Clean install of 3.0.6.1469 - 1075

[Phone Man]

Finally got back to trying MB 3.

I was running MB 2 and Anti-Exploit and used the new MB-Clean tool and followed the recommended procedure.

Uninstall went fine and I only had one leftover. It was in Program Files (x86). It was mbae64.sys in the Malwarebytes Anti-Exploit folder.

I tried removing it but it was in use. I renamed it and then after a restart I was able to delete it.

I installed the new version and all went well. I ran updates, activated with my Lifetime license, ran a scan and updated a few settings.

Then I did a restart and Exploit Protection was OFF. I could turn it on but after each restart it was OFF.

I ran MB-Check and it showed ES Protection Service was not running. Windows event viewer showed that the driver could not be found.

I tried a quickie fix by re-installing MB 3 over the top. After a couple restarts all is working fine.

MB-check shows all is fine.

Jim

 

Bad MB-CheckResult.txt

Good MB-CheckResult.txt

[Phone Man]

Booted this morning and Exploit Protection was OFF and I could not get it to start.

No errors in Event log.

I changed the option to delay protection for 15 sec to see if it matters.

Restarted a few times and seems to be working.

No Gold Star for MB yet.

Jim

 

[Phone Man]

No problem with boot on Monday but today a different problem.

Cold boot this morning and Malware Protection failed to start. Exploit Protection was OK.

Had to do a Windows restart to get it going.

MB-CheckResult.txt

Edited March 7, 2017 by Phone Man

[Phone Man]

Bad to Worst.

Malware Protection is OFF on all restarts now.

Sometimes it will start when I turn it on through Settings and sometimes it just hangs and says Starting.

On one restart I got the dreaded Temp Profile boot. I have ONLY seen that with MB 3.

Glad this is a test system and my other systems are staying on MBAM 2 until these bugs are fixed.

Looking forward to the next fix release.

Jim

 

[dcollins]

Good morning @Phone Man. If possible, would you mind gathering some debug logs for us so we can see what's happening? The details are below:

1. Open up Malwarebytes
2. Verify that Malware Protection is still off
3. Go to Settings -> Application
4. Turn on the "Event Log Data" option
5. Go to Settings -> Protection
6. Attempt to start Malware Protection
   • If it starts, then reboot and keep trying until it fails to start
   • If it sticks in starting, then continue on with the next  step
7. Go to Settings -> Application
8. Turn off the "Event Log Data" option
9. Open C:\ProgramData\Malwarebytes\MBAMService
   Note: The ProgramData folder may be hidden. You may need to turn on showing hidden folders or browse to the folder manually
10. Right click the logs folder and choose Send to -> Compressed (Zipped) folder.
    Note: This will create a zip file on your desktop, it should be named logs.zip
11. Upload the logs.zip file here

[Phone Man]

I have turned on the "Event Log Data" and will give it a try.

Earlier I had set the "Delay protection" to different times and if I go to 60 sec or more it seems to help.

Anything below that and the failures are more frequent.

Will do some more testing when I get some free time.

Jim  

[Phone Man]

Finally got a failure around 11:30 - 11:45 PM with Malware Protection OFF. But it started OK when I clicked on it in settings.

I will continue to test this weekend and see if it is OFF and won't start.

It is so intermittent.

Here is the Log files.

Jim

 

logs.zip

Edited March 10, 2017 by Phone Man

[Phone Man]

 As long as I set the delay protection to 60 sec all is fine.

I turned off the delay and crash city.

The 1st boot and Web Protection was off but I could turn on.

The 2nd boot and I got the Profile error but it worked after a log off.

This was around 11 AM CDT Monday 3/13.

I am running with Self Protection Early Start and 60 sec Delay and all is fine.

I will run it like that and see how it does.

Jim

logs.zip

Edited March 14, 2017 by Phone Man

[daman1]

I believe you said this is your test machine? I was just wondering are you running any other antivirus software? Could it be clashing with that?

[dcollins]

Thanks for the logs @Phone Man, I see some strangeness in the logs that I've passed along to our devs to take a look at. I'll let you know if we need more information

[Phone Man]

9 hours ago, daman1 said:

I believe you said this is your test machine? I was just wondering are you running any other antivirus software? Could it be clashing with that?

All my systems have run Norton Security  along with MB for years with no problems.

My test system is a laptop I use when I travel so I use it to test when at home.

Jim

[Phone Man]

3 hours ago, dcollins said:

Thanks for the logs @Phone Man, I see some strangeness in the logs that I've passed along to our devs to take a look at. I'll let you know if we need more information

Thanks Devin. I will run it with the 60 sec delay and see if I get anymore problems just to prove this "fix"

Jim

[Phone Man]

Windows 10 Update and then more problems.

After restarting and checking the system it all looked good.

On next restart Ransomware Protection did not start but it manually started OK. 7:40 PM CDT.

Next restart got the Profile Error and logout cleared that. 7:50 PM CDT

Next restart got the Profile Error again and logout cleared that. 10:45 PM CDT

Next restart was normal.

Waiting on next MB update, hope it fixes these intermittent problems.

Jim

logs.zip

Edited March 15, 2017 by Phone Man

[Phone Man]

I think I found my problem. I have been running Norton Security on this system. It was installed a while back and has had 4-5 version updates.

I had a few minor questions with NS and decided to remove it and do a clean install of the latest version and of course they just updated again yesterday.

MB 3 was looking good and so I went back to default boot with NO delay and no problems for 3 days. On occasion I see the MB icon shows the red X on boot but clears before I can look at it. Probably just waiting for all the protections to turn on.

I will wait until the next MB update and then try it on my other systems.

Jim

 

[Phone Man]

FORGET ABOUT IT

Back to a failure on boot this morning. Malware Protection was off and would not start.

Restart and it flashed the red X and then went blue.

Looking forward to next update and hope for the best.

Jim

[Porthos]

Did not read the whole thread but have you turned off self protection in MB and just leave it off?

Edited March 23, 2017 by Porthos

[Phone Man]

 I will try turning off Self Protection and see what happens as I wait for the next fix.

Jim

[Phone Man]

I have now moved to MB 3.0.6 CU4 Beta after removing MB 3 and clean install of this new Beta.

I am running Default Options with Scan for Rootkits ON.

Installed on 3/25 early afternoon. Its early but OK for now.

MB 3.0.6.1469

CP 1.0.96

Jim

[Phone Man]

Exploit Protection killed Firefox. It opens with a partial page with header and toolbars but just spins trying to access any page.

Turned off Exploit Protection for Firefox and it works.

I went back to CP 1.0.75 and no problem with Firefox.

Jim

 

Edited March 27, 2017 by Phone Man

[dcollins]

@Phone Man do you have any extensions or addons in firefox? I can't replicate this issue and would like to see if there's any compatibility concerns

[Phone Man]

First 2 are Extensions and last 3 are Plug-ins.

No problems with CP 1.0.75

 

[Phone Man]

I have gone back to 3.0.6 CU4 as it has less problems than CU3.

I deactivated my license, uninstalled through Widows, ran MB-clean.

Restarted Windows and installed and activated CU4. Did update and scan and then restarted Windows again.

The 1st time I tried Firefox it worked but after that it would hang.

Disabled all extensions and add-ons but did not help.

Turned off Exploit Protection for Firefox and it works fine.

Here is my log.

 

logs.zip

[dcollins]

What version of Firefox do you have?

[Phone Man]

2 hours ago, dcollins said:

What version of Firefox do you have?

I had 52.0.1 (32-bit) but updated yesterday to 52.0.2 (32-bit)

Jim

[Phone Man]

Found a workaround over in Norton Forum.

I am running NSBU 22.9.1.12 and they have in their Firewall an Exploit Prevention feature and turning it OFF clears the problem with Firefox.

I will leave it off in Norton and on in MB 3 to do more testing.

Jim

Edited March 31, 2017 by Phone Man