BretAB

Hi, I'm curious if anyone else had one of these BSOD's lately on MbamChameleon.sys . The PC was running fine for 4 hours, then the BSOD out of nowhere. OS is Win11Pro, updated. This is clipped from a debugger report: *** WARNING: Unable to verify timestamp for MbamChameleon.sys *** ERROR: Module load completed but symbols could not be loaded for MbamChameleon.sys Probably caused by : memory_corruption Followup: memory_corruption MWB Premium is current: Win11Pro is current: Thanks for your thoughts. Regards . . .

This is the postscript to pdf converter for the popular pdf995 pdf writer: http://www.sponsor995.com/bin/ps2pdf995.exe That exe is accessed from the author's site at http://www.pdf995.com/download.html I actually have the paid version. Regards . . .

Thanks Porthos for the heads-up. I'll just pass the url for this thread on to the appropriate party. They can take action if they want to. Regards . . .

Hi, Not to be too pushy, but is this thread still active? I realize we're all trying to cope with a pandemic, but just checking in to see if any new info on this one. Regards . . . P.S. Thanks TeMerc for removing the original attachment in the original post. I've reattached the (minor) edited version here.api.twelvedata.com.txt

Ok I had another look at this. Looks like MWB popped the warning because of an attempted outbound SSL connection to the domain api.twelvedata.com . twelvedata.com is a legitimate domain. Further investigation shows this "IP has been flagged because have none valid FCrDNS." Does that help you remove false positive? Hmm.

Did I misunderstand that you are saying "twelvedata.xlam" (per VirusTotal) is in play here? That's an Excel add-in macro. Is the site trying to upload that to the computer, or, is the site telling the computer to download that add-in? Hmm. I'm confused.

Hi, It looks like the detected file is (local) chrome.exe (ie. the browser instance in use when the site was opened). I've attached a pic that may help you. I get two MWB pop-ups when I go to that site. Regards . . .

False Positive "api.twelvedata.com" on web site https://advisor.morganstanley.com/the-west-group ? Hmm. Regards . . .

Out of curiosity, I just checked and it doesn't appear to be a dns response time issue. The attached "with" and "without" tests, done in the VM, are virtually (haha, pun) the same in the VM. Take a look at the "Time (ms)" columns in the attached pdf. Hmm, this could be a Microsoft Windows "window management"/polling problem (ie. window opening delayed due to Windows polling problem). I've run into this before. In order not to muddy the waters of this thread, I'll pm you both on this when I get a bit more time. Hmm, could this be a network hardware issue? I'll try a manual input of some public dns servers into Windows IPv4 properties, and try a direct wire from the VM host's physical nic to the WAN bridge. Hmm, maybe I should try the ISP's dns servers too, but that is unlikely solution. HP.com dns 'Time (ms)' test.pdf

The original post used a live/physical machine. The zip was from a VM (same OS, but at a 12/3/21 Windows update level). Yes, the VM exhibits the same problem. Note that the VM is bare bones with only Chrome and the Browser Guard freshly installed yesterday. No MWB and only the native WinDefendr already installed as expected. As we both know, VMs are perfect for separating the wheat from the chaff and letting us mess around without tears. Btw, I have a "B4 Chrome & MWB's Browser Guard" snapshot in case we need to cleanup a nasty little spill :->

Haha, we were writing new posts at same time : ) Deja vu

Hi AdvancedSetup & Porthos, I'm more comfortable now that Porthos mentioned the zips are not publically available. And I really appreciate your offer to look into this. So . . . I've attached the zip from the fresh VM I made. See my post yesterday above (ie. has steps "1" through "5") for details of the VM. I look forward to your thought, comments, suggestions. etc.. Regards . . . mbst-grab-results.zip

Hi SonyPhilipsDigitalInterface, I won't even get into the issues I encountered running that support tool on my licensed MWB software (ie. it said no Malwarebytes installed after attempting to repair by re-installing MWB). Then I then had to manually download MWB v4.5 and re-install that worked thankfully. Then I run just the report generator, and took a vacation while that took forever. Then I decide rather than risk hosing a working Windows installation (on a physical PC) at year-end . . . 1. I opened a brand new Windows session in a VMware VM (ie. Windows fully patched with all current Windows updates as of 12/3/21). 2. I installed Google Chrome. I test Chrome to local router console page and it's instant. 3. Next I install Malwarebytes Browser Guard: Problem is duplicated in the fresh VM (ie. at least 5 second delay to open the router page). 4. I download and install the Support Tool in the VM and run the report function (makes zip). 5. Rather than publish that zip publically, I'd prefer to open private support case. See, another whole day down the drain. This is twice in the last 6 months. I know the support people do a good job, but I'm not retired and really don't have time for this. If I find out anything useful, I'll post back. Thanks for your help along the way. Regards . . .

Hi, In maybe last month or so, I've noticed that in both MWB v4.4.10 and the new v4.5.0, that Malwarebytes Browser Guard is causing very noticeable slow page loading. Both Chrome and Firefox exhibit this, even when loading a LAN address like your local router's web management page, takes like 5 seconds. Well known WAN pages are even worse. As far as the WAN, I even tried several different well known public DNS servers with the same slow site load results. In both browsers, I've disabled ALL add-ins/Extension EXCEPT Malwarebytes Browser Guard, and the slow-load problem is apparent. If I then [WORKAROUND] disable Malwarebytes Browser Guard (not recommended, but necessary for these tests), the slow load problem on both the LAN and WAN go away ad the pages load more or less instantly as expected and desired. I don't have the time to debug this, but thought I'd just make this thread for the Community to find until this gets sorted out by "The Management". Regards . . .

Hi, I believe there's a FP on "mmm-setup", as can be downloaded here: https://moviemaker.minitool.com/?utm_source=minitool.com&utm_medium=redirection&utm_campaign=home-banner Please see report attached and advise. Regards . . . FP.txt