Not sure the application-blocking problem has been fixed after all

[alisp]

I thought the recent(ish) update had solved the problems I was having in getting applications such as Word and Adobe Reader to launch, but now I'm not so sure.  Malwarebytes told me it needed to update this afternoon, and I let it.  Since then, I tried multiple times to launch Adobe Reader, with no joy until I turned off Exploit Protection, which I hadn't had to do previously.  Computer has been on for 24 hours or more solid, if that makes any difference.  I haven't even got AVG installed at the moment because of the conflicts with MWB, so am getting the usual angsty MWB messages about being unable to contact the update server and the licence server because I won't let it go online, yet even when I try and launch the broadband I suspect it's blocking that, too.

I'm currently running Version 3.3.1.2183; component p.v. 1..0.236; update p.v. 1.0.3313, on Windows XP SP3

 

Oh, and now I've switched off Exploit Protection it freezes MWB at "Starting ..." when I try to switch it back on again!  Not good ...  

[vbarytskyy]

Hello @alisp

Could you try to download and install Malwarebytes 3 on top of your existing installation. If that fixes the problem with Exploit Protection not turning on, change the following setting to work around the Adobe Reader/Word issues. We are still working on a permanent fix.

1. Open MB3
2. Navigate to Settings -> Protection
3. Click Advanced Settings
4. Click the Advanced Memory Protection tab
5. The first row should be titled Malicious Return Address Protection, uncheck the box in this row under MS Office
6. Click Apply

If you still have problems beyond that, could you get us logs so we can take a look into the problem deeper? Check my signature for information on getting logs. Make sure to submit both MB-Check and FRST logs. 

 

Thank you

[alisp]

Okay, I've done 1-6 and will let you know if that doesn't sort things.  Will I need to do the same for Adobe Reader if that's still blocked?

I swear, you need a degree in software engineering to operate some of these programs these days!

[vbarytskyy]

18 minutes ago, alisp said:

Okay, I've done 1-6 and will let you know if that doesn't sort things.  Will I need to do the same for Adobe Reader if that's still blocked?

I swear, you need a degree in software engineering to operate some of these programs these days!

Yes, do the same for the "PDF Readers" category.

Thank you

[alisp]

Hi.  I have a problem.  Nothing is opening at the moment: Adobe Reader, Word, browsers, etc. despite my having done as in post no. 2, but I can't persuade FRST to do a scan. It just opens on "Backing up registry, this should take a few seconds ..." and hangs.  I've run the MB-check, and attach the results, but have no idea whether it's any use without FRST.

mb-check-results.zip

 

Oh, and I tried setting Exploit Protection to Off.  It didn't seem to react.

Edited November 27, 2017 by alisp

[alisp]

Am I imagining it, or did I see a setting in MWB which would allow me to switch it off temporarily, just so I could open/export things and then close it again?  I have 6 jobs here which should have been with the client an hour ago, and I can't open any of them to finish them off!

[vbarytskyy]

@alisp

• You should be able to right-click the Malwarebytes tray icon (by the clock), then select "Quit Malwarebytes" to stop it from running temporarily. 
• Also, when you get a moment, could you try running an installation of Malwarebytes over your existing installation to see if that fixes some of the problems. Let me know what kind of results you get after reinstalling on top of your existing installation and we'll take it from there. 
  • Download Here

Thank you 

[alisp]

22 hours ago, vbarytskyy said:

 

• Also, when you get a moment, could you try running an installation of Malwarebytes over your existing installation to see if that fixes some of the problems. Let me know what kind of results you get after reinstalling on top of your existing installation and we'll take it from there. 

I did that last time: it didn't make any difference that I could tell

The last time I did Quit Malwarebytes it got very upset: I think I couldn't get it to reinstate itself, or something.  Seems to be better this time. 

[alisp]

I'd been having similar problems again, so I went hunting for this thread.  I went into Malicious Return Address Protection and found the boxes had all been checked again.  I've unchecked, and will see if that makes any difference - and how long it lasts this time.

 

In the meantime, I've also dumped AVG completely, and installed a trial version of BitDefender Internet Security, so we'll see how that goes ... 

Edited February 8, 2018 by alisp

[alisp]

Okay, I'd just done the above when I posted: got one or two Adobe Reader documents opened, but within 20 minutes or so something was blocking them again.  Thus far, Word still behaving, but I don't know for how long.

[alisp]

I've been trying to make changes as advised to tabs within Anti-Exploit Settings.  Every time I do that (and, I think, click on Apply), nothing happens: the whole window just freezes and I have to shut it down via Task Manager.  There's a message saying that the program is waiting for a response from me, but I've no idea what that is!

Any suggestions welcome.  I'm running Windows XP SP3 on this one.  (FWIW, I was making changes to the Malicious Return Address Detection in particular)

[alisp]

And now it's blocking Firefox ESR and IE8 too.

[alisp]

I've just deactivated Premium and gone back to the free version.  What a surprise: all the things which weren't working suddenly are.

[Porthos]

@vbarytskyy