deaconb Posted April 27, 2017 ID:1120389 Share Posted April 27, 2017 For the past few weeks I've noticed that Firefox.exe does not terminate upon closing the browser and I've now connected the behavior to Malwarebytes. A bump on effect is that Firefox will not start a new instance until that old instance is killed via task manager. Malwarebytes Running Open Firefox Close Firefox Task manager shows Firefox.exe processor utilization drop to zero, but process is still running New instance of Firefox will start, but will not load UI Malwarebytes Not Running Open Firefox Close Firefox Task manager shows Firefox.exe terminating immediately New instances of Firefox start with no issues Quitting Malwarebytes during the Firefox session will correct the problem as well... bottom line, no Malwarebytes, Firefox terminates correctly. This happens each and every time I close Firefox with Malwarebytes running. Starting Firefox in safe mode does not correct the issue. Uninstall and reinstall of Firefox does not correct the issue. MB logs and MB check results attached. I'm not providing Farbar results. There is way too much sensitive data included, so I hope you can troubleshooot without it. Windows 10 1703 (OS 15063.138) Firefox 52.0.2 (32-bit) Malwarebytes 3.0.6.1469, Component 1.0.103, Update 1.0.1819 logs.zip MB-CheckResult.txt Link to post Share on other sites More sharing options...
Porthos Posted April 27, 2017 ID:1120393 Share Posted April 27, 2017 22 minutes ago, deaconb said: I'm not providing Farbar results. There is way too much sensitive data included, so I hope you can troubleshooot without it. I will alert @dcollins so you can send him the logs by PM. Link to post Share on other sites More sharing options...
deaconb Posted April 27, 2017 Author ID:1120420 Share Posted April 27, 2017 Farbar logs PM'd to @dcollins Link to post Share on other sites More sharing options...
Porthos Posted April 27, 2017 ID:1120426 Share Posted April 27, 2017 12 minutes ago, deaconb said: Farbar logs PM'd to @dcollins I would have waited till he asked for them if he needed them. But never the less you are in good hands. Link to post Share on other sites More sharing options...
dcollins Posted April 27, 2017 ID:1120430 Share Posted April 27, 2017 Interesting, I'm unable to replicate this. Can you try going into Settings -> Protection and turning off Exploit Protection to see if that solves the issue and let's Firefox close properly? Link to post Share on other sites More sharing options...
deaconb Posted April 27, 2017 Author ID:1120439 Share Posted April 27, 2017 Turning off Exploit Protection definitely fixes the issue. I can reproduce it reliably... EP on... Firefox doesn't terminate, EP off... everything is cool Link to post Share on other sites More sharing options...
dcollins Posted April 27, 2017 ID:1120464 Share Posted April 27, 2017 Ok, since you're on a 32-bit browser, this is most likely the issue that is already fixed in MBAE standalone. This fix will be implemented in to our next MB3 release shortly. If you want to confirm that this is the issue, you can follow the steps below: Backup your MB3 key (it's listed on the Settings -> My Account page) Uninstall MB3 Install the latest standalone MBAE from the following url: https://malwarebytes.box.com/s/1wfy1x2dbjud4bt6i5f97qm8v3wq19rf Verify that Firefox works properly with MBAE installed If that works, you can re-install MB3 and leave Firefox excluded until the fix is implemented into MB3. If that still doesn't work, please grab the MBAE logs from C:\ProgramData\Malwarebytes Anti-Exploit Link to post Share on other sites More sharing options...
deaconb Posted April 27, 2017 Author ID:1120485 Share Posted April 27, 2017 My consumer id/key doesn't seem to work with that version. Link to post Share on other sites More sharing options...
Porthos Posted April 27, 2017 ID:1120491 Share Posted April 27, 2017 13 minutes ago, deaconb said: My consumer id/key doesn't seem to work with that version. That standalone version is free I believe. No key needed. Link to post Share on other sites More sharing options...
dcollins Posted April 27, 2017 ID:1120494 Share Posted April 27, 2017 The standalone MBAE will protect browsers even in free mode, you just can't add custom shields and some other applications aren't protected Link to post Share on other sites More sharing options...
deaconb Posted April 27, 2017 Author ID:1120499 Share Posted April 27, 2017 This is what I get on install from the executable link you provided at https://malwarebytes.box.com/s/1wfy1x2dbjud4bt6i5f97qm8v3wq19rf I can't get past this key prompt without entering a key. Link to post Share on other sites More sharing options...
dcollins Posted April 27, 2017 ID:1120500 Share Posted April 27, 2017 D'oh! Someone changed the link on me. Try this one https://malwarebytes.box.com/s/6qtnpb6al8elx4edrzol0wabj21fzo38 Link to post Share on other sites More sharing options...
deaconb Posted April 27, 2017 Author ID:1120504 Share Posted April 27, 2017 Nope, same behavior, Firefox hangs on close unless I disable protection. Link to post Share on other sites More sharing options...
dcollins Posted April 27, 2017 ID:1120507 Share Posted April 27, 2017 Can you please grab your MBAE logs? Instructions for that are here: https://support.malwarebytes.com/customer/en/portal/articles/1833578-how-do-i-collect-the-product-logs-for-malwarebytes-anti-exploit-?b_id=6440 Link to post Share on other sites More sharing options...
deaconb Posted April 27, 2017 Author ID:1120509 Share Posted April 27, 2017 Malwarebytes Anti-Exploit.zip Link to post Share on other sites More sharing options...
dcollins Posted April 28, 2017 ID:1120660 Share Posted April 28, 2017 Thanks! Can you also provide a list of extensions/plugins you have in Firefox? Link to post Share on other sites More sharing options...
deaconb Posted April 28, 2017 Author ID:1120661 Share Posted April 28, 2017 There aren't many... I cleaned house when I reinstalled the browser. Also, this problem occurs even when running FF in safemode. Plugins OpenH264 Video Codec provided by Cisco Systems, Inc. Shockwave Flash 25.0 r0 Widevine Content Decryption Module Add-ons Video DownloadHelper Link to post Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now