Can't add WinRAR.exe to Protected Applications

[Xircal]

As per the attached log file, Mbam 3.0.5 won't accept WinRAR.exe as an addition to the list of Protected Applications. I tried adding it three times wihout success.

I was able to add both Keepass.exe and Thunderbird.exe without a problem.

OS is Windows 8.1 x64.

MBAMSERVICE.zip

[dcollins]

It looks like WinRAR is already in your list of excluded applications according to the logs, and we prevent duplicates from being added. Can you double check your list of applications and verify that WinRAR is already there?

[cchilderhose]

I just tried to add KeePass but it does not let me and it is not already in the list.  Think there are still some issues around this section of the program as you cannot edit or delete existing ones listed either which is known.  I will test a few other apps.

[Telos]

KeePass adds fine here [v3.0.5, Win8.1-64]

[cchilderhose]

Hmm...maybe it is a Windows 10 issue as I am on newest Insider Build 14986.

[dcollins]

@cchilderhose can you please upload your mbamservice.log file from C:\ProgramData\Malwarebytes\MBAMService\logs? The ProgramData may be hidden so you'll need to turn on hidden folders to see it or type in the full path to the folder.

Not being able to delete/edit applications from this list is something we are working on as we are able to reproduce. Thanks!

[cchilderhose]

See attached.

MBAMSERVICE.LOG

[dcollins]

Thanks @cchilderhose, give me a bit to research this please

[dcollins]

@cchilderhose can you please grab the mbae-default.txt file from C:\ProgramData\Malwarebytes\MBAMService folder as well? Thanks!

[cchilderhose]

Sure but it will be tomorrow morning.

[dcollins]

No problem!

[throkr]

3 hours ago, cchilderhose said:

I just tried to add KeePass but it does not let me and it is not already in the list.  

Hello,

Just for info, I'm on Win 10 1607 (latest Build 14393.576) Pro x64 and couldn't add KeePass at first because it was running; I exited the program and no problem anymore (did it this same way for a few other still running programs).

Maybe this helps ...

[cchilderhose]

Thanks for the idea never dawned on me to close the app first. Will try that and see.

[Xircal]

20 hours ago, dcollins said:

It looks like WinRAR is already in your list of excluded applications according to the logs, and we prevent duplicates from being added. Can you double check your list of applications and verify that WinRAR is already there?

WinRAR doesn't appear in the UI, but then again neither does Winzip32.exe, Winzip64.exe and 7z.exe all of which appear in the log file along with a few others so I guess Mbam only displays the applications which are most likely used on a daily basis.

Having said that, I'm suprised neither Thunderbird nor Keepass were included in the default settings since both are well-known apps.

Still, I should have checked the log file myself first before posting.

 

[cchilderhose]

Here is the MBAE-Default.txt file and the service log again.  I was able to add the KeePass application but it crashed MBAM and now I cannot turn it on but it is showing in the list.

MBAMSERVICE.LOG

mbae-default.log

[dcollins]

Thanks @Xircal, that is strange and something I overlooked before. I'll look into that and see what I can report back on.

@cchilderhose thanks for the logs, this should help us figure out what's going on. And just to clarify, MBAM can't be opened now, or KeePass can't be opened now?

[cchilderhose]

I can open both programs no issue there. Just can't toggle on KeePass now that it is in the list that's all.

Mbam crashed while adding KeePass though but is good now.

[Telos]

1 hour ago, cchilderhose said:

I can open both programs no issue there. Just can't toggle on KeePass now that it is in the list that's all.

1

FWIW, when Keepass is open I can toggle off, but not on without crashing Keepass and getting an MBAM notification. But if Keepass is closed, all toggling is fine. [Win8.1-64]

[throkr]

For info, now that KeePass is in the list (see my post #12 above), I have no problem to toggle it off or on in Malwarebytes; I simply noticed that setting off is immediate whilst setting on again lasts a few seconds more (probably because KP is running in the background).

[cchilderhose]

Yeah I have tried to toggle it on/off but nothing even when KeePass is closed or open.

[cchilderhose]

Any updates on this topic?

[throkr]

I'm now waiting (just like many other users, I guess) that the buttons "delete" and "edit" become active (see my previous post here).

Hopefully with the next release .....  

[dcollins]

On 12/30/2016 at 6:52 AM, cchilderhose said:

Any updates on this topic?

No updates yet, our developers are still looking into this issue.

Would you be able to install MBAE Standalone and see if the problem still occurs there?

Edited January 3, 2017 by dcollins

[cchilderhose]

Thanks Devin.  Just wanted to make sure as it has been a while.