OldMainframeGuy

Thanks; it appears to be already removed; website is accessible as of this morning.

Porthos: Thank you for clearing this up for me. I just assumed (whoops!) that the green checkmark on the Defender icon meant it was active; when I checked further, I could see that it was not. I now have Malwarebytes set to not register itself with the Windows Security Center. And I am running the same Windows version and build as you. Rob

Porthos: I'm a bit confused by this. I'm running the latest version of Malwarebytes Premium on the latest version of Windows 10 and I have Malwarebytes configured to register with the Windows Security Center. I don't see any evidence that Windows Defender is disabled. It's in my system tray with a green checkmark and the security dashboard shows everything green. Windows Defender still runs its scans. Both products looks like they're coexisting. What would I see to indicate Defender is disabled? Rob

Malwarebytes is blocking www.zhornsoftware.co.uk, a website that provides free software. I've run on of their products, Stickies, for many years. If I try to access via Firefox, I get this error: Error code: SSL_ERROR_RX_RECORD_TOO_LONG Through Chrome: ERR_SSL_PROTOCOL_ERROR Is this a soft (certificate) error or a real threat? The website has been blocked for at least a couple of weeks. Rob

Exile: I will definitely install version 4 when this is settled; I was on version 4 when I suddenly started having the weird network and BSOD issues. I don't want to stay on version 3 forever but I'm kind of neurotic about BSODs. 😊 Rob

Exile: Thank you; the tech note just indicates to turn off " Notify me when full version updates are available." Will disabling component updates disable downloads of any new malware signatures?

Porthos: Thanks but this did not solve the problem. The instlrupdate folder eventually gets recreated and the nags continue.

Porthos: It's not the hill I want to die on 🙂 but eventually Malwarebytes 3.8.3 downloaded the instlrupdate folder and started nagging me to update again so I repeated the process. Is this supposed to happen? Rob

Porthous: Just FYI, the C:\ProgramData\Malwarebytes\MBAMService\instlrupdate folder is not present on my PC after installing 3.8.3 and MBAM is not issuing any notifications to upgrade. I do have "Notify me when full version updates are available" shut off. Rob

Thanks again; I just installed 3.8.3 it and all is well. Rob

Porthos: Thanks for the reply; the download link I found earlier in thread downloaded version 3.5.1. With all due respect, I'd rather not be a beta tester right now. If it was for testing things like functionality it would be one thing, but beta testing a fix for a problem that's causing BSODs is something I'd rather not do. Rob

I've downloaded and installed the "legacy" (v3.5.1) version of Malwarebytes until this all gets sorted out. Malewarebytes 3.5.1 is telling me that "a new and improved version of Malwarebytes is available". Is this version 4 or is it a newer release of version 3? In Settings I have "notify me when full version updates are available" turned off so I'm not sure what this "new and improved version" is telling me. I downloaded the legacy version via this URL which appears earlier in this thread: https://downloads.malwarebytes.com/file/mb3_legacy Rob

My PC ran without issues for two days with MBAM shut off; I've restarted MBAM with Web Protection disabled.

I wouldn't mind going back to v3.8; it was stable. Is it still available for download and would it receive security updates? Rob

Thanks for your reply. I've attached the file created by the Support tool and the minidump that was generated. The memory dump is over 3GB which is over the WeTransfer.com limit. For now I'm just going to leave MBAM shut off for a sanity check; if after a few days I continue to have no problems, I'll restart it with Web Protection shut off. Rob mbst-grab-results.zip 011120-36843-01.dmp

Running Windows 10 Pro 64, version 1909; Malwarebytes 4.0.4, lifetime license. System is (was) completely stable. Last night for no good reason I opened Malewarebytes and clicked on "check for updates". An update was applied which required me to reboot the PC; the update was to version 4.0.4.49, update version 1.0.17577, component package version 1.0.793. Since then, I've had odd things happening. About a half hour after the reboot, I had no Internet access. I issued an ipconifg /all command in a command window and found that I no longer had any IPv4 addresses; they were all IPv6 including my DNS server. I ran the network troubleshooter which fixed the issue and rebooted. Everything was fine until another half hour later when the same thing happened; ran the network troubleshooter which fixed the problem. I then disabled Malwarebytes and left it disabled overnight. No issues. Today I re-enabled it again, checked for update (just in case), and left it running. Some time this afternoon my system stopped with a BSOD crash (DRIVER_POWER_STATE_FAILURE). I can't prove that it's a Malwarebytes problem but it was the last thing that changed on my system (which never crashes) and the issues started happening shortly after the update. Is anyone else noticing anything like this? I'm going to leave MBAM disabled for a few days to see if the issue goes away. Rob

Maurice: Thank you for your helpful reply! One more question please. Does the current version of Malwarebytes Windows Firewall Control need to be activated? I have an account on the Binisoft site to activate the product but I notice that the activation is only for release 5 and prior and the newest version is release 6. Rob

I have a lifetime license for Malwarebytes Premium and was a registered (paid) user of Binisoft Windows Firewall Control (now part of Malwarebytes). If I uninstall Premium & Firewall Control and reinstall it will the Firewall Control component also be reinstalled? It doesn't seem to be a separately downloadable product. I plan to upgrade Windows 10 to the latest release (1809 -> 1903) and I find having Malwarebytes out of the way during the upgrade avoids issues. Rob

I certainly will. Thanks again. Rob

Second time is the charm...it's working now. Thanks for your support! Rob

Thanks but it still failed. I followed your procedure to delete the Hubblecache file and restarted MBAM. From the log can you verify that I'm running the latest signatures? Malwarebytes www.malwarebytes.com -Log Details- Scan Date: 4/24/18 Scan Time: 12:30 PM Log File: c1a7b866-47dc-11e8-9686-00224d99367e.json Administrator: Yes -Software Information- Version: 3.4.5.2467 Components Version: 1.0.342 Update Package Version: 1.0.4860 License: Premium -System Information- OS: Windows 10 (Build 16299.371) CPU: x64 File System: NTFS User: ROBWIN\Rob -Scan Summary- Scan Type: Custom Scan Scan Initiated By: Manual Result: Completed Objects Scanned: 1 Threats Detected: 1 Threats Quarantined: 0 (No malicious items detected) Time Elapsed: 0 min, 8 sec -Scan Options- Memory: Disabled Startup: Disabled Filesystem: Enabled Archives: Enabled Rootkits: Disabled Heuristics: Enabled PUP: Detect PUM: Detect -Scan Details- Process: 0 (No malicious items detected) Module: 0 (No malicious items detected) Registry Key: 0 (No malicious items detected) Registry Value: 0 (No malicious items detected) Registry Data: 0 (No malicious items detected) Data Stream: 0 (No malicious items detected) Folder: 0 (No malicious items detected) File: 1 MachineLearning/Anomalous.100%, C:\TEMP\C3D00D14-DEF3-476F-BBFE-E3CB21684130\WFC5SETUP.EXE, No Action By User, [0], [392687],1.0.4860 Physical Sector: 0 (No malicious items detected) (end)

Zipped file attached. wfc5setup.zip This is the file that the running instance of WFC downloads to install when it detects a new version is available. I

Hi...this is still broken. WFC downloads the updated program to the TEMP directory and tries to install it. The updated program is currently in my TEMP directory and if I scan it with MBAM it's still flagged and I'm asked if I want to quarantine it. I've updated MBAM with the latest signatures. Here's the log file it creates: Malwarebytes www.malwarebytes.com -Log Details- Scan Date: 4/24/18 Scan Time: 11:48 AM Log File: fad5c30e-47d6-11e8-9cf6-00224d99367e.json Administrator: Yes -Software Information- Version: 3.4.5.2467 Components Version: 1.0.342 Update Package Version: 1.0.4860 License: Premium -System Information- OS: Windows 10 (Build 16299.371) CPU: x64 File System: NTFS User: ROBWIN\Rob -Scan Summary- Scan Type: Custom Scan Scan Initiated By: Manual Result: Completed Objects Scanned: 1 Threats Detected: 1 Threats Quarantined: 0 (No malicious items detected) Time Elapsed: 0 min, 7 sec -Scan Options- Memory: Disabled Startup: Disabled Filesystem: Enabled Archives: Enabled Rootkits: Disabled Heuristics: Enabled PUP: Detect PUM: Detect -Scan Details- Process: 0 (No malicious items detected) Module: 0 (No malicious items detected) Registry Key: 0 (No malicious items detected) Registry Value: 0 (No malicious items detected) Registry Data: 0 (No malicious items detected) Data Stream: 0 (No malicious items detected) Folder: 0 (No malicious items detected) File: 1 MachineLearning/Anomalous.100%, C:\TEMP\C3D00D14-DEF3-476F-BBFE-E3CB21684130\WFC5SETUP.EXE, No Action By User, [0], [392687],1.0.4860 Physical Sector: 0 (No malicious items detected) (end)

This is not fixed. From the log file: MachineLearning/Anomalous.100%, C:\TEMP\C3D00D14-DEF3-476F-BBFE-E3CB21684130\WFC5SETUP.EXE, No Action By User, [0], [392687],1.0.4858

Malwarebytes is flagging the latest version of Windows Firewall Control with MachineLearning.Anomalous100%. https://www.binisoft.org/wfc.php Rob