Jump to content

MBAMService.exe I/O to C:\ProgramData

Recommended Posts

I'm running Malwarebytes Premium update package 1.0.29281 component package 1.0.1025.

In Resource Monitor I see MBAMService.exe reading just about everything in C:\ProgramData and this goes on for an extended period of time.  There is no scan active, so what the heck is Malwarebytes doing?


Link to post
Share on other sites


Are any other processes showing a lot of activity in C:\ProgramData, or is it just Malwarebytes?  I ask because I suspect it may be the Ransomware Protection component analyzing some on disk activity (reads/writes/deletes etc.) from one or more other applications.  It is also possible that it is due to one of the recently introduced AI/Machine Learning/cloud components which will download updates from time to time to check for new/unknown threats and malicious activities; it writes and reads these databases and modules from a sub-folder of C:\ProgramData so that also might be a factor.  You also mentioned that no scan is active and I assume that also includes scheduled scans that run in the background, correct?  You can check based on the time that your scheduled scans are set to run to determine if this is the case.

Please let us know what you find and if there are any further issues.


Link to post
Share on other sites

On 8/31/2020 at 11:49 PM, exile360 said:

Please let us know what you find and if there are any further issues.

I have no scheduled scans.  I deleted the default one.  

The MBAMService.exe activity is all reads no writes and it looks like it is scanning everything (all folders) in C:\ProgramData.  The only other processes showing disk activity in the same timeframe are normal stuff done by System and Registry. 

I will try to provide a screenshot next time I see this happening.  There is certainly no application or background process writing to every folder in C:\ProgramData that MWB ransomware protection might want to analyze.



Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.