Kernel009 Posted September 13, 2018 ID:1269427 Share Posted September 13, 2018 We are having the same problem with random machines exhibiting high memory and sluggish/choppy operations. We have an open ticket as well. We have a mix of machines XP, 7 Pro 32 and 64 bit, and Win 10 Pro, Server 2003 on up to Server 2016. Just wanted to note that it's not an isolated incident. Link to post Share on other sites More sharing options...
WORKS2016 Posted September 16, 2018 ID:1269825 Share Posted September 16, 2018 Hi everyone, I just started rolling out Malwarebytes trials and this thread has me concerned for obvious reasons. I know you're busy finding a resolution and hope you don't mind me asking several questions? How long did Mbytes work prior? Does anyone feel installing MBytes on a server slows down network performance? Thank you in advance. Link to post Share on other sites More sharing options...
bbowman Posted September 17, 2018 ID:1269966 Share Posted September 17, 2018 23 hours ago, WORKS2016 said: Hi everyone, I just started rolling out Malwarebytes trials and this thread has me concerned for obvious reasons. I know you're busy finding a resolution and hope you don't mind me asking several questions? How long did Mbytes work prior? Does anyone feel installing MBytes on a server slows down network performance? Thank you in advance. I've had it deployed for about a year and a half and never had problems on a server until recently. Any issues I had before we always with workstations. Link to post Share on other sites More sharing options...
ShaunB Posted September 19, 2018 ID:1270368 Share Posted September 19, 2018 On 9/16/2018 at 10:54 AM, WORKS2016 said: Hi everyone, I just started rolling out Malwarebytes trials and this thread has me concerned for obvious reasons. I know you're busy finding a resolution and hope you don't mind me asking several questions? How long did Mbytes work prior? Does anyone feel installing MBytes on a server slows down network performance? Thank you in advance. We had it installed on servers. Until there was an issue where it pegged the CPU at 100% awhile back. Couldn't even remote to the machines. Decided then that we would keep it off anything that critical. Workstation performance has been on and off. Seems intermittent. However just today we had a user that said their machine was slow and unusable. We killed MB and performance was good again. (no scans running but MB was pegged at 25%) MB started back up right after and everything was fine. Link to post Share on other sites More sharing options...
mday Posted September 21, 2018 ID:1270715 Share Posted September 21, 2018 We just recently deploy to 280 endpoints. We are experiencing the same problem. It has been reported by our engineering department when using ArcGIS and InfoWater. When we uninstall the Malwarebytes client, performance goes back to normal. This is not a good experience for a new customer. Link to post Share on other sites More sharing options...
vbarytskyy Posted September 24, 2018 ID:1271233 Share Posted September 24, 2018 @Kernel009, @mday, @ShaunB, @WORKS2016, @bbowman Could you please follow the steps outlined in the below article: Thank you Link to post Share on other sites More sharing options...
ShaunB Posted September 24, 2018 ID:1271245 Share Posted September 24, 2018 We will do that next time it happens. Thanks Just to add to this however. We had a user this morning having the issue. They were getting slugish performance. (scrolling, copy/pasting/etc) We opened task manager and I didn't see high CPU. However MB service would jump to 25% or so for a few seconds when it would happen. As soon as they rebooted everything was fine. So hopefully this catches it. But might be more then just a CPU issue. Since for us... it is not even that high all the time. More like it is holding things up. Link to post Share on other sites More sharing options...
IT_Guy Posted September 26, 2018 ID:1271647 Share Posted September 26, 2018 Just to let you know, people have been complaining about this issue to MalwareBytes for over a year, you can check some of my old posts if they haven't been deleted. Either they don't care, or enough people aren't submitting tickets for them to figure it out and fix it, but this problem plagued our machines for the entire length of our subscription. Not one of the many updates they pushed out fixed it, in a few cases the updates actually broke the software requiring us to reinstall on dozens of machines. Good luck, but don't hold your breath. Link to post Share on other sites More sharing options...
Kernel009 Posted October 1, 2018 Author ID:1272715 Share Posted October 1, 2018 Just seeing this - we will try. We've also created a separate policy group where Behavioral Monitoring is disabled at the request of Support and are testing that as well. Link to post Share on other sites More sharing options...
TigerRisk-SI Posted October 9, 2018 ID:1274393 Share Posted October 9, 2018 On 9/24/2018 at 9:46 AM, vbarytskyy said: @Kernel009, @mday, @ShaunB, @WORKS2016, @bbowman Could you please follow the steps outlined in the below article: Thank you I have followed the above directions and sent you a PM. Link to post Share on other sites More sharing options...
Christopherfest Posted October 10, 2018 ID:1274681 Share Posted October 10, 2018 You aren't alone. We have this software deployed on 18 machines and have this issue at random. Rebooting always resolves it. (Mix of Windows 10 & 7) As mentioned above, this has been reported on the forums many times, so I'm sure its known and they are working on it Link to post Share on other sites More sharing options...
anyWARE-Mainz Posted October 11, 2018 ID:1274885 Share Posted October 11, 2018 Same here. About 80 Machines. Performance issues on servers and workstations. Not all the time, just sporadically. When it happens, servers do not react in a proper way and same for clients. Workaround: Restart mbam-service, but that's no solution. It looks like some kind of memory leak. Any suggestions? Link to post Share on other sites More sharing options...
ShaunB Posted October 11, 2018 ID:1274926 Share Posted October 11, 2018 3 hours ago, anyWARE-Mainz said: Same here. About 80 Machines. Performance issues on servers and workstations. Not all the time, just sporadically. When it happens, servers do not react in a proper way and same for clients. Workaround: Restart mbam-service, but that's no solution. It looks like some kind of memory leak. Any suggestions? Under your policies... disable "Behavior Protection". That is what we did, all problems went away. You can also add exclusions for the apps you run... but this was easier. When we hear it is fixed... we will turn back on. Link to post Share on other sites More sharing options...
Christopherfest Posted October 11, 2018 ID:1274980 Share Posted October 11, 2018 3 hours ago, ShaunB said: Under your policies... disable "Behavior Protection". That is what we did, all problems went away. You can also add exclusions for the apps you run... but this was easier. When we hear it is fixed... we will turn back on. I'm guessing that's the same as Behavior Monitoring which is a key security layer: Behavior Monitoring Detects and blocks ransomware via behavioral monitoring technology https://www.malwarebytes.com/why-us/ I wonder if a script restarting the service every hour would be a better workaround? I don't know. Have they owned the issue at least? Link to post Share on other sites More sharing options...
ShaunB Posted October 11, 2018 ID:1274984 Share Posted October 11, 2018 4 minutes ago, Christopherfest said: I'm guessing that's the same as Behavior Monitoring which is a key security layer: Behavior Monitoring Detects and blocks ransomware via behavioral monitoring technology https://www.malwarebytes.com/why-us/ I wonder if a script restarting the service every hour would be a better workaround? I don't know. Have they owned the issue at least? With it turned off it is basically like a simple anti virus application. And it depends solely on signatures I believe. Which is fine for us. Since every thing it has ever caught for us in the past... has been signature based. They are aware of the issue. When we submitted our performance data. They let us know they are working on it. Link to post Share on other sites More sharing options...
vbarytskyy Posted October 12, 2018 ID:1275014 Share Posted October 12, 2018 Hello, I would like to provide some updates on this subject-- On Oct 8th we started pushing out a hotfix to resolve the high resource usage issue. It is being metered and watched closely at the moment as an upgrade. For highly impacted machines, reinstalling Malwarebytes Endpoint Agent will force the machine to download the latest (hotfixed) version. For impacted servers, I would advise to remove the Malwarebytes Endpoint Agent and do a reboot first before reinstalling. Thank you very much for patience while our engineers worked hard to resolve the issue. A special thanks for the data provided by a few users that helped us identify the problem in the Behavior Protection layer. Thank you, Vlad B Link to post Share on other sites More sharing options...
TonyCummins Posted October 15, 2018 ID:1275582 Share Posted October 15, 2018 On 10/11/2018 at 6:24 PM, vbarytskyy said: Hello, I would like to provide some updates on this subject-- On Oct 8th we started pushing out a hotfix to resolve the high resource usage issue. It is being metered and watched closely at the moment as an upgrade. For highly impacted machines, reinstalling Malwarebytes Endpoint Agent will force the machine to download the latest (hotfixed) version. For impacted servers, I would advise to remove the Malwarebytes Endpoint Agent and do a reboot first before reinstalling. Thank you very much for patience while our engineers worked hard to resolve the issue. A special thanks for the data provided by a few users that helped us identify the problem in the Behavior Protection layer. Thank you, Vlad B How can i tell if the hotfix has been applied to my endpoints? Link to post Share on other sites More sharing options...
djacobson Posted October 15, 2018 ID:1275617 Share Posted October 15, 2018 You will see "Malwarebytes 3.6.1.2716" in add/remove programs and under the Software tab in the cloud portal. Link to post Share on other sites More sharing options...
TonyCummins Posted October 15, 2018 ID:1275620 Share Posted October 15, 2018 32 minutes ago, djacobson said: You will see "Malwarebytes 3.6.1.2716" in add/remove programs and under the Software tab in the cloud portal. Thanks ...so i ran a "check for updates" from cloud console and it completed successfully but still shows 3.5.1.2600 on my endpoints. Link to post Share on other sites More sharing options...
djacobson Posted October 15, 2018 ID:1275623 Share Posted October 15, 2018 Try using an asset scan instead. If it still shows the older one, it could be that it has not yet installed it, the update is currently metered. If you'd like to hurry it along, a reinstall will have it pull the newest plugin Link to post Share on other sites More sharing options...
TonyCummins Posted October 15, 2018 ID:1275626 Share Posted October 15, 2018 Thanks for the info, i was worried id have to manually reinstall every endpoint I can wait a bit longer for the update top reach my account. Link to post Share on other sites More sharing options...
anyWARE-Mainz Posted October 16, 2018 ID:1275763 Share Posted October 16, 2018 @djacobson So does it mean, that if the hotfix works (regarding the feedback you get), at a later time, the client gets updates automatically, if you release a new version? Link to post Share on other sites More sharing options...
djacobson Posted October 25, 2018 ID:1277567 Share Posted October 25, 2018 Yes, that's right. Link to post Share on other sites More sharing options...
TonyCummins Posted October 25, 2018 ID:1277573 Share Posted October 25, 2018 I got tired waiting on this to be pushed out (in the hopes it fixed the memory leak) i went and created a policy with no protection turned on. Moved the endpoints into that policy...ran a check for updates...it removed the old version...then i moved the endpoints back into the policy with protection enabled and it grabbed the 3.6.1.2716 version Link to post Share on other sites More sharing options...
Kernel009 Posted December 4, 2018 Author ID:1284948 Share Posted December 4, 2018 I have a report of at least 5 machines with this version 3.6.1.2716 where the machines take upwards of 30 minutes to boot up to a usable desktop. Sounds crazy, but the tech that is working the issue said with the services disabled the machines go back to the 90-120 second boot window. These are Win7 4-bit machines with 8+ GB of RAM. Anyone else seeing this? Unfortunately, ever since we installed the Endpoint Security this past summer we've had nothing but performance issues. We even have a few machines where the software will not install properly and there is no resolution as of yet and it's literally been months. Credibility of the solution is suffering. Link to post Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now