ingber Posted April 12, 2017 ID:1116936 Share Posted April 12, 2017 On Win10 Creator x64 Pro, I uninstalled Bash/Ubuntu-14.04, and started installing Bash/Ubuntu-16.04. Part way through, MB3 blocked the install; I recall seeing that it did not like dpkg? I do not see any Quarantined stuff. As I do with Cygwin-setup and CCleaner, I will now have to do with WIn10-Bash, and turn off MBARW when using these tools. I attach logs. logs.7z Link to post Share on other sites More sharing options...
dcollins Posted April 12, 2017 ID:1116941 Share Posted April 12, 2017 Can you upload the log of what was blocked as well please? Link to post Share on other sites More sharing options...
ingber Posted April 12, 2017 Author ID:1116963 Share Posted April 12, 2017 1 hour ago, dcollins said: Can you upload the log of what was blocked as well please? Hi. I'm not sure if I have those logs. Uninstall/Install was performed using Win Powershell as Admin, e.g., lxrun /uninstall /full lxrun /install /y Link to post Share on other sites More sharing options...
dcollins Posted April 12, 2017 ID:1116968 Share Posted April 12, 2017 Did MB3 popup a warning saying it blocked something? If so, it should be under the Reports tab of MB3 Link to post Share on other sites More sharing options...
dcollins Posted April 12, 2017 ID:1116974 Share Posted April 12, 2017 Hm.... I just did you as described and wasn't able to reproduce the issue. I'll have to dig through your logs a little bit Link to post Share on other sites More sharing options...
ingber Posted April 13, 2017 Author ID:1117166 Share Posted April 13, 2017 Hi. Sorry, but I do not see any Report listed since 4/5/17 (which was an Exploit block of Adobe Reader). Lester Link to post Share on other sites More sharing options...
dcollins Posted April 13, 2017 ID:1117168 Share Posted April 13, 2017 Interesting, myself and a few other people have been unable to replicate this issue. Can you grab FRST logs by chance? Instructions for that are as follows: Download FRST and save it to your desktop Note: You need to run the version compatible with your system. You can check here if you're not sure if your computer is 32-bit or 64-bit Double-click to run and when the tool opens click Yes to the disclaimer Press Scan button This will product two files in the same location (directory) as FRST: FRST.txt and Addition.txt Attach both of these logs to your post by clicking on the "Drag files here to attach, or choose files..." or simply drag the files to the attachment area Link to post Share on other sites More sharing options...
ingber Posted April 13, 2017 Author ID:1117173 Share Posted April 13, 2017 32 minutes ago, dcollins said: Interesting, myself and a few other people have been unable to replicate this issue. Can you grab FRST logs by chance? Instructions for that are as follows: Download FRST and save it to your desktop Note: You need to run the version compatible with your system. You can check here if you're not sure if your computer is 32-bit or 64-bit Double-click to run and when the tool opens click Yes to the disclaimer Press Scan button This will product two files in the same location (directory) as FRST: FRST.txt and Addition.txt Attach both of these logs to your post by clicking on the "Drag files here to attach, or choose files..." or simply drag the files to the attachment area Hi. I'd rather not put any new software on my PC now. Note that the URL you gave does download FRST64.exe, but the video on installation is for Glasswire. I have no idea what else might be in error on that page? Link to post Share on other sites More sharing options...
Firefox Posted April 13, 2017 ID:1117175 Share Posted April 13, 2017 @ingber, this is no install needed for FRST so no worries about adding any extra software on your computer. HERE is a direct link to FRST64.exe... the video you saw was just advertising per say at the download site... Link to post Share on other sites More sharing options...
ingber Posted April 16, 2017 Author ID:1117690 Share Posted April 16, 2017 On 4/12/2017 at 2:31 PM, dcollins said: Hm.... I just did you as described and wasn't able to reproduce the issue. I'll have to dig through your logs a little bit Now at least one other user also has reported this: I see that there is a separate forum for Ransomware, https://forums.malwarebytes.com/forum/191-ransomware/ . This posting should be moved there where I see a couple of other similar postings re Ransomware blocking dpkg . Link to post Share on other sites More sharing options...
dcollins Posted April 16, 2017 ID:1117703 Share Posted April 16, 2017 It looks like one of our malware researchers is looking into whitelisting it. I'll move this post to that section as well. Link to post Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now