a process is still active and continues running (I've verified this by creating process dumps using Task Manager on active running services and processes, including MBAMService.exe), though the service's hung state might be hanging up other processes and that may be why the dump creation is failing. Is there any sort of error message when the dump process fails?
  21. Excellent, I'm glad to hear it. If there is anything else we might assist you with please let us know. Thanks
  22. Excellent, we're glad to hear it Thank you for letting us know, and if there is anything else we might assist you with please don't hesitate to post again. Thanks
  23. Greetings, I'm sorry you're experiencing performance issues with Ransomware Protection but hopefully we can come up with a solution. Please start by excluding the program folder(s) for OBS and any other programs that are performing a large volume of I/O operations during streaming as this is likely why you're seeing the problem since Ransomware Protection watches in real-time for any ransomware activity on disk and in memory so anything with a lot of reading/writing to disk is going to spike up Ransomware Protection's resource usage. To do so, follow the instructions under the Exclude a File or Folder section of this support article, selecting the option to exclude the item from detection as ransomware. Do this for OBS and any other apps which are likely to be creating/modifying a lot of data on disk during your streaming operations and hopefully that will resolve the issue. Please let us know how it goes and if the issue is resolved or not. Thanks
  24. Thank you for the compliments, I'm glad I could help I'm sure the forum guys could easily come up with a better/more condensed way of stating pretty much all of the info I provided (I tend to get kinda verbose in case you couldn't tell by the walls of text above ), but yes, if they find it useful to do so then they are certainly welcome to, whether by copying/pinning my posts directly or by paraphrasing them to convey any key information that they believe would be useful.
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.