Richard63

It was not "various" but only 1 domain and a subdomain from the same domain. I provided the information by PM. @AdvancedSetup then soon discovered that ip/domain was blocked at that time by MBAM, only nslookup does not give a popup warning about the block. Visiting the url or using tracert does. It's reported to the devs, and who knows might be fixed. So for others reading this, in certain cases (with this version) when using nslookup a localhost result -might- be thrown when a ip or domain is blacklisted by MBAM. Thanks @AdvancedSetup for the fast responses, great service and help/advise with this!

Yes I've read that before, also about security. Which was the reason I've uninstalled if 5 years ago. And then at a certain point got complaints from my system that it couldn't access the bonjour service. And I had to install it again. I think you might even see iTunes complaining if it's not installed. I'm not sure anymore, but that's the reason it got installed in 2019 again. I'm a hosting provider and I've never encountered network issues om my home network to be true. Also working with computers, maybe a bit shorter, but still 34 years so I can say I have some experience. And I know about various things which can cause issues, but don't really need to be the cause. And if bonjour was the cause now, then I would have the same issue if the MBAM internet check was disabled, right? Also I would have issues with loads of domains, not with some or a single one maybe. This one I did, but it doesn't seem the have made any changes, still same problem. I would like to ask again to please remove the old logs. I will provide you with the domain I'm having issues with.

I'm just checking the Mozilla. And I see this in my program's list: When I start Mozilla, I get the 128.1.0esr. I'm not sure when I remove the 102.1.0 (if even present anywhere) it might not remove Thunderbird completely. Anyway, doesn't have to to with nslookup.

Thank you. However I don't think the updates of the programs will fix a specific issue only happening on nslookups. Also I don't know where you get the version information from, but to put some examples: Discord -> Is updated every time as soon as I start it. I started it today to, no updates. Mozilla Thunderbird v.102.1.0 gives a warning -> I always update that, my current version is even 128.1.0esr (64-bits) so way past v102. ;) I can't delete port expert, because I need that program. It's not started with Windows so it's not influencing with nslookup anyway. Total Commander also don't needs to be updated. I don't need the latest version for this, I use it once a while, also not conflicting with nslookup stuff. Edge Webview, I wouldn't even know how to update this. I don't normally use Edge, I always use Firefox. Microsoft Visual C++ are updates only required by some specific software, they don't need to be up to date every time either. If they should, then Microsoft should update them, which MS does not. Adobe Acrobat reader. Odd that this is not supported anymore, because in my program files list it says this is a version is updated 10 days ago on august 3. When looking here, https://get.adobe.com/nl/reader/ there is no DC, it's just Acrobat Reader again nowadays. So at least about Thunderbird and Acrobat, some of those scanners are not providing accurate information. Bonjour: Sorry, but you should know this service is required by several applications, mainly printer. And it even got installed with my printer if I'm correct. CCcleaner does not need to be uninstalled as I hardly use it, it's not running by default, I disabled that part, so it can't do harm and it also doesn't interfere with my system. You are now asking me to do updates and things. And I'm prepared to do some required things, but I'm not a noob. The issue is very clear. Enable internet check in MBAM, nslookup will fail on certain sites. I can give you the site I tested and then you can see for yourself, If I'm allowed to pm you. As soon as internet check is disalbed or only Windows Defender is running, then nslookups to those sites work without any issues. And this time it's not even a site I've ever visited before. Never used it in my browser only nslookup. So it's clearly an MBAM issue, not a "my system" issue. So maybe it's better to send you the domain name so you can check the result on your own system, before we're going to make all kind of unnecessary changes (even some which even have newer versions then suggested). Please remove the logs from my former post.

Thank you again for the quick reply and removal of logs. I rebooted and made the new logs as requested, although I'm curious as to which files would be updated. I didn't see a notice of Microsoft updates. Please remove again after investigation, thank you.

Hello. Thank you for the quick reply. Well I know for sure there are some things in the frst logs which are harmfull to my privacy, names, document names for example. So please remove a.s.a.p. from the forum after investigating. Thank you.

Seems since shortly we have an issue on our hands. When trying an nslookup to a polish site, I got no popup or warning from malware bytes. However the correct ip was not given but I got a result of 127.53.0.1 instead. Ofcourse this was not the correct ip. Then I tried again, and trying to look it up via cloudflare, so like this: nslookup somedomain.pl 1.1.1.1 and the same thing happened. Then I set the 1.1.1.1 ip in my router as default DNS, tried again, and in both ways (normal nslookup and with 1.1.1.1 and even 8.8.8.8) I got the result 127.66.0.1 which is still wrong. The correct ip should be 77.91.xx.xx So I decided to disable Malware Bytes and promptly I got the correct results both on normal nslookup and on 1.1.1.1. Enabled Malware bytes again, and got the localhost results again, which prooved that MBAM is the root cause. This should not happen, an nslookup should always work, especially on request at an external host like cloudflare. So at this moment to keep Malware Bytes working, I had to disable the internet check, so nslookups keep working correctly. Can this be fixed a.s.a.p. please.