Jump to content
cybot

MBAM file system level access denied

Recommended Posts

I have encountered an issue, that seems to be occurring when M$ makes an update to the NTFS file system (Such as the June 12, 2018—KB4284826 (Monthly Rollup) ) where the malwarebytes directory, )and even my ESET Smart security Premium directory) and their associated directories get set to where even an ADMIN user can not gain access to the files, or executables in the directory. Malwarebytes, in this condition will only partially function. the system tray is the only part that partially works. when the context menu for MBAM is brought up, bringing the cursor over the open MBAM option causes the context menu to close, and MBAM does not open. additionally, the MBAM shortcuts on the desktop, and with in the start menu show a generic program file icon, and when you attempt to open the program, windows gives an access denied message. attempting to change permissions on the directories and files used by MBAM fails with an access denied error.) uninstalling MBAM is not possible because access to the MBAM directory. additionally the directory where the MBAM logs are stored (C:\programdata\MALWAREBYTES\MBAMservice\) is locked as well.  the only recourse I have found is to drop to the recovery shell and manually delete the folders and then reinstall the programs (MBAM and Eset Smart Security Premium).

there have been a couple of updates from M$ since then, and the issue has not re-occurred. but it DOES reoccur when M$ makes an update to the filesystem. so this has happened a couple of times in total, with the last time being when I installed the update previously mentioned. I have monitored my system for any other irregularities, but none have happened. IS there any other way around this issue that I am missing for when it happens again?

Share this post


Link to post
Share on other sites

***This is an automated reply***

Hi,

Thanks for posting in the Malwarebytes 3 Help forum.

 

If you are having technical issues with our Windows product, please do the following: 

Spoiler

If you haven’t already done so, please run the Malwarebytes Support Tool and then attach the logs in your next reply:

NOTE: The tools and the information obtained is safe and not harmful to your privacy or your computer, please allow the programs to run if blocked by your system.

  • Download Malwarebytes Support Tool
  • Once the file is downloaded, open your Downloads folder/location of the downloaded file
  • Double-click mb-support-X.X.X.XXXX.exe to run the program
    • You may be prompted by User Account Control (UAC) to allow changes to be made to your computer. Click Yes to consent.
  • Place a checkmark next to Accept License Agreement and click Next
  • You will be presented with a page stating, "Welcome to the Malwarebytes Support Tool!"
  • Click the Advanced Options link

    welcome mbst.png
     
  • Click the Gather Logs button

    gatherlogs.png
     
  • A progress bar will appear and the program will proceed to gather troubleshooting information from your computer
  • Upon completion, click OK
  • A file named mbst-grab-results.zip will be saved to your Desktop
  • Please attach the file in your next reply. Before submitting your reply, be sure to enable "Notify me of replies" like so:

     notify me.jpeg  


    Click "Reveal Hidden Contents" below for details on how to attach a file:
     
    Spoiler

    To save attachments, please click the link as shown below. You can click and drag the files to this bar or you can click the choose files, then browse to where your files are located, select them and click the Open button.

    mb_attach.jpg.220985d559e943927cbe3c078b
     

One of our experts will be able to assist you shortly.

 

If you are having licensing issues, please do the following: 

Spoiler

For any of these issues:

  • Renewals
  • Refunds (including double billing)
  • Cancellations
  • Update Billing Info
  • Multiple Transactions
  • Consumer Purchases
  • Transaction Receipt

Please contact our support team at https://support.malwarebytes.com/community/consumer/pages/contact-us to get help

If you need help looking up your license details, please head here: https://support.malwarebytes.com/docs/DOC-1264 

 

Thanks in advance for your patience.

-The Malwarebytes Forum Team

Share this post


Link to post
Share on other sites

Greetings,

If this occurs again, try disabling Self-Protection in Malwarebytes if you are able (or perhaps keep it disabled to see if it makes any difference the next time the problem occurs, assuming it still happens to ESET providing evidence that it would have happened to Malwarebytes as well).  I don't know if it will resolve it completely, but it may at least make it easier to deal with because the self-protection driver prevents other programs from altering the files, folders and processes that belong to Malwarebytes so it could actually be getting in your way when you are attempting to correct permissions or uninstall it.

You can also try running the Malwarebytes Support Tool mentioned in the above automated reply and try using the Clean option to see if that allows you to remove/reinstall it when this occurs:

  1. Download and run the Malwarebytes Support Tool
  2. Accept the EULA and click Advanced Options on the main page (not Get Started)
  3. Click the Clean button, and allow it to restart your system and then reinstall Malwarebytes, either by allowing the tool to do so when it offers to on restart, or by downloading and installing the latest version from here

With all of that said, I've never heard of this issue before and haven't seen it on any of my own systems so there might be something anomalous with your system which causes these MS updates to create these problems with permissions.  It might be worthwhile to contact Microsoft Support and see if they have any ideas as they may have encountered it before and may have a fix for it.

Share this post


Link to post
Share on other sites

ok, thanks. I did not think the self protection would still block stuff even if the program was not running. when this problem occurred, I could not even bring up the full MBAM program, and was instead greeted by the access denied dialog when I tried to open it. I don't think the support tool was out yet when I had the issue, but I will definitely give it a try when it next happens. as for contacting support, M$ seems to be trying it darnedest  to obliterate any support features and articles for previous versions of their operating system from their support site. unfortunately, this now includes windows 7. I will be going back to windows 10 eventually, so I will see if the problem re-occurs there as well.

 

I don't know why they are trying so hard to get rid of the old support stuff. I have an old WinMe system and an old MS-DOS system I maintain (for old games) that I frequently used the old support articles for. Now looking at those seems to be impossible. maybe I was the only one that frequently looked at support KB's for MS-DOS 6.22/Win 3.1 and WinME?

Edited by cybot

Share this post


Link to post
Share on other sites

Microsoft is trying really hard to force everyone onto Windows 10 in every way they can which is why, for the first time since I started using Windows, MS has been removing articles from their support site and technical documentation.  It's just one of the many ways they're trying to not so subtly let everyone know that they are only interested in supporting Windows 10.

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now

  • Recently Browsing   0 members

    No registered users viewing this page.

×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.