Nelsonian

Correction: with the MB extension fully enabled, "Save As MHTML" does still basically function. The page it creates, which above I thought was useless code, can be renamed to .MHTML and will then open OK. That's the first thing I had tried, of course, and it hadn't worked then. But now it does. So this reduces to a minor report: The MB extension prevents SAM from properly renaming the MHTML file it creates.

Windows 10 Pro x64. I like the Chrome extension "Save As MHTML" (now v2.3) also in the webstore. Unfortunately, with the MB beta enabled, SAM no longer creates an .MHTML file. Instead it downloads a long, useless code listing. On the MB extension Settings panel, I tried disabling the various components ('Enable Scam Protection' etc). But even with them all disabled, and even with the overall "Enable Protection" there turned off, the problem continued. Save As MHTML oly worked properly when the MB extension had been disabled in the Chrome "Manage Extensions" panel.

I had the same problem, which caused me troubles for days and finally screwed up a major backup process. Thinking it was a problem with my apps, I spent hours of trial and error before discovering that MBAM was the problem. Before you guys release a new version, at least check the basics eg does it keep folders and USB drives locked.

Solved. The problem is that Immunet's "Blocking Mode" and MBAM3's "Exploit Protection" interfere with each other. From other history, and the fact that Immunet's "Blocking Mode" is disabled by default, I guess it may be the more heavy-handed of the two features. So I'll leave it disabled, and keep the "Exploit Protection". [I wonder why this thread no longer appears in the Malwarebytes forum? I was lucky to get back here via an old link.]

You're right, and when I have more time I'll decide if I need anything more than uBlock Origin. But, these extensions are not slowing my browser. As I said, even with them all, Chrome loads in about 1 second. I tried disabling them individually and in pairs etc. That had little effect on the delays. Far more significant is the apparent conflict between Immunet and MBAM3 Exploit Protection.

Looking at the Immunet forum, one post notes interference with the Sophos anti-exploit component. So maybe Immunet is more of the issue. But - I can't establish a login on their site to tell them about the above compatibility problems with MBAM3.

Resolution: Immunet v6.0.6.106 and MBAM3 Exploit Protection do not play well together on my PC. If I uninstall Immunet, MBAM3 EP causes no Chrome loading or usage delays. When I reinstall Immunet, the delays are back. But Immunet by itself causes no problems with Chrome. Still puzzling because I can't be the only person using these two products, even under a Standard User account. But there it is.

OK - after some thought I went ahead and uninstalled Immunet v6.0.6. Unfortunately, that required a reboot, which brought in the newest MS Win10 update. So until I reinstall Immunet I can't be sure which made the difference.... ... but the good news is that even with Exploit Protection on, and all my extensions enabled, there is no more delay in opening or using Chrome.

[THIS FORUM'S EDIT POLICY IS IDIOTIC. IF YOU DON'T DO IT FAST ENOUGH, IT WILL DISCARD EVERYTHING YOU WROTE IN THE EDIT] BELAY THE PREVIOUS POST - I DID TAKE MORE TIME... The delay due to Exploit Protection appears to be somewhat related to the number of Chrome extensions enabled, but the results are pretty variable. I get the feeling that the EP delay is most sensitive to whether or not ScriptSafe is one of those enabled, but the differences are too small to be sure. With Exploit Protection off, and all extensions enabled, Chrome loads in about 1 sec. With EP on, and all extensions disabled, Chrome loads in between 4 sec. and 30 sec. With EP on, and and all extensions enabled, Chrome loads in about 30 sec. After Chrome loads and brings up the Google main page, trying to open Chrome's Extensions Mgr can take 30 sec even with all extensions disabled The nine extensions are: ScriptSafe; uBlock Origin; uBlock Origin Extra; Poper Blocker; Privacy Badger; Ghostery; DuckDuckGo; SaveAs MHTML; New Tab Redirect. This is with the other MBAM3 protections (Web, Malware, Ransomware) turned on. Win10 Pro x64 running under Standard User account, Immunet AV, Ryzen CPU.

The delay due to Exploit Protection appears to be related to the number of Chrome extensions enabled*. With Exploit Protection off, and all extensions enabled, Chrome loads in about 1 sec. With EP on, and all extensions disabled, Chrome loads in about 4 sec. With EP on, and and all extensions enabled, Chrome loads in about 30 sec. The nine extensions are: ScriptSafe; uBlock Origin; uBlock Origin Extra; Poper Blocker; Privacy Badger; Ghostery; DuckDuckGo; SaveAs MHTML; New Tab Redirect. This is with the other MBAM3 protections (Web, Malware, Ransomware) turned on. Win10 Pro x64 running under Standard User account, Ryzen CPU. *[Or maybe to the characteristics of one or more of them; I'll experiment when I get more time.]

Yes, turning off Exploit Protection appears to fix the problem. That's with a new download and installation today of MBAM3. Of course I get the popups telling me I'm not protected...

Also possibly important: I'm running as a Standard User, not under the Administrator account.

[The edit buttons here disappear after one edit?} I think MBAM3 was affecting more than web operations - my desktop apps are definitely loading faster too with MBAM3 disabled, though that's harder to perceive.

Attached is the mb-check results file. I manually added the Farbar logs since they had not been automatically found (maybe because I didn't run FRST from the desktop). The problem is repeatable: With MBAM3 enabled, Chrome takes one or two minutes to start and up to another minute to load the Google search page. This does not change if I turn off MBAM web protection. With MBAM3 off, Chrome starts and loads the Google site in 3-5 sec. This is independent of whether or not I disable my Chrome security extensions (ScriptSafe, uBlock, Badger, Ghostery etc). Disabling Windows firewall has no effect either. Also, after running the Farbar scan, I updated Immunet to the new v6.06. That had no effect either. MS Edge startup is also being slowed, but not nearly as much; from a 3-sec time to about 10 sec. mb-check-results.zip

Yeah, that's what I meant re diagnostics. I'm assuming from your answer that this is not a known issue, so the time I spend doing these things will potentially be helpful. It is surprising that, with a standard platform and millions of users, such a gross symptom hasn't raised lots of flags - if it really is due to MBAM... My Windows installation is less than three weeks old with very few addons (Immunet; MBAM; Office; Thunderbird; Chrome).

Latest (yesterday) MBAM Premium; Win10 Pro x64; Ryzen 8-core; Immunet AV --> Is this a known issue? If not I can put together some diagnostics tonight and send them in. MBAM is crippling browser startups. This began about two days ago but I didn't investigate at first, suspecting temporary internet or website issues. Chrome takes 3 min to get to the Google home page, compared to 3 sec with MBAM stopped. Simply disabling Web Protection in MBAM doesn't help. MS Edge is also significantly affected, though not to the same extent. I have completely removed (via RevoUninstall), re-downloaded, and reinstalled MBAM with the same results.

Thank you. Entering the site IP works, at least on a first test. Which makes me want another feature: A 'comment' field on the Exclusions. I'll never remember why there's an IP in this list nor recognize it... Just an idea, Thanks

OK I guess. Thanks for the replies & info.

Yes, I have "example.com" as an exclusion. That works for the site home page, but not the problem pages which have varying first characters eg "c-31.example.com".

Malwarebytes v3.2.2 Win10 Pro x64 I often visit a site that changes the first part of its URL. The site itself is "www.example.com". It will spawn pages as "f-31.example.com". So in "Exclusions" I want to whitelist "*.example.com". I've seen the ability to do this in other apps, but MWB3 won't let me. As a result, I have to turn off web protection when I am working with this site.

Why doesn't MB3 flag hollow processes? AFAIK these are always hackware and usually malware - and impossible for simple methods to detect. Not instantly delete them, but alert the user and give them some choices. I'd like at least the option for this... I'm chasing a keylogger that my purchased MB3 does not detect. Only Zemana gave me any help in this regard.