BiggerJ

Thanks. I'll check it out.

Sorry, forgot to do it. I've just done it now.

Here's the new logs. mbst-grab-results.zip

I just uninstalled and reinstalled. Should I restart before gathering logs?

I will, but first, you said to reinstall MalwareBytes with the offline installer. Should I uninstall MalwareBytes first before using the offline installer, and if so, should I use the usual uninstall method or the Support Tool?

If I wasn't clear in my previous reply, uninstalling TinyWall fixed the problem.

I uninstalled TinyWall and it successfully accessed my subscription. Thanks!

Should I uninstall MalwareBytes first, and if so, should I use the support tool to do it?

Here you go. I accidentally used 'gather logs' twice, because I forgot to look in C:\Users\Public\Desktop for the zip. If you want me to restart and gather logs again, I will. mbst-grab-results.zip

When I try to sign in via the 'Activate subscription' button in the MalwareBytes program, it says 'unable to contact license server'. I am using TinyWall, but have whitelisted all MalwareBytes processes. I have also noticed that the program is still capable of detecting when I accidentally put in the wrong password.

Okay, restarted and gathered logs with the Support Tool. here you go. I still have the logs it gathered when I did it before restarting, if you also want those. mbst-grab-results.zip

Sorry, uploaded but forgot to restart my computer. I'll restart, then try again.

I've just discovered that a couple of seconds before the logged event I posted, this event was logged: "The start type of the MBAMSwissArmy service was changed from demand start to boot start." It seems to be - I'll reply with another event log if it happens again.

According to a Windows 11 event log, MalwareBytes (version 4.6.1.280) recently restarted my computer (personal information removed and replaced with text in asterisks): The process C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe (*username*) has initiated the restart of computer *computername* on behalf of user NT AUTHORITY\SYSTEM for the following reason: Legacy API shutdown I have since updated to 4.6.1.281

MalwareBytes' machine learning system detected the file TurBoLog.DLL (included in the attached ZIP file), and I think it's a false positive. It's part of a popular Final Fantasy 7 mod manager program that's recently become very popular due to a very popular new mod. fpreport.txt TurBoLog.zip