still issues with ace.dll

[wcutler]

malwarebytes still quarantining ace.dll.  Whats up?

[miekiemoes]

Hi,

Can you check/verify the database version from the affected Client? As this one might still have an older database version.

Thanks!

[wcutler]

here is the system logs

6/17/2019 10:12:52 AM    Anti-Malware    IP Protection started successfully
6/17/2019 10:12:52 AM    Anti-Malware    Starting IP protection
6/17/2019 10:12:52 AM    Anti-Malware    Database refreshed successfully
6/17/2019 10:12:48 AM    Anti-Malware    Database is upgraded to version v2019.06.17.08. Source: Management Server
6/17/2019 10:12:48 AM    Anti-Malware    IP Protection stopped successfully
6/17/2019 10:12:48 AM    Anti-Malware    Stopping IP protection
6/17/2019 10:12:48 AM    Anti-Malware    Starting database refresh
6/17/2019 7:52:06 AM    Anti-Malware    IP Protection started successfully
6/17/2019 7:52:05 AM    Anti-Malware    Starting IP protection
6/17/2019 7:52:05 AM    Anti-Malware    Database refreshed successfully
6/17/2019 7:52:02 AM    Anti-Malware    Database is upgraded to version v2019.06.17.07. Source: Management Server
6/17/2019 7:52:02 AM    Anti-Malware    IP Protection stopped successfully
6/17/2019 7:52:02 AM    Anti-Malware    Stopping IP protection
6/17/2019 7:52:02 AM    Anti-Malware    Starting database refresh
6/17/2019 5:26:18 AM    Anti-Malware    IP Protection started successfully
6/17/2019 5:26:18 AM    Anti-Malware    Starting IP protection
6/17/2019 5:26:18 AM    Anti-Malware    Database refreshed successfully
6/17/2019 5:26:14 AM    Anti-Malware    Database is upgraded to version v2019.06.17.06. Source: Management Server
6/17/2019 5:26:14 AM    Anti-Malware    IP Protection stopped successfully
6/17/2019 5:26:14 AM    Anti-Malware    Stopping IP protection
6/17/2019 5:26:14 AM    Anti-Malware    Starting database refresh
6/17/2019 4:36:00 AM    Anti-Malware    IP Protection started successfully
6/17/2019 4:36:00 AM    Anti-Malware    Starting IP protection
6/17/2019 4:36:00 AM    Anti-Malware    Database refreshed successfully
6/17/2019 4:35:56 AM    Anti-Malware    IP Protection stopped successfully
6/17/2019 4:35:56 AM    Anti-Malware    Stopping IP protection
6/17/2019 4:35:56 AM    Anti-Malware    Starting database refresh
6/17/2019 4:35:56 AM    Anti-Malware    Database is upgraded to version v2019.06.17.05. Source: Management Server
6/17/2019 2:25:17 AM    Anti-Malware    IP Protection started successfully

[miekiemoes]

Hi,

Is this the log from the affected endpoint itself? Because this was fixed in database version v2019.06.15.02 already.

Can you open the Malwarebytes user interface on the affected client and check there?

Alternatively, can you look in the same folder where you got this system log and get the scan log from that endpoint? This should show the exact detection and database version as well.

Edited June 17, 2019 by miekiemoes

[wcutler]

everything i am giving you is coming from the console which is matching up with whats on the client

[Atribune]

Could you please attach the entire log? Thank you.

[wcutler]

logs files from client

 

Logs.zip

[Atribune]

Could you please unquarantine the file ace.dll and upload a copy of it? As my colleague mentioned above this detection was fixed a couple days ago.

[wcutler]

attached is the file.  

I understand that you said it was fixed but it still happened today.

pc was on all weekend so it was getting the updates according to your logs

ACE.zip

[Atribune]

Thank you, I have scanned the file locally and it comes back as undetected.  Are you able to reboot the endpoint, update the client on the endpoint and rescan the machine?

Edited June 17, 2019 by Atribune

[KDawg]

We are able to confirm that should now be resolved on the latest database.

As well is should appear in the bottom Client Info tab when selecting that particular machine in the Clients list in you MB Console

It should be past the date coded DB Mieke posted above (v2019.06.15.02)

Please attempt a Reboot as well mentioned by Atribune

 

Let us know if issues persist after the reboot we would request the following logs we should be able to confirm that you are on the latest:
https://support.malwarebytes.com/docs/DOC-1072

Edited June 20, 2019 by KDawg