Jump to content

Recommended Posts

MWB found 30 detections when I first ran it.  I quarantined those, uninstalled MWB, then reinstalled it.  When I ran the reinstalled version it again found 30 detections.  What does this mean?  It appears that MWB is not really doing anything or that my system has been compromised such that I wasn't even actually running MWB.  Any help that anyone can give would be greatly appreciated.  Thank you.  

Share this post


Link to post
Share on other sites

***This is an automated reply***

Hi,

Thanks for posting in the Malwarebytes for Windows Help forum.

 

If you are having technical issues with our Windows product, please do the following: 

Spoiler

If you haven’t already done so, please run the Malwarebytes Support Tool and then attach the logs in your next reply:

NOTE: The tools and the information obtained is safe and not harmful to your privacy or your computer, please allow the programs to run if blocked by your system.

  1. Download Malwarebytes Support Tool
  2. Once the file is downloaded, open your Downloads folder/location of the downloaded file
  3. Double-click mb-support-X.X.X.XXXX.exe to run the program
    • You may be prompted by User Account Control (UAC) to allow changes to be made to your computer. Click Yes to consent.
  4. Place a checkmark next to Accept License Agreement and click Next
  5. You will be presented with a page stating, "Get Started!"
  6. Click the Advanced tab on the left column

    mbst_get_started.jpg
     
  7. Click the Gather Logs button

    mbst_advanced_gather_logs.jpg
     
  8. A progress bar will appear and the program will proceed with getting logs from your computer

    mbst_getting_logs.jpg
     
  9. Upon completion, a file named mbst-grab-results.zip will be found on your Desktop. Click OK

    mbst_log_saved_desktop.jpg
     
  10. Please attach the file in your next reply. Before submitting your reply, be sure to enable "Notify me of replies" like so:

     notify me.jpeg  

Click "Reveal Hidden Contents" below for details on how to attach a file:
 

Spoiler

To save attachments, please click the link as shown below. You can click and drag the files to this bar or you can click the choose files, then browse to where your files are located, select them and click the Open button.

mb_attach.jpg.220985d559e943927cbe3c078b
 

One of our experts will be able to assist you shortly.

 

If you are having licensing issues, please do the following: 

Spoiler

For any of these issues:

  • Renewals
  • Refunds (including double billing)
  • Cancellations
  • Update Billing Info
  • Multiple Transactions
  • Consumer Purchases
  • Transaction Receipt

Please contact our support team at https://support.malwarebytes.com/hc/en-us/requests/new to get help

If you need help looking up your license details, please head here: https://support.malwarebytes.com/hc/en-us/articles/360038523934

 

 

Thanks in advance for your patience.

-The Malwarebytes Forum Team

 

Share this post


Link to post
Share on other sites
25 minutes ago, CMT said:

MWB found 30 detections when I first ran it.  I quarantined those, uninstalled MWB, then reinstalled it.  When I ran the reinstalled version it again found 30 detections.  What does this mean?  It appears that MWB is not really doing anything or that my system has been compromised such that I wasn't even actually running MWB.  Any help that anyone can give would be greatly appreciated.  Thank you.  

Were the detection's in Chrome? If so...

Please try following the instructions in this topic to see if it helps.  If the issue still persists after that then please read and follow the instructions in this topic and then create a new topic in our malware removal area by clicking here and one of our malware removal specialists will assist you in checking and clearing the system of any remaining threats.

Please let us know how it goes.

Thanks

Edited by Porthos

Share this post


Link to post
Share on other sites

Thanks Porthos.  That worked perfectly.  MalWareBytes should add that as a notification whenever you attempt to use their software.

Share this post


Link to post
Share on other sites
Just now, CMT said:

Thanks Porthos.  That worked perfectly.  MalWareBytes should add that as a notification whenever you attempt to use their software.

Your welcome. That issue is because sync automatically re-installs the bad files each time Chrome is run. That is why I do not recommend using sync in any browser.

Share this post


Link to post
Share on other sites

Yes, unfortunately it's not really an issue with Malwarebytes specifically.  Any AV/AM application (or anything else for that matter) that tries to remove anything installed in a browser like Chrome with the sync feature enabled will end up failing due to the sync function executing once the browser is run again, resulting in the previously removed items being reinstalled automatically.

Share this post


Link to post
Share on other sites

Yes, excile360, you are correct.  Still, some notification from the AV software would be useful for those who are not experts in the field.  Maybe it's just me, but the solution wasn't intuitive.  Obviously, though, now that I know what the problem was it makes complete sense.  However, given how frustrating and infuriating malware is to deal with, when someone doesn't  know they might be inclined to just badmouth the AV provider, -- in this case MalWareBytes -- which of course would be detrimental to their reputation.  

Share this post


Link to post
Share on other sites

Hi.  Be aware that Chrome browser is one of the hardest to clean up.  And Google's Sync  with Chrome feature makes it harder to clean on top of that.

Share this post


Link to post
Share on other sites
59 minutes ago, CMT said:

Yes, excile360, you are correct.  Still, some notification from the AV software would be useful for those who are not experts in the field.  Maybe it's just me, but the solution wasn't intuitive.

You're right, it isn't intuitive and such a solution may be possible (such as a notification or something when such detections are made, advising the user on what they need to do to disable sync etc.), though I've never seen any AV/AM software display such extra information/instructions under similar conditions with situations like this which require additional steps on the part of the user to deal with/remove.  I don't know if they will choose to implement it, however I will pass on the suggestion to the Product team that they consider providing the additional instructions/details on how to deal with Chrome and other browser detections where the sync feature might cause the detections to return, particularly if the same detections have been found on the system for 2 or more scans in a row, having already quarantined the threats from the previous scan(s), just to prevent it from being shown every time there are browser detections as it only matters if the sync feature in the browser is enabled.

Anyway, I'm glad everything is cleaned up and if there is anything else we might assist you with please let us know.

Thanks

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now

  • Recently Browsing   0 members

    No registered users viewing this page.

×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.