Jump to content

Slow DNS resolution with potential to completely free system


pal1000
 Share

Recommended Posts

  • Replies 51
  • Created
  • Last Reply

Top Posters In This Topic

I know that the plural of anecdote is not evidence, but this exact issue has been plaguing me for months. I manage a few hundred client pcs and recently, some have been reporting very slow performance, not just DNS but also general program use. As soon as I remove MBAM- boom- like new again. I haven't personally experienced that, but I have experienced the abysmal DNS performance issues.

Link to post
Share on other sites

I'll quickly chime in here to say that since my original post of about 3 weeks ago I too have stopped MBAM from loading at start-up and everything has been fine with connectivity. I have manually started the program, updated and run a full system scan manually once every few days then immediately closed it and carried on as normal. Not exactly what we paid for, hopefully a real fix is coming.

Stay safe everybody!

Link to post
Share on other sites

  • 2 weeks later...

It doesn't fix it, I tried. As this issue can be caused by both malware and web protection, the symptoms vary depending on which of them or if both stop responding when Malwarebytes starts, DNS resolution issues being common theme and most noticeable, but they are just a part of the whole picture.

List of all symptoms I encountered so far, not all of them manifesting simultaneously:

- slow DNS resolution everywhere, probably caused by web protection;

- temporary slow DNS resolution in web browsers that goes away after a few minutes but it's permanent in other programs and returns in web browsers when restarting them and then goes away again, probably caused by malware protection;

- Windows security app takes minutes to display its contents, probably caused by malware protection;

- visual basic scripts executed from Command Prompt take minutes to run even if they have very low complexity, probably caused by either of these problematic protection modules (extra: it is impossible to get MSYS2 packages updates due to permanent connection time outs);

- Malwarebytes UI can no longer be opened after performing exactly 2 protection state switch operations via tray icon of any protection module(s), either same or distinct until Windows is restarted, if at least one of these problematic protection modules is acting up, with last protection state switch operation being unsaved and thus being lost and reverted on next Malwarebytes startup;

- Windows hangs to an empty black screen if currently signed in user logs out, probably caused by either of these problematic protection modules;

- if fast startup is enabled and it's not overridden by SHIFT key, Windows can hang during shutdown after display disconnect step  or next boot to a black screen and frozen mouse cursor, probably caused by either of these problematic protection modules;

- attempting to stop any of these symptoms by quitting Malwarebytes via tray icon or by stopping Malwarebytes Service from Microsoft Management Console Services snap-in results in Malwarebytes Service getting stuck stopping until Windows is restarted and the annoying symptoms not getting better, probably caused by either of these problematic protection modules.

 

Link to post
Share on other sites

  • Staff

Thank you for the additional details, however for any of the above items where you have not confirmed if/which module(s) is/are at fault, if you could verify and please do so it would be most appreciated, particularly since I do not believe Malwarebytes' QA have been able to replicate these issues yet.  I suppose the only way to verify would be to disable all other modules except for the one(s) being tested as the possible cause(s) of the issue in question, then determining if the issue still occurs, then restart the system and re-enable the other modules and then disable the problematic module(s) and test to verify that the issue does not occur with that particular component of protection disabled.

Specifically with regards to fast startup in Windows, I don't know if the issue is specific to just Malwarebytes as many applications and drivers have had problems with fast startup which is one reason we generally recommend users disable it (particularly since it does very little to speed up boot times if the system is installed on an SSD).  Information on how to disable fast startup can be found here as well as here.

Link to post
Share on other sites

I spent about an hour this morning trying to connect to the internet. It didn't occur to me that Malwarebyes could be the problem.  Is there a known issue with MBAM causing DNS errors and loss of internet connectivity?

Malwarebytes Version: 4.1.0.56

Component Version:    1.0.875

Update Package:           1.0.22398

Will try a few different things and see if what I experienced is related to the issue being discussed here.

In the mean time I wasn't able to get the support tool to provide the logs

Capture.JPG.5fa218b5c84006e83e64d1a2a87864f9.JPG

 

 

 

Link to post
Share on other sites

6 minutes ago, wildman424 said:

Is there a known issue with MBAM causing DNS errors and loss of internet connectivity?

Yes for some but not all.

Disabling Web Protection only is the usual fix.

7 minutes ago, wildman424 said:

In the mean time I wasn't able to get the support tool to provide the logs

Are you using any other security programs other than Malwarebytes?

Link to post
Share on other sites

3 hours ago, AdvancedSetup said:

If you've rebooted the computer and Internet access is working in general you should be able to create the logs from the MBST tool

 

I got stuck in a shutdown and restart loop there for a while, not sure what caused that! It didn't crash the system or anything, just randomly logged me out, shutdown and restarted. It did it 2 or 3 times when I was doing a reinstall.

I'm trying again to get those logs for you right now.  I haven't been able to reproduce the issue again, and i have uninstalled and reinstalled and updated 3 or 4 times. Give it a min, see if I can get those logs and I'll shutdown and restart again, now that I have v4.1.0.56  component version 1.0.867 installed again.

This component version 1.0.875 is the current beta correct?

Link to post
Share on other sites

Update 4/13/2020 22:57

As this issue can be caused by both malware and web protection, the symptoms vary depending on which of them or if both stop responding when Malwarebytes starts, DNS resolution issues being common theme and most noticeable, but they are just a part of the whole picture.

List of all symptoms I encountered so far, not all of them manifesting simultaneously:

- slow DNS resolution everywhere, probably caused by web protection;

- temporary slow DNS resolution in web browsers that goes away after a few minutes but it's permanent in other programs and returns in web browsers when restarting them and then goes away again, probably caused by malware protection;

- Windows security app takes minutes to display its contents, probably caused by malware protection;

- visual basic scripts executed from Command Prompt take minutes to run even if they have very low complexity, probably caused by either of these problematic protection modules (extra: it is impossible to get MSYS2 packages updates due to permanent connection time outs);

- Malwarebytes UI can no longer be opened after performing exactly 2 protection state switch operations via tray icon of any protection module(s), either same or distinct until Windows is restarted, if at least one of these problematic protection modules is acting up, with last protection state switch operation being unsaved and thus being lost and reverted on next Malwarebytes startup;

- Windows hangs to an empty black screen if currently signed in user logs out, probably caused by either of these problematic protection modules;

- if fast startup is enabled and it's not overridden by SHIFT key, Windows can hang on next boot to a black screen, probably caused by malware protection;

- if fast startup is enabled and it's not overridden by SHIFT key, Windows can hang during shutdown after display disconnect step  or next boot to a black screen and frozen mouse cursor, probably caused by either of these problematic protection modules;

- attempting to stop any of these symptoms by quitting Malwarebytes via tray icon or by stopping Malwarebytes Service from Microsoft Management Console Services snap-in results in Malwarebytes Service getting stuck stopping until Windows is restarted and the annoying symptoms not getting better, probably caused by either of these problematic protection modules.

 

Link to post
Share on other sites

Good news, I don't think it was Malwarebytes causing the issues I had this morning. I found some incorrect settings that I believe may have caused it. I will keep an eye on it over the next couple days and report back if it occurs again. I did notice that once I was online, it stayed online until I disabled the adapter using  "function key + F2". Then i had to fight with it to get online again. But I haven't been able to get it to happen again.

I still can not get the support tool to zip the logs. FRST runs fine though.

Link to post
Share on other sites

  • 2 weeks later...

I'm unsure of any DNS issues after the latest update, but I did have the MWAC.sys blue screen a handful of times. It has yet to occur again for a handful of days now, but I do not believe I changed anything manually after it occurred.

Currently on the 1.0.889 component package.

Link to post
Share on other sites

2 minutes ago, ITC23 said:

I'm unsure of any DNS issues after the latest update, but I did have the MWAC.sys blue screen a handful of times. It has yet to occur again for a handful of days now, but I do not believe I changed anything manually after it occurred.

Currently on the 1.0.889 component package.

The workaround is to keep web protection disabled until a working fix is released.

Link to post
Share on other sites

  • 4 weeks later...
  • tetonbob changed the title to Slow DNS resolution with potential to completely free system

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
 Share

  • Recently Browsing   0 members

    • No registered users viewing this page.

Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.