Piotr_G Posted July 31, 2019 ID:1326634 Share Posted July 31, 2019 (edited) Hello. I am representing the company named Mirillis. We are the developers of softwares like Action!, Monflo and Splash. Recently we have changed the code signature (to EV) and now auto update, which are downloaded from our servers, are blocked by Malwarebytes antivirus and won't start. You can download a test version here: http://downloads.mirillis.com/files/monflo_pc_1_6_2_setup.exe . The setup file is working ok when downloaded from web browser, but when downloaded by our application in the background it won't start and no message is shown. When we turn off Malwarebytes the updates work ok. We wish you can help us solve this issue by adding our new EV code signing certificate to white list. Best regards. Mirillis Team. Edited July 31, 2019 by AdvancedSetup Removed live hyperlink Link to post Share on other sites More sharing options...
Staff shadowwar Posted July 31, 2019 Staff ID:1326656 Share Posted July 31, 2019 (edited) Can you please run an update of your application with mbam running and then please provide this file so we can analyze what may be blocking? C:\ProgramData\Malwarebytes\MBAMService\logs\mbamservice.log Thanks This May have been automatically fixed yesterday possibly. But without the service log for me to see what is triggering i cant be sure. Edited July 31, 2019 by shadowwar Link to post Share on other sites More sharing options...
Piotr_G Posted July 31, 2019 Author ID:1326682 Share Posted July 31, 2019 Unfortunately there is nothing interesting in this log file regarding our files. Log file does not log anything when our setup file fail to start. We've found out that our file works fine when "Exploit protection" is disabled. Link to post Share on other sites More sharing options...
Staff shadowwar Posted July 31, 2019 Staff ID:1326726 Share Posted July 31, 2019 ok transferring this to exploit protection Link to post Share on other sites More sharing options...
sganesan Posted August 1, 2019 ID:1327126 Share Posted August 1, 2019 Hi Piotr_G, Can you please follow the below instructions (only steps 3, 4 and 5 are required) and get us logs from one of the affected machines. Thanks. Link to post Share on other sites More sharing options...
Piotr_G Posted August 2, 2019 Author ID:1327261 Share Posted August 2, 2019 Here are the logs. It definitely looks like our new EV code certificate casues the issue. mbst-grab-results.zip Link to post Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now