Jump to content

MB prevents some programs updating

Recommended Posts

  • Staff

***This is an automated reply***


Thanks for posting in the Malwarebytes 3 Help forum.


If you are having technical issues with our Windows product, please do the following: 


If you haven’t already done so, please run the Malwarebytes Support Tool and then attach the logs in your next reply:

NOTE: The tools and the information obtained is safe and not harmful to your privacy or your computer, please allow the programs to run if blocked by your system.

  • Download Malwarebytes Support Tool
  • Once the file is downloaded, open your Downloads folder/location of the downloaded file
  • Double-click mb-support-X.X.X.XXXX.exe to run the program
    • You may be prompted by User Account Control (UAC) to allow changes to be made to your computer. Click Yes to consent.
  • Place a checkmark next to Accept License Agreement and click Next
  • You will be presented with a page stating, "Welcome to the Malwarebytes Support Tool!"
  • Click the Advanced Options link
    welcome mbst.png
  • Click the Gather Logs button
  • A progress bar will appear and the program will proceed to gather troubleshooting information from your computer
  • Upon completion, click OK
  • A file named mbst-grab-results.zip will be saved to your Desktop
  • Please attach the file in your next reply. Click "Reveal Hidden Contents" below for details on how to attach a file:

    To save attachments, please click the link as shown below. You can click and drag the files to this bar or you can click the choose files, then browse to where your files are located, select them and click the Open button.



    After posting your new post, make sure you click the Follow button near the top right of this page, and select the option "An email when new content is posted Change how the notification is sent" so that you're alerted by email when someone has replied to your post.



One of our experts will be able to assist you shortly.


If you are having licensing issues, please do the following: 


For any of these issues:

  • Renewals
  • Refunds (including double billing)
  • Cancellations
  • Update Billing Info
  • Multiple Transactions
  • Consumer Purchases
  • Transaction Receipt

Please contact our support team at https://support.malwarebytes.com/community/consumer/pages/contact-us to get help

If you need help looking up your license details, please head here: https://support.malwarebytes.com/docs/DOC-1264 


Thanks in advance for your patience.

-The Malwarebytes Forum Team

Link to post
Share on other sites

Yes, Malwarebytes 3.5.1 has been great for me until today when I tried to update KeePass and got the error shown in the attachment, KeePass installation failed consistently even when trying to over-install with the current version - closed Malwarebytes and was able to carry out the update without problem.

KeePass Installation Failure.JPG

Link to post
Share on other sites

I agree, something seems wrong with MBAM and other programs running their installers.  Today, my VPN service prompted me to update (I had been ignoring it for a few days).  It started up the MSI installer (minimal UI mode, where it just shows the progress bar dialog - no Next button clicking needed), and immediately my whole system came to a crawl.  I was trying to browse around in Windows Explorer, and it was super slow.  Eventually I was able to get Task Manager to open and saw the MBAM service taking a ton of CPU.  The MSI installer was still stuck at no progress for something like 10 minutes.  In Task Manager, I located MBAM service executable and killed it.  Immediately the MSI installer started working, and making progress. Then the MBAM service restarted itself, and I continued that start - kill - start - kill process of MBAM so that I could let the installer complete.  


Now that the installer completed, MBAM started itself, and system is working as it normally did.  Not sure what MBAB was doing, but it certainly was causing grief with the installer and general system health. 


MB, you have an issue with installers that needs fixing.  

Edited by mga
Link to post
Share on other sites

It sounds like the Ransomware Protection component may have been acting up.  It monitors processes and threads for write/move/delete/rename operations (among other things) to stop ransomware attacks in their tracks.  When an application, such as an installer, is performing these kinds of actions it's pretty normal to see some level of increased activity in MBAMService.exe because of this, but it shouldn't bring the system to a crawl like that or prevent a safe installer from completing its work.  My guess is that even though the Devs have done a lot in the recent few releases of Malwarebytes to improve the situation, the Ransomware Protection component still needs some work under certain conditions to prevent these kinds of issues.

If you see this kind of behavior again, try right-clicking the Malwarebytes tray icon and selecting Ransomware Protection: Enabled to turn it off and confirm if prompted by User Account Control.  If I'm right, then that should eliminate the problem and will indicate that the issue is indeed with Ransomware Protection.

Link to post
Share on other sites

I was just able to reproduce this on my personal machine, and the symptoms do align with Ransomware Protection causing the issue. Until we get this fixed, you should be able to toggle off Ransomware Protection when you run into the issue, then retry the update, and turn Ransomware Protection back on once completed. Thanks for the reports

Link to post
Share on other sites

I'm glad I found this topic, as I thought the problems I was having, was due to the Latest Win10 1803 update.

I too have had similar problems when updating Cyberfox (64bit) browser and Foxit PDF viewer (Free version). See Image for Cyberfox.  There was no problems manually installing the latest versions of software over the old.

I don't know if this is related, but I have also had a problem with a program called Essential PIM (See Image).  I cured this problem by deleting the log file that was causing the problem, again I don't know if this is a MB issue or an Essential PIM issue, as both were updated about the same time.


EssentialPIM Fail.png

Link to post
Share on other sites

On 5/14/2018 at 10:59 PM, dcollins said:

I was just able to reproduce this on my personal machine, and the symptoms do align with Ransomware Protection causing the issue. Until we get this fixed, you should be able to toggle off Ransomware Protection when you run into the issue, then retry the update, and turn Ransomware Protection back on once completed. Thanks for the reports

Thanks for the confirmation of the issue.  As it was happening, my attempts at interacting with the MalwareBytes system tray icon's toggle features were unsuccessful due to Windows being nearly unresponsive.  There was no UAC prompt when toggling settings off because Windows was being held up by MBAM.  Now when my system is fine and idle, I get the UAC prompts as I toggle the various MBAM settings in the system tray.  While a nice work around, in the middle of the incident, it isn't as easy/simple/viable solution as it sounds, thus my end-task was ultimately what got me through it.   

Link to post
Share on other sites

I don't remember noticing any loss of responsiveness on either of my PCs.

Also I was able to manually update KeePass V2 without any problem. I downloaded the new installer, saved it and then double clicked it.

As far as I remember Adobe Reader was also able to update itself from 18.011.20038 to 18.011.20040 without any problem on both PCs.

So it's kind of hit and miss what works and what fails.

Edited by bdg2
Link to post
Share on other sites

64 bit here as well. 

13 hours ago, tetonbob said:

Thanks all. We've been able to reproduce a couple of scenarios and our Developers are investigating.

We have no timeline for a fix at this point, as investigation has just begun. Thanks for your patience while we work towards a solution.


Let me know if I can provide any other logs or info to help resolve the problem. 

Link to post
Share on other sites

The latest CCleaner update also falls victim to this "bug".  Turning off the Ransomware Protection allowed the update to install successfully.

Submitted for your information.

Have a great day.


Link to post
Share on other sites

Confirming that Ransomware protection is the problem:

Skype for desktop downloaded an update last night. When I pressed the button to update an error message much like those described by others further up this thread appeared. The Retry button just made the message re-appear until I disabled Ransomware protection, then the Retry button allowed the update to complete correctly.

Link to post
Share on other sites

  • 2 weeks later...
  • Staff

I just wanted to update this topic. We've been able to reproduce this issue and have a fix in test. 

That solution is currently undergoing internal testing in our standalone Malwarebytes Anti-Ransomware (MBARW) product. The solution would first be released in MBARW before being integrated to Malwarebytes for Windows.

The problem is in the Anti-Ransomware component. If you disable it during those program upgrades, the issue should resolve.

Link to post
Share on other sites

  • 4 weeks later...

When can we expect this fix to be rolled out?  Programs such as OneDrive auto-update without my intervention (so I have no opportunity to temporarily halt  the ransomware component) and effectively deletes itself. So I now have to keep the ransomware component permanently disabled.


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.