AntiRansome not compatible with firefox and firefox addon´s

[fritschi2]

Hallo,

i only wann inform that the latest beta is not compatible with firefox-settings and firefox-addons. With activated antiransomware no settingschance will be saved. Your software is blocking the changes in setting.

For example: i use group speeddial and wanna save some links in a group. first it looks fine but after close/open firefox all changes are gone - nothing saved. With disabled AntiRansomware everything works fine.

I dont know if the build in antiransomware in *only* the premium version of mbam has the same problem .

[tetonbob]

Greetings, @fritschi2 - welcome to the forum. We cannot reproduce this in house. Can you provide a little more detail as to the exact addons and steps you're performing to produce this issue?

Additionally,  I'd like to collect some diagnostic logs for review.

Create and obtain Farbar Recovery Scan Tool (FRST) logs

1. Download FRST and save it to your desktop
   Note: You need to run the version compatible with your system. You can check here if you're not sure if your computer is 32-bit or 64-bit
2. Double-click to run FRST and when the tool opens click "Yes" to the disclaimer
3. Press the "Scan" button
4. This will product two files in the same location (directory) as FRST: FRST.txt and Addition.txt

Please attach those files in reply.

Next, we need to gather additional information to assist with our analysis. arwlogs.exe is an information gathering tool that neither installs nor does it make system/registry hive changes.

1. Download the trusted, Malwarebytes authored arwlogs.exe utility/tool and save only to a system Administrator's desktop of the system in question.
2. Single right-click the   arwlogs.exe icon and select   Run as administrator from the Windows context menu.
3. If a Windows User Account Control (UAC) alert/prompt for arwlogs.exe appears, select the "Yes" button to continue.
4. If a Windows SmartScreen warning alert/prompt for arwlogs.exe appears, select "More info" then select the "Run anyway" button to continue.
5. A Command window will appear and its contents may be mostly ignored.
6. When "Press any key to continue . . . " appears at the bottom of the Command window, type any Enter key to close the window.
7. A zipped archive  (yyyy-mm-dd-{COMPUTERNAME}.zip) should have been generated to the system Administrator's desktop.
8. Attach the above-zipped archive to your next reply in this topic.
9. Delete   arwlogs.exe from the Administrator desktop.

I'll provide all this information to our developers.

Thank you.

[agi62]

Hello,
also I have the same problem on all  my PC with Windows 7 64 Ultimate, Firefox and Thunderbird don't save the preferences (file of the profile prefs.js) if Anti-Ransomware is active.

 

 

2018-01-23-AGIDONE-PC.zip

FRST.txt

Addition.txt

[tetonbob]

Hi @agi62 - Can you tell me exactly which settings in Firefox you are trying to save, but which do not save? I seem unable to reproduce this in Firefox, though we did reproduce similar behavior in Tor browser.

[agi62]

Hi,

all settings, I have noticed that the file "prefs.js" is not saved while if I disable Anti-Ransomware, the file is correctly saved.
The strange thing is that Anti-Ransomware doesn't tell that it is stopping the file.

The same thing is for Thunderbird.

 

Sorry for my bad english

Edited January 24, 2018 by agi62

[tetonbob]

Hi. There must be something different and specific in your environment or use case, because when I try on my live machines and VMs, I have yet to see an issue saving changes to settings in Firefox. We'll keep trying.

That being said, as I mentioned, we were able to reproduce a similar issue in Tor browser, for which we have implemented and tested a fix for the next MBARW release.

[agi62]

15 minutes ago, tetonbob said:

Hi. There must be something different and specific in your environment or use case, because when I try on my live machines and VMs, I have yet to see an issue saving changes to settings in Firefox. We'll keep trying.

Hi,

I don't know, I installed Windows 7 64 Ultimate in a new PC, the first time I installed MBARW, AVG Free and Firefox, nothing else, but in my old Windows 7 PC the issue is arrived recently, maybe a recently updating of firefox/thunderbird or MBARW?

[tetonbob]

It's quite possibly a change in one of the recent component updates to MBARW, either 1.1.119  or 1.1.129 which includes and adds to 1.1.119

[agi62]

Hi,

some days ago, thunderbird has taken back the correct operation and now save the options.
I don't know if thunderbird or MBARW  has been updated.

[tetonbob]

Interesting. There have been no component updates to MBARW since 1.1.129. We're still working on the next component update, expected to be released later this month.

[agi62]

Hi,
I am confused, now the only set that doesn't save yet is an additional component, "import export tools."
I have tried to insert the whole disk C: in the exclusions of MBARW but nothing doesn't change, instead if I disable the protection, the set is saved.

The mystery thickens him

[tetonbob]

Greetings, @fritschi2 and @agi62 -

We have released the next Component Update (CU) for Malwarebytes Anti-Ransomware Beta. One of the items fixed is the issue with the Tor browser I mentioned previously. While we were unable to reproduce the issue in Firefox, we have been able to reproduce a similar issue in Tor. That issue in Tor is now resolved in our testing. We believe it should also be resolved for you in Firefox.

You should receive the new CU 1.1.139 in the coming days. It's being served in a metered fashion.

Please let us know if your results match ours. We believe it should.

[agi62]

For now is all OK!!!!

Thank you very much, great work

[tetonbob]

Hi @agi62- Thanks for your feedback! I'm glad to hear all is well.