MBAMService triggers Windows Defender

[CortexVacua]

Hi guys,

after the last Windows update rolled out, I noticed that during the regular daily Malwarebytes scan Windows Defender went off. It seems to see MBAMService as a Trojan while it's doing its scan, but as soon as the Malwarebytes scan ends, the supposed threat just disappears from windows defender without any clarification as to why. I don't know if the integrity of my Malwarebytes installation has been compromised or if windows defender is now producing some false positives bc of the latest update. I managed to make a screenshot of the info windows defender spits out, when you click on the more info tab. I'd be glad to get some help.

 

 

[Malwarebytes]

***This is an automated reply***

Hi,

Thanks for posting in the Malwarebytes 3 Help forum.

 

If you are having technical issues with our Windows product, please do the following: 

Spoiler

If you haven’t already done so, please run the Malwarebytes Support Tool and then attach the logs in your next reply:

NOTE: The tools and the information obtained is safe and not harmful to your privacy or your computer, please allow the programs to run if blocked by your system.

• Download Malwarebytes Support Tool
• Once the file is downloaded, open your Downloads folder/location of the downloaded file
• Double-click mb-support-X.X.X.XXXX.exe to run the program
  • You may be prompted by User Account Control (UAC) to allow changes to be made to your computer. Click Yes to consent.
• Place a checkmark next to Accept License Agreement and click Next
• You will be presented with a page stating, "Welcome to the Malwarebytes Support Tool!"
• Click the Advanced Options link
  
• Click the Gather Logs button
  
• A progress bar will appear and the program will proceed to gather troubleshooting information from your computer
• Upon completion, click OK
• A file named mbst-grab-results.zip will be saved to your Desktop
• Please attach the file in your next reply. Click "Reveal Hidden Contents" below for details on how to attach a file:
  Spoiler

  To save attachments, please click the link as shown below. You can click and drag the files to this bar or you can click the choose files, then browse to where your files are located, select them and click the Open button.

  

   

  After posting your new post, make sure you click the Follow button near the top right of this page, and select the option "An email when new content is posted Change how the notification is sent" so that you're alerted by email when someone has replied to your post.

  

  

One of our experts will be able to assist you shortly.

 

If you are having licensing issues, please do the following: 

Spoiler

For any of these issues:

• Renewals
• Refunds (including double billing)
• Cancellations
• Update Billing Info
• Multiple Transactions
• Consumer Purchases
• Transaction Receipt

Please contact our support team at https://support.malwarebytes.com/community/consumer/pages/contact-us to get help

If you need help looking up your license details, please head here: https://support.malwarebytes.com/docs/DOC-1264 

 

Thanks in advance for your patience.

-The Malwarebytes Forum Team

[CortexVacua]

mbst-grab-results.zip

[plb4333]

4 hours ago, CortexVacua said:

mbst-grab-results.zip

I'm sure someone will come along to help you with this. I just wanted to say what I think is happening. The folder where that file was, the one file that was considered a flag for Defender, is where MBAM puts temporary files while its scanning your hard drive. So what Windows Defender found was a temp file in use by MBAM and if there a threat of malware or a likewise, MBAM would of no doubt caught it. So if MBAM didn't warn you about a malware, then its a safe bet that this temporary file was a false positive and was only a remnant of MBAM doing its job and putting that file there. On my computer, when there's a scan with MBAM, there's like 20 files in that same folder and then, when scan is over they're all gone. I wouldn't worry at all about what happened. I'm sure someone will offer assistance besides me tho

[dcollins]

The file being flagged is actually one used during our scanning. If a file looks to be a threat, but we need more research, it could get copied to that folder. that's what looks to be happening here. The file should get removed shortly