Firefox Posted January 26, 2016 ID:1014839 Share Posted January 26, 2016 OK I have this running on a Win7 VM and I encountered a block. At first it installed fine and said no issues were found. I noticed I had 52 Windows updates to do, so I allowed them to install, when it got to update 3 of 52 (Security Udpate for Microsoft .NET Framework 4.5, 4.51 ....) I received the following Detection. I clicked Close for now, and will wait to see if the updates finish. Notice, I went to the program and clicked on Quarantine and there is nothing listed in there, is that normal? Win7Pro VM 32bit (fully patched except for these 52 updates that are installing)2GB Ram ngen.rar Link to post Share on other sites More sharing options...
Firefox Posted January 26, 2016 Author ID:1014844 Share Posted January 26, 2016 Well still sitting on installing update 3.of 52, the .NET Framework update that encountered the block, will let it sit a little longer see if it continues. In the meantime here are the files from the folder C:\ProgramData\Malwarebytes\Malwarebytes Anti-Ransomware MBARWFILES.zip Link to post Share on other sites More sharing options...
Staff pbust Posted January 27, 2016 Staff ID:1014924 Share Posted January 27, 2016 Thanks for reporting. Will be fixing ASAP. Link to post Share on other sites More sharing options...
Decrypterfixer Posted January 27, 2016 ID:1014936 Share Posted January 27, 2016 Self Note - ARW Archived Link to post Share on other sites More sharing options...
Firefox Posted January 27, 2016 Author ID:1014959 Share Posted January 27, 2016 Thanks... also the updates finally finished but I encountered another block.. see below (this during updates) And from these blocks you can see the .NET update failed. Link to post Share on other sites More sharing options...
Decrypterfixer Posted January 27, 2016 ID:1014967 Share Posted January 27, 2016 Could you please follow the same steps as before, zip up the MBARW folder and provide that EXE? Thanks! Link to post Share on other sites More sharing options...
Firefox Posted January 27, 2016 Author ID:1015206 Share Posted January 27, 2016 Here are the attached files that you requested....MBARWFILES.zipmscorsvw.rar Link to post Share on other sites More sharing options...
Decrypterfixer Posted January 27, 2016 ID:1015257 Share Posted January 27, 2016 Thanks, this FP should now be fixed. Self Note: ARW Archived Link to post Share on other sites More sharing options...
Firefox Posted January 27, 2016 Author ID:1015285 Share Posted January 27, 2016 Thanks, just a quick question if you don't mind... You state that this is now fixed, is MBARW that I have installed, automatically downloading updates? How is it getting the info that it is now not to detected these files? Is there a database update happening in the background or talking live to an external server? Link to post Share on other sites More sharing options...
Decrypterfixer Posted January 27, 2016 ID:1015329 Share Posted January 27, 2016 Yes, for these type of fixes that are automatic from the cloud. But we will be introducing whole new BETA updates that incorporate local changes. For these you will get a prompt to update when they are live. Link to post Share on other sites More sharing options...
Firefox Posted January 27, 2016 Author ID:1015340 Share Posted January 27, 2016 Great, thanks Nathan for the info...More on this issue: Checked for updates and had these optional updates to install, so I decided to install them. (notice the .NET update KB3080079 Updates installed fine, after a reboot I encountered another blocked ransonware activity as shown below, I clicked OK and MBARW asked me to reboot. This is what is showing in the Quarantine: MBARWFILES.zipmscorsvw.rar Link to post Share on other sites More sharing options...
MWBAM_Customer Posted January 27, 2016 ID:1015359 Share Posted January 27, 2016 Pardon me for butting in on someone else's thread, but the news that these fixes are happening for users as soon as they have been reported as fixed in the threads is great news. From reading all the threads here, it seemed implied, but this is the first time I have seen it stated. After reporting a potential false positive myself, I thought the fix would come out in the next beta release. Surely a feature such as this and rapid response to issues deserves to be clearly stated in the product announcement? Or at least clarified in the fix confirmation, otherwise people won't be testing the fixes. To put it another way, someone might look at the number of threads reporting issues and not want to try MBARW, believing these issues are outstanding, rather than fixed! Maybe also marking the threads as solved? Link to post Share on other sites More sharing options...
Decrypterfixer Posted January 27, 2016 ID:1015500 Share Posted January 27, 2016 When we verify with the users, i will later go through the old threads and mark them solved thanks for feedback! Link to post Share on other sites More sharing options...
Nation Posted January 29, 2016 ID:1015893 Share Posted January 29, 2016 I had a similar experience this morning. My installation of Anti-Randomware (AR) went great. This morning I had an optional update of .Net Framework 4.6, so installed it. I didn't reboot, as required since I didn't need the app that uses .NET Frameworks just yet. After a while AR popped up and said it quaranteened some malware. It quarantined mscorsvw.exe. And the accompanying optimization registry key. "malware.ransom.agent.generic" 64bit Win7 Pro SP1 mine is kept up to date on a Lenovo R-500.a user friendly log would be nice for printing and troubleshooting. My first post so hopefully I got it right.antiransomware1.ziplogs.zipMalwarebytes Anti-Ransomware.zipmscorsvw.zip Link to post Share on other sites More sharing options...
Decrypterfixer Posted January 29, 2016 ID:1016199 Share Posted January 29, 2016 Thanks for your feedback, We will get this fixed ASAP! Link to post Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now