Jump to content

Anti exploit may not be working

Xauma95
 Share

Recommended Posts

Xauma95

Xauma95

Posted
Posted

I've always used process explorer to see if mbae64 or mbae is injected in my protected apps but with the lastest update if i try to search for mbae64.dll or mbae when my firefox or chrome or any other protected app is opened there is only one match and it is the MBAMService but there are no matches inside my firefox processes like before. Don't know if it is normal or it is not working propperly. I have the lastest update

Link to post
Share on other sites
  • Staff
Malwarebytes

Malwarebytes

Posted
  • Staff
Posted

***This is an automated reply***

Hi,

Thanks for posting in the Malwarebytes for Windows Help forum.

If you are having technical issues with our Windows product, please do the following:

Malwarebytes Support Tool - Advanced Options

This feature is designed for the following reasons:

  • For use when you are on the forums and need to provide logs for assistance
  • For use when you don't need or want to create a ticket with Malwarebytes
  • For use when you want to perform local troubleshooting on your own

How to use the Advanced Options:

Spoiler
  1. Download Malwarebytes Support Tool
  2. Double-click mb-support-X.X.X.XXXX.exe to run the program
    • You may be prompted by User Account Control (UAC) to allow changes to be made to your computer. Click Yes to consent.
  3. Place a checkmark next to Accept License Agreement and click Next
  4. Navigate to the Advanced tab
  5. The Advanced menu page contains four categories:
    • Gather Logs: Collects troubleshooting information from the computer. As part of this process, Farbar Recovery Scan Tool (FRST) is run to perform a complete diagnosis. The information is saved to a file on the Desktop named mbst-grab-results.zip and can be added as an email attachment or uploaded to a forum post to assist with troubleshooting the issue at hand.
    • Clean: Performs an automated uninstallation of all Malwarebytes products installed to the computer and prompts to install the latest version of Malwarebytes for Windows afterwards. The Premium license key is backed up and reinstated. All user configurations and other data are removed. This process requires a reboot.
    •  Repair System: Includes various system-related repairs in case a Windows service is not functioning correctly that Malwarebytes for Windows is dependent on. It is not recommended to use any Repair System options unless instructed by a Malwarebytes Support agent.
    • Anonymously help the community by providing usage and threat statistics: Unchecking this option will prevent Malwarebytes Support Tool from sending anonymous telemetry data on usage of the program.
  6. To provide logs for review click the Gather Logs button
  7. Upon completion, click OK
  8. A file named mbst-grab-results.zip will be saved to your Desktop
  9. Please attach the file in your next reply.
  10. To uninstall all Malwarebytes Products, click the Clean button.
  11. Click the Yes button to proceed. 
  12. Save all your work and click OK when you are ready to reboot.
  13. After the reboot, you will have the option to re-install the latest version of Malwarebytes for Windows.
  14. Select Yes to install Malwarebytes.
  15. Malwarebytes for Windows will open once the installation completes successfully.

Screenshots:

Spoiler
 
 
 
 
Spoiler

 

 

01.png

02.png

03.png

04.png

05.png

06.png

 

 

If you are having licensing issues, please do the following: 

Spoiler

For any of these issues:

  • Renewals
  • Refunds (including double billing)
  • Cancellations
  • Update Billing Info
  • Multiple Transactions
  • Consumer Purchases
  • Transaction Receipt

Please contact our support team at https://support.malwarebytes.com/hc/en-us/requests/new to get help

If you need help looking up your license details, please head here: Find my premium license key

 

 

Thanks in advance for your patience.

-The Malwarebytes Forum Team

Link to post
Share on other sites
LiquidTension

LiquidTension

Posted
Posted

Hello,

It's expected not to see the MBAE DLL injected into Google Chrome processes. Exploit Protection no longer injects into Google Chrome.
However, it should be injected into Firefox processes.

Could you restart the machine and confirm if you see the same behaviour or not?

If the MBAE DLL is still not being injected into Firefox processes, please do the following:

Link to post
Share on other sites
Xauma95

Xauma95

Posted
  • Author
Posted
2 hours ago, LiquidTension said:

Hello,

It's expected not to see the MBAE DLL injected into Google Chrome processes. Exploit Protection no longer injects into Google Chrome.
However, it should be injected into Firefox processes.

Could you restart the machine and confirm if you see the same behaviour or not?

If the MBAE DLL is still not being injected into Firefox processes, please do the following:

Ok, I did a restart and then mbam didn't open so i did an other one and then it worked and now i see the MBAE DLL on firefox

Link to post
Share on other sites
Xauma95

Xauma95

Posted
  • Author
Posted
1 hour ago, LiquidTension said:

Thanks for the update.

Could you provide the log file mentioned in my previous post please so we can look into why the issue initially occurred?

Thank you!

here you have, also one more note, today after finishing my scheduled scan i recieved an error message saying MBAMService stop working and then it restarted itself

mbst-grab-results.zip

Link to post
Share on other sites
Xauma95

Xauma95

Posted
  • Author
Posted
On 7/22/2020 at 5:05 PM, LiquidTension said:

Thanks for the update.

Could you provide the log file mentioned in my previous post please so we can look into why the issue initially occurred?

Thank you!

It happened again when mbam updated to the lastes component version and when i restarted de pc mbam didnt opened, i did 2 restarts and mabam didnt open so i shut down the pc and turned it on again and now it works, don't know whay is happening that, i couldn't even open the progran until the third attempt when i shut down the pc

Link to post
Share on other sites
Xauma95

Xauma95

Posted
  • Author
Posted
5 minutes ago, exile360 said:

It may be due to the fact that fast startup is enabled:

  


Fast Startup:                    On

 

Have you tried disabling it?  That feature has known compatibility problems with Malwarebytes as well as many other applications.  Instructions on doing so may be found here as well as here.

the thing is that it shouldn't affect when just restarting, right? When I shut down and turn on i was able to open the program but i wasn't after just restarting 2 times

Link to post
Share on other sites
exile360

exile360

Posted
Posted

I know there was an issue where the main UI would not open after installing it under some conditions, however I believe that issue was fixed in one of the more recent releases.  I'm not sure about the issue with mbae.dll, except that perhaps it just hadn't had the chance to hook into the processes because they were already in memory when it came online, though I don't know if that was the case or not on your system.

Link to post
Share on other sites
Xauma95

Xauma95

Posted
  • Author
Posted
6 minutes ago, exile360 said:

there was an issue where the main UI would not open after installing it under some conditions

yes, i've read about that and it is supposed to be fixed so i don't know why that happens to me. About the mbae.dll as im not an expert with computers so i also don't know why is that happening. I'm going to wait if some staff member can give me some advise and I'll be watching the mbam behavior on my computer

Link to post
Share on other sites
exile360

exile360

Posted
Posted

I would also suggest keeping track of the Malwarebytes version info if possible, so that you can verify which version and component update is having the issue on your system.  Obviously that's difficult when the UI won't open, but you can always run the Support Tool and have it gather logs then check the version info in the main mbst-check-results log file.

Link to post
Share on other sites
  • 2 weeks later...

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
 Share
Go to topic listing

  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.