MBAM Catastrophe 13 PC’s

[ComputerDavePC]

We are a computer repair service, and recommend MBAM for many of our Clients. This morning, so far we have had 13 PC’s presented to our shop with a common thread. They are getting multiple notifications from Malwarebytes, and then errors stating that files are missing or cannot start, such as “RAVCpl64.exe” and “TECOresident.exe” and multiple others including but not limited to those associated with Adobe and Avast.

In most cases Clients report that they restart their machine and then it will not boot. We are working with one machine now that will and have discovered that MBAM will not uninstall through Windows Programs and Features. We’re about to use the uninstall tool.

This is happening on XP, Vista, 7 and 8 machines.

Had another two just come in reporting the same issues.

[John L. Galt]

See http://forums.malwarebytes.org/index.php?showtopic=125136

[AdvancedSetup]

You should first attempt to systematically repair the system either by using the MBAM GUI if possible or if not then by using our repair tool for this. Do not use the MBAM CLEAN tool as that will remove the quarantine files as well and then you won't be able to restore them.

If you need further assistance please let us know but that post linked to by John should provide quite a bit of information for you.

[ComputerDavePC]

We ended up getting in about 28 PC’s yesterday with this issue and were able to repair all but 1 (so far) without many difficulties. Using a DART disk helped on many machines to restore to an earlier date.

Although it was unfortunate that the software temporarily exhibited aggressive and sometimes cannibalistic behaviors, we sincerely believe that this was a very isolated and rare accident. We still have the upmost faith in the product and will continue to recommend it to all of our Clients.

[AdvancedSetup]

Thanks for the follow-up Dave and thank you for your understanding and yes we will put in place methods to prevent this from happening again

[FremontPC]

Advanced Setup, would it be possible to mod the tool so it could work on a slaved drive, or from a bootable environment without loading a user profile? Might save you folks a boatload of time...

[shadowwar]

Our lead developer has been working on this type of solution and is in prelimary testing with it.

[FremontPC]

Excellent!