Kaspersky Total Security 2020 hangs with MBAM

[smipx013]

Hi,  I would just like to add my experience to this thread in the hope that it may assist some others.  I have been using MBAM Pro and (first Avast Free) then of late Kaspersky Free AV and just recently Kaspersky Security Cloud 2020.  I have noticed an issue with MBAM/KAS both running together and have tested extensively.  KAS version 20.0.14.1085(e) and MBAM version 3.8.3

Symptom:   Kaspersky 2020 Cloud recently updated from (d) to 20.0.14.1085(e) 

All was working well prior to this update to Kaspersky. 

I then noticed that when I launch and subsequently close either Outlook 2019 or Thunderbird 60.9.0 they remain in a zombie state when you look in task manager / process hacker / process explorer.  If you try to kill the outlook.exe or Thunderbird.exe they tell you that you cannot kill the process because they are exiting.  If you try to launch Outlook or Thunderbird again they do not launch.  The only way to get them to launch again is a full restart of Windows 10 (which takes a long time due to a handing process).

I tested with only Malwarebytes running - all good and working

I tested with a fresh install of KAS (after allowing KAS to remove MBAM) and all was well I then reinstalled MBAM, added licence and all hte exclusions and at first all was well.  At this stage KAS was still on release (d).  24 hours and a few reboots later KAS updated itself to (e) and the problems returned. 

I tested with and without Malwarebytes and without Malwarebytes, Kaspersky on (e) operates normally.   I found that as soon as Kaspersky decided to update its release from (d) to (e) then it all went wrong. 

The fix was to then reboot, uninstall Malwarebytes, reboot again - KAS is still on (e), install Malwarebytes again while KAS (e) was already installed, enter license key for MBAM, add all the exclusions again to MBAM and then it worked and played nicely with Kaspersky. I now have both running fine.

Hope this helps someone.  Sadly - Kaspersky updates itself every month or so from (a) to (b) to (c) etc. so this may be a process that is required at each upgrade of KAS which makes the two running in parallel fine for a techie like myself by not really practical for a novice/normal user.

 

Cheers,

Paul

 

[smipx013]

Actually - scratch all that.  One reboot later and it is playing up again.  Launch outlook - close outlook and outlook goes into a zombee state and cannot be run again until system is rebooted.

[smipx013]

More testing:

Disabled components of MBAM Web protection rebooted - still same problem

Then disabled Exploit protection - rebooted - still having the problem

Then diabled ALL MBAM modules, rebooted and outlook and thunderbird would exit normally.

------------------

re-anabled all MBAM modules then rebooted. 

I decided then to focus on Outlook and removed some of the Outlook Addins that I don't want/use (had to run outlook as Administrator to do this).

I removed:  "Microsoft sharepoint Server Colleague Import Add-in" and "Outlook Social connector Addin" and "Skype Meeting Addin for Microsoft Office"

Rebooted computer and now Outlook 2019 will shut properly with MBAM enabled and KAS enabled.

 

Curioser and curioser!!    I only add this in case some Malwarebytes staff may be interested as they may be able to put 2 + 2 together with the snippets above and make a conclusion as to the culprit here.

[smipx013]

It did not fix Thunderbird though.  I went into Thunderbird and removed some addins I had there (gcontactsync and another connector for hotmail) but despite this Thunderbird is still going zombie when it exits if MBAM modules are active with KAS active.

[coldone]

Still at work so I can't actually test much but I had sever problems with firefox, chrome, thunderbird 68 and other apps. Patch d was working perfectly fine. I had to remove kaspersky just to get the system working decently again.

[smipx013]

Hi,  Yes..   Looking at Kaspersky forums I can see some issues perhaps but - kasperskys community forums are all over the place and a bit of a mass (to say the least) .  I am in a holding position at the moment - MBAM is reverted to "Free" as I feel the Kaspersky protection is the most important.  As soon as Kaspersky fix their issues (assuming it is their issue to fix) then I will do some more testing. MBAM failing to operate may be another symptom of a bug in Kaspersky but for now.   with just Kaspersky enabled everything (so far) is behaving as it should (I think)  🙂

.

[PaulPaulsen]

Hi,

 

i have the same problems with Kaspersky Internet Security 2020 and the (e) updates. I have higher hopes that the Malwarebytes guys will respond to a problem caused by another software than over Kaspersky so im gonna post here too.

 

Ive done some testing - even with virtual machines (so not a hardware problem etc.). Everytime Kaspersky updates to version (e) i cannot start Firefox, Thunderbird and some other programs. Chrome seems to be running just fine...

 

I didnt test all the exclusions in both AVs. But i tested it with on/off settings of Malwarebytes (newest Version on Windows, Windows 10 Home running btw). With "Ransomware protection" off everything works fine. With on i have the same problems like the other guys here.

[Krusty]

4 hours ago, smipx013 said:

Hi,  I would just like to add my experience to this thread in the hope that it may assist some others.  I have been using MBAM Pro and (first Avast Free) then of late Kaspersky Free AV and just recently Kaspersky Security Cloud 2020.  I have noticed an issue with MBAM/KAS both running together and have tested extensively.  KAS version 20.0.14.1085(e) and MBAM version 3.8.3

Symptom:   Kaspersky 2020 Cloud recently updated from (d) to 20.0.14.1085(e) 

All was working well prior to this update to Kaspersky. 

I then noticed that when I launch and subsequently close either Outlook 2019 or Thunderbird 60.9.0 they remain in a zombie state when you look in task manager / process hacker / process explorer.  If you try to kill the outlook.exe or Thunderbird.exe they tell you that you cannot kill the process because they are exiting.  If you try to launch Outlook or Thunderbird again they do not launch.  The only way to get them to launch again is a full restart of Windows 10 (which takes a long time due to a handing process).

I tested with only Malwarebytes running - all good and working

I tested with a fresh install of KAS (after allowing KAS to remove MBAM) and all was well I then reinstalled MBAM, added licence and all hte exclusions and at first all was well.  At this stage KAS was still on release (d).  24 hours and a few reboots later KAS updated itself to (e) and the problems returned. 

I tested with and without Malwarebytes and without Malwarebytes, Kaspersky on (e) operates normally.   I found that as soon as Kaspersky decided to update its release from (d) to (e) then it all went wrong. 

The fix was to then reboot, uninstall Malwarebytes, reboot again - KAS is still on (e), install Malwarebytes again while KAS (e) was already installed, enter license key for MBAM, add all the exclusions again to MBAM and then it worked and played nicely with Kaspersky. I now have both running fine.

Hope this helps someone.  Sadly - Kaspersky updates itself every month or so from (a) to (b) to (c) etc. so this may be a process that is required at each upgrade of KAS which makes the two running in parallel fine for a techie like myself by not really practical for a novice/normal user.

 

Cheers,

Paul

 

I had a similar issue with Kaspersky Security Cloud Free.

https://www.wilderssecurity.com/threads/kaspersky-security-cloud-free.422089/page-2#post-2868484

Thankfully it was a recent installation of KSCF so restoring an image backup solved my problem.

[smipx013]

Its so annoying.

Avast Free / AVG are totally full of adverts

Bitdefender Free has no control whatsoever and caused mayhem on a couple of systems I tried it on (not this one I hasten to add)

Avira free is a resource hog (on some systems I tried).

Kaspersky Free (and Kaspersky full fat) seems to get good scores on the doors for detection, is light on resources, doesn't bombard you with adverts / con your elderly folk into paying for unwanted modules (Avast hang your heads in shame on that one).

Seems there is no "free" antivirus option left worth using any more.

[coldone]

Has someone tested by chance if it behaves in a similar manner with the new mbam 4.0 beta?

[DJDANY]

5 hours ago, coldone said:

Has someone tested by chance if it behaves in a similar manner with the new mbam 4.0 beta?

KTS 20 patch "e" not work now with Malwarebytes beta 4.0.3 !

Please staff make update !

[AdvancedSetup]

Thanks @smipx013

I've split your posts to a new topic. I've asked our internal team to take a look

 

[Unicore]

On 10/31/2019 at 11:35 AM, smipx013 said:

Seems there is no "free" antivirus option left worth using any more.

Windows 10 Defender.

[smipx013]

hmmm   Defender.  I know its improved of late but do I really trust Microsoft.  They are quite well known for introducing most of the vulnerabilities that the virus writers exploit. Most microsoft software is riddled with bugs (including no-doubt Defender).

I prefer to mix it up a bit.  That's why I insist on keeping MBAM pro with another AV 

I am testing Bitdefender Free at the moment and it seems to be pretty okay and it is (currently) working well with Malwarebytes.

Having said that I am not prepared to use Malwarebytes on its own either.   I am not alone on that one!

 

Cheers,

Paul

 

[DJDANY]

okay but now for those who have licenses for kaspersky total security and malwarebytes what to do ?

i not found any solution to work,kts patch "e" and malwarebytes beta or release ... I tried everything that was written ...

[smipx013]

Then I think the best course of action for you is to log a ticket with Malwarebytes as they have asked and they can then work with you to "fix" Malwarebytes to get past this problem.

You will need to gather and send them logs:

 

ie.  quote:  

If you haven’t already done so, please run the Malwarebytes Support Tool and then attach the logs in your next reply:

NOTE: The tools and the information obtained is safe and not harmful to your privacy or your computer, please allow the programs to run if blocked by your system.

1. Download Malwarebytes Support Tool
2. Once the file is downloaded, open your Downloads folder/location of the downloaded file
3. Double-click mb-support-X.X.X.XXXX.exe to run the program
   • You may be prompted by User Account Control (UAC) to allow changes to be made to your computer. Click Yes to consent.
4. Place a checkmark next to Accept License Agreement and click Next
5. You will be presented with a page stating, "Get Started!"
6. Click the Advanced tab on the left column
   
   
    
7. Click the Gather Logs button
   
   
    
8. A progress bar will appear and the program will proceed with getting logs from your computer
   
   
    
9. Upon completion, a file named mbst-grab-results.zip will be found on your Desktop. Click OK
   
   

[Maurice Naggar]

@smipx013    The OP  Gicahagi has his own thread.  I have posted several suggestions to that thread.  Plus just provided a new tip just now.

[Maurice Naggar]

On 10/31/2019 at 12:56 PM, coldone said:

Has someone tested by chance if it behaves in a similar manner with the new mbam 4.0 beta?

@coldone   & any other who have the latest Kaspersky 2020  and Malwarebytes Premium

If having issues with web browsers especially,  apply the following adjustment for a startup setting on the Malwarebytes service.

Set Malwarebytes Startup Type As Delayed-Auto

• Download mbamservice_delayed.reg using the link below:
  → https://malwarebytes.box.com/s/15jbt7tifcetlhcgmszzb6appbak56w4
• Right-click the Malwarebytes icon in your notification area (next to the system clock).
• Note: You may need to click the arrow to reveal the icon.
• Click Quit Malwarebytes followed by Yes if prompted by User Account Control.
•  
• Open your Downloads folder or location of the downloaded mbamservice_delayed.reg file.
• Double-click mbamservice_delayed.reg and click Run followed by Yes if prompted by User Account Control.
• Click Yes when prompted to continue.
• Click OK.

Once done, please restart the computer (not Shut down)

 

[LiquidTension]

Hi everyone,

We're aware of an issue between the latest patch update to Kaspersky products (patch e) and Ransomware Protection in Malwarebytes, causing certain applications to hang when both are running together. We're currently investigating this issue in an effort to determine if there is something we can on our side to address the issue. Thank you for your understanding.

For affected users, there are 3 workarounds available that are known to mitigate the issue:

• Method 1: Uninstall the Kaspersky product.
• Method 2: Exclude affected applications within Malwarebytes.
  • Add a folder exclusion for the application's installation folder (e.g. C:\Program Files (x86)\Google\Chrome\Application) or a file exclusion for the application's main executable file (e.g. C:\Program Files (x86)\Google\Chrome\Application\chrome.exe).
  • Malwarebytes version 4 steps: https://support.malwarebytes.com/docs/DOC-3543
  • Malwarebytes version 3 steps: https://support.malwarebytes.com/docs/DOC-1130
• Method 3: Disable Ransomware Protection in Malwarebytes.

Edited November 6, 2019 by LiquidTension

[alhazred]

The problems mentioned in this thread accurately summarises the problems I've been having this past week.  Applications processes not closing when the corresponding program is closed, and a complete inability to terminate said processes.  Uplay, Steam, Chrome, Firefox etc were some of the programs affected.

I decided to revert to an earlier system image that I wisely created after a fresh install of Windows and the problem went away.  Everything was fine until today, when the problem re-emerged, and the only thing I have done today is update Kaspersky Internet Security 2019 to Kaspersky Internet Security 2020 (Patch e).

I can confirm, in my case at least, that disabling Ransomware Protection solves the issue.

[Maurice Naggar]

Hi.

You mentioned ""Uplay, Steam, Chrome, Firefox etc were some of the programs affected"

I would like for you to make Trust Exclusions for each one of their  EXE ( executables)  into Kapersky section for trusted applications.

I also list below the settings of exclusions for the Malwarebytes executables.

Give all this a try.

{{   I have had to set Firefox & Palemoon browsers as trusted apps into Kaspersky .   I also set those 2 browsers'  EXE  files as exclusions in Malwarebytes > Detection History > Allow List  }}

 

The following is intended as a general how-to for setting trust exclusions in Kaspersky so that it treats Malwarebytes for Windows as a trusted application.

The starting point for doing that should be generally the same across different versions of Kaspersky.

 

Start ( open ) the Kaspersky application.

Look down on the first screen, look for and click on the gear icon  ( Settings )

 

On the Settings screen, click on “Additional”   from the list on the left.

 

Next, click on Threats and Exclusions from the list on the right-side pane.

On the following screen, look down the list

Click on “Specify trusted applications”

 

You will then see a screen like this

 

To get going, click the Add button

 

On next screen,

Click the box “Do not monitor application activity”   so that it has a check-mark

Click the line “Do not monitor the activity of child applications” so that it has a check-mark

 

 

click the Browse button

 

 

Once you clicked the Browse button, the objective is to guide this to where Malwarebytes for Windows is installed.

From the left-side pane navigation, pick C drive

Then click Program Files  to expand  & scroll down

Then click   Malwarebytes  to expand

Then  click Anti-Malware to expand.   Then focus on the EXE files to select each

Click on Assistant,exe  & click on the Open button to make that pick

You will be prompted by Kaspersky at each line, so click the Continue button to confirm  ( each )

 

Then repeat the same way for each of these as well

Malwarebytes_assistant.exe

Mbam.exe

MBAMInstallerService.exe

MBamPt.exe

MBAMService.exe

Mbamtray.exe

Mbamwow.exe

mbamWsc.exe

 

** NOTE **   This is where you can also specify the EXE files for those programs you have had issues where they do not appear when started;  or if they have had some startup issue.

 

Apply the adjustments.   When all done, click the X  on the upper top right of the window.

 

Go back to the Threats and Exclusions section of Kaspersky

Click on  “Manage Exclusions”

Click the Add button

On the next screen that shows “add new exclusion”  click the BROWSE button

Enter

C:\ProgramData\Malwarebytes

And click Add

 

Your screen should look like this

 

Click the upper most X button at top to close.

When done, close the Kasperky dialog windows.

 

 

 

[steve1717]

I have been using Malwarebytes 3 premium and Kaspersky Internet Security both 2019 (paid) and 2020 (paid) together with no problems until November 1, 2019.   Turned on computer on November 1, 2019 and something happened and spent many days since trying to find the problem.   Did a full image restore back to October 27 2019 and problems kept happening so something kept updating.   Main issues  1)  Steam crashes / freezes and will not download  2) Chrome opens but if closed will not reopen.    Bootstrapper.exe seems to be the main file crashing and blocking a system shut down.    Also unable to download from a non steam website Paradox Games.    Speed test says everything fine and can down load from other sites.

Today I was able to download from steam in safe mode  ( Windows 10 pro 64 bit ).    Next uninstalled Kaspersky and used windows defender.  Was able to download from Paradox site that was not working.   Next installed Bit Defender - no real change I think.    Next turned off Malwarebytes 3 premium and then steam would work and download.   Tried turning off each protection one at a time with Malwarebytes with no effect.  Had to be all off and Malwarebytes closed.

Conclusion  There seems to be something wrong with both Kaspersky and Malwarebytes that changed recently ( November 1 ? ) that is causing major problems with chrome, steam, and downloads from some sites.    Note I had exclusions in both Kaspersky and Malwarebytes for each other and for steam.

I hope any problems in Malwarebytes can be fixed because I really like it.   For now both Kaspersky and Malwarebytes are off and I am using trial of Bit Defender.    Have not tried Malwarebytes 4 and I did not know about it unless it auto updated from 3 to 4 without me knowing.

 

 

 

 

 

[1PW]

Hello @steve1717:

Please carefully read LiquidTension's #19 post above for the present status and workarounds available.

Thank you.

[AdvancedSetup]

@steve1717 Yes, there was a change. Kaspersky put out patch (e) that seems to have created some conflict.

 

We're aware of an issue between the latest patch update to Kaspersky products (patch e) and Ransomware Protection in Malwarebytes, causing certain applications to hang when both are running together. We're currently investigating this issue in an effort to determine if there is something we can on our side to address the issue. Thank you for your understanding.

For affected users, there are 3 workarounds available that are known to mitigate the issue:

• Method 1: Uninstall the Kaspersky product.
• Method 2: Exclude affected applications within Malwarebytes.
  • Add a folder exclusion for the application's installation folder (e.g. C:\Program Files (x86)\Google\Chrome\Application) or a file exclusion for the application's main executable file (e.g. C:\Program Files (x86)\Google\Chrome\Application\chrome.exe).
  • Malwarebytes version 4 steps: https://support.malwarebytes.com/docs/DOC-3543
  • Malwarebytes version 3 steps: https://support.malwarebytes.com/docs/DOC-1130
• Method 3: Disable Ransomware Protection in Malwarebytes.

 

Thank you

 

[alhazred]

Hello @Maurice Naggar  I would certainly perform the solutions you've suggested, but I've uninstalled KIS V.20.0.14.1085(e) and reinstalled V.19.0.0.1088(i), which at the time of writing has no problems.  I've analysed the processes of said programs and 

I'm unaware if the new MBAM V4 is affected by these issues as I haven't upgraded yet.  I am at least content that I've ascertained what is causing the problem now, as I've been on other forums trying to figure out if my PC was on its way out.