Malwarebytes v4 beta has blocked Firefox from running

[Gt-truth]

starting from this day , my Firefox web browser won’t lunch even though I had to double-clicking on the Firefox icon so many time to have the web browser to be opened . right click on the taskbar to open the task manager and I’ve seen the Firefox processes are running and Firefox still not opened but however I figure out that the Malwarebytes’s Exploit protection  is behind this problem as well and in meantime I can tell that this issue is first time happened to me when the Exploit protection module is getting in the way

for now . I had to click on Malwarebytes icon in the tray app/startup area to uncheck-marked off the Exploit protection in order to have Firefox opened right away after do so!

 

[Maurice Naggar]

Hi.

It may be that there was some hitch with Firefox  such that  a Windows RESTART would be a very good thing to do, as a first step.  Please do that.

 

next, it would be a good idea to gather logs.

Download Malwarebytes Support Tool
    
    
    Once the file is downloaded, open your Downloads folder/location of the downloaded file
    Double-click mb-support- 1.5.1.681.exe to run the report
        You may be prompted by User Account Control (UAC) to allow changes to be made to your computer. Click Yes to consent.
        
    Place a checkmark next to Accept License Agreement and click Next
    You will be presented with a page stating, "Get Started!"

    Do NOT use the button “Start repair” !
    Click the Advanced tab on the left column
    
    Click the Gather Logs button
    
    A progress bar will appear and the program will proceed with getting logs from your computer
   
    Upon completion, click a file named mbst-grab-results.zip will be saved to your Desktop. Click OK
    Please attach the ZIP file in your next reply.

 

Cheers.

[Gt-truth]

hi @Maurice Naggar

unfortunately . even MB support tool won’t be to opened .the mouse cursor is spinning and no GO! so I even had to turn the Ransomware protection module off and still no go . 

 

 

[Maurice Naggar]

If you can,  I am truly encouraging you to Restart the machine.   OR even, Power off the system.

wait about a minute.  Power ON   and watch Windows load up.

 

Second, thing run the Support tool and attach the ZIP report file.

Edited October 20, 2019 by Maurice Naggar

[Gt-truth]

sure I can !

I have not restart the device because I was having working on something . so the device has not been rebooted but it has been powered off and powered back on later time . now I can to run the MB support tool .

logs files is done .

[nikhils]

Hello @Gt-truth

were you also seeing the block with MB 3.8.3 or did this start only after upgrading to MB 4.0.2 ?

Also when you turn off Anti Exploit, everything looks fine right ?

Also when you get a chance please attach the support tool logs to this post.

Thank you.

[Gt-truth]

Hello @nikhils

38 minutes ago, nikhils said:

Hello @Gt-truth

were you also seeing the block with MB 3.8.3 or did this start only after upgrading to MB 4.0.2 ?

for the MB version 3.8.3 the answer is no I haven’t /never seen any blocks by the Exploit protection module since when the MB version 4 beta is release for testing and I haven’t use MB 3 back since now I have to use the MB v4 beta .https://forums.malwarebytes.com/topic/252550-malwareexploitagentgeneric-blocked/

38 minutes ago, nikhils said:

Also when you turn off Anti Exploit, everything looks fine right ?

  when I had to turn both the anti-exploit I then I was able to use the Firefox web-browser so yes everything there seems working alright !

a few minutes later the and anti-ransomware module is being to blocked of running MB support tool . but after a system powered off/on then I was able here to rerun the MB support tool as well .

38 minutes ago, nikhils said:

Also when you get a chance please attach the support tool logs to this post.

Thank you.

OK your welcome .

Edited October 21, 2019 by Gt-truth

[Maurice Naggar]

Hello @Gt-truth 

The support tool report shows this pc is running Malwarebytes version 4.0.2.44  in Premium mode.

I only see 1 event logged of a IP block.   It was on the 20th.  It was blocking   IP    "31.171.152.106"

 

The scheduled scan for today  makes mention of "threatName" : "Rogue.Link"

I am moving your Topic over to the Windows Malware Removal help sub-forum for one to one help.

By the way, it is evident that since the system was restarted, that Malwarebytes for Windows is working.

I am presuming that you are able to use Firefox and Edge browser  & that they work.   BUT please do confirm that they do/

[Gt-truth]

Hello  @Maurice Naggar

the Rogue link in the log file is a false positive by MB version 4 beta which is a software called Privacy Protector for Windows 10 by softorbits so its not a Rogue itself . see here 

 

and yes both Malwarebytes and the support are working fine now . if the problem return again then I will do let you know . and yes now I can to use any web-browsers .

Edited October 21, 2019 by Gt-truth

[Maurice Naggar]

You can set that item  ( the one that is a alleged false positive )  as a item to be excluded forever.

The mechanism should be very much identical on Version 4  as it was on version 3.8

Just do a manual scan and do a REVIEW   and look   over all details.

Then un-tick the box for the  line(s) that are for the items you wish to keep. Click Quarantine Selected. Click on button marked *Ignore always*
It takes the one run with this method to be done one time.

[Maurice Naggar]

I am aware that Staff folks have advised you that the tagging of Privacy Protector for Windows 10  will be removed.

From your most recent comments, you indicated Malwarebytes program is working normally.

Thank you for the status information.   I am marking the case for closure.

Best wishes.