RubbeR DuckY

IMPORTANT: Web Blocking / RAM Usage

Recommended Posts

Original message (Jan 27, 2018):

Earlier this morning, we published a protection update that caused connection issues for many of our customers. As a side effect of the web protection blocks, the product also spiked memory usage and possibly caused a crash. We have triaged this issue and pushed a protection update that resolves it.

If the update does not resolve the issue automatically for you, please shut down web protection, check for protection updates, and restart your computer.

The root cause of the issue was a malformed protection update that the client couldn't process correctly. We have pushed upwards of 20,000 of these protection updates routinely. We test every single one before it goes out. We pride ourselves on the safety and accuracy of our detection engines. To say I am heartbroken is an understatement.

We are working hard to not only triage your issues and get your computer or business back up and running but to also rebuild your trust. We are going to overhaul how we publish these protection updates so that this never happens again.

I am personally available to discuss both on this forum via personal message or at mkleczynski@malwarebytes.com

Updated message (Feb 2, 2018): 

I have split my time over the last five days helping many of you resolve remaining issues due to this weekend’s incident and listening to your feedback. A key takeaway was the need for fuller documentation on how we intend to prevent incidents like this in the future. You can find a response from Malwarebytes Research and Engineering outlining that here. For a complete description and root cause analysis please click here.

Next week we will also be introducing a status page that indicates if Malwarebytes is having issues with any updates or with accessibility to any of our systems. The status page will be used to supplement customer communication, not replace it.

 

If you're in need of steps to remedy the issue, please go here:

 

Note: edits made by msherwood to adjust formatting and layout of Marcin's post.

Edited by msherwood

Share this post


Link to post

Looks like they just released an update that has resolved the Malicious Site filter module, though no official word from MBAM support just yet. Was on problematic database version: v2018.01.27.06 and just updated to v2018.01.27.12. The site blocking notifications ceased. Note - running the Enterprise version of MBAM.

Share this post


Link to post

I have MalwareBytes shut down. Will it update when shut down? I doubt it. If I start it, will the update happened right away?

Share this post


Link to post

yup it is fixed, i just downloaded an update and after mbam restart service is not melting my computer

Share this post


Link to post

Has the offending update been pulled? I have a few laptops that need to be booted, but not if the update gets pushed automatically.

 

Is there an ETA for the fix?

Share this post


Link to post

Now confirmed, remaining stable at a bit over 1% of total RAM.  Much appreciated.

Share this post


Link to post
3 minutes ago, Lunatic59 said:

Has the offending update been pulled? I have a few laptops that need to be booted, but not if the update gets pushed automatically.

 

Is there an ETA for the fix?

Restart Malwarebytes if it isn't already running, have it check for updates and download the new protection update.  Close it and have it relaunch - it should work, and if not, stop the service, close the program, restart the service and then launch again.

Share this post


Link to post

OMG! I have referred Malwarebytes and installed on several friends computers as well as mine, my phone is ringing off the hook. I uninstalled in order to use my Surface Pro, I am not sure I will reinstall at this point. Having said that, this has been my protection for many years without incidence and I am sorry this happened. I won't reinstall until I feel safe doing so.

Share this post


Link to post

Already pulled it from 5 laptops.  If I reinstall will this have the fixed code?

Share this post


Link to post

Its fixed now guys, just end the task and when it relaunches check for updates

Edited by blakeyo11

Share this post


Link to post

Have tried closing the program and it will not close.  Tried rebooting and same issues.  Will try to reboot again....  so do we need to uninstall or download the latest update? Couldn't connect to the servers from 3 computers a while agao.

Share this post


Link to post

Well done guys. Malwarebytes Service restarted and everything working for me again. :-)

Your product retains my confidence and I'm confident you'll learn from this incident. Here's hoping the rest of your day is much less eventful. 

Share this post


Link to post
Just now, Bob_b said:

Already pulled it from 5 laptops.  If I reinstall will this have the fixed code?

It may need to download the update (if the downloaded binaries don't include the latest yet), but the worst of it should just require a restart of MBAM once you've downloaded the update on a new install.

Share this post


Link to post

I just turned off web protection and no high memory usage. I have other software that takes care of website blocking

Share this post


Link to post

Hi, thanks for solving the issue quickly, ive had issues in the past but none have been handled as quickly as this one

id like to also apologies as i did slate the software in other threads but after reading your message made me understand that you aint as bad as i thought you were

id like to say it was just in the heat of the moment as i thought my system had been hacked but its just me jumping to conclusions

sorry again and thank you for the great work you put into the software it really does get noticed by myself and alot of other people 

Share this post


Link to post

New update fixed it. Thanks for the quick fix, and good luck with the overhaul!

Share this post


Link to post
10 minutes ago, RubbeR DuckY said:

The root cause of the issue was a malformed protection update that the client couldn't process correctly. We have pushed upwards of 20,000 of these protection updates routinely. We test every single one before it goes out. We pride ourselves on the safety and accuracy of our detection engines. To say I am heartbroken is an understatement.

His

Hi Marcin,

thanks for the timely update. Everything works fine again. Just out of curiosity. Do you think that this malformed protection is in any way related to the malformed protection ClamAV rolled out yesterday, which brought their scanner down?

Share this post


Link to post

IS it fixed now ? It seems quite serious and blocking our activities. In this moment I still have the issue. How long will it stay in this status ?

 

thanks

 

Brgds

Share this post


Link to post

Yep, it is fixed. I had to update, then quickly exit and reopen Malwarebytes.

Edited by ShadowMario3

Share this post


Link to post

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Recently Browsing   0 members

    No registered users viewing this page.