Latest Update breaks the "Run as Admin" setting for shortcuts on Win 8.1

[dprout69]

Just to chime in on this... I had the same problem about a week ago on Windows 10 Pro 1909.  Researched and never found any fix for it and ended up putting a system image back on from a month ago in order to fix it.  I had the biggest suspicion that it was Malwarebytes that was causing the issue, but never had any proof.  The reason I believe it was Malwarebytes is that I hadnt updated or installed anything in a couple of weeks and then noticed the issue shortly after I updated to the MB version right before 4.2.2.  So, I dont think it was related to 4.2.2, but was introduced right before that.  I'm currently running 4.2.1.89 (from a month ago) and the issue is not present.  There was another version right after this and then two versions of 4.2.2. so whatever changes were made in the version that was released between 4.2.1.89 and 4.2.2 might be the culprit.

[Zeus_Dog]

Yea I kind of noticed this problem for awhile where if I try to runas the command prompt it says I have no permissions, but runas anything else works. This is only on my non admin account. I run windows 7x64 sp1. I didn't think about  Malwarebutes until this artticle. I use Malwarebytes Anti-exploit stand alone version 1.13.1.288 and have at least some of this problem. So I played with the settings and found out if Penetration Testing is enabled then the runas problem exists. Uncheck it and it goes away. I had an Image that I reimaged with with an earlier version of MBAE, whatever was up to date as of 10-4-2020 and it also had this problem. Didn't think to try playing with Malwarebytes though it quickly updated itself to 1.13.1.288 anyways.

[AdvancedSetup]

In the case of our Exploitation Module stopping cmd runas it should be in the protection logs and it should pop up an alert showing that Malwarebytes blocked it. It should not be blocking it silently

 

[Zeus_Dog]

It didn't show any popups and nothing in the protection logs but I can consistantly reproduce it just by checking abd unchecking it.

[Zeus_Dog]

Actullay there is a windows error message popup that says the file or path is missing or you don't have permissions to use this but not a Malwarebytes one. I can just double click it and it opens, but doing runas it brings up the uac, lets me put in the admin password, then brings up the windows error message.

[AdvancedSetup]

Thank you. I've submitted to our internal team to see if they can reproduce this.

 

[Zeus_Dog]

Just for the heck of it I went and reset to defaults because I crank the settings all the way up and just enabled the the Penetration Testing option and it still has the runas issue. By the way I'll attach the error message.

[AdvancedSetup]

Yes, if we're blocking like that then it should be showing and logging. We'll open an internal ticket to have our team check into this further.

 

[ZeroSol]

Someone must have found the issue and fixed it.  I downloaded the Free trial of premium on a PC that's never had MWB installed this morning.  The software version that installed is 4.2.3.96 and Run as admin works normally.  The version with broken Run as Admin was 4.2.2.95.  That's pretty fast work.  

[AdvancedSetup]

For anyone still experiencing this issue please follow the directions in this article and upload your files so that we can review further.

Upload Malwarebytes Support Tool logs offline

Thank you

 

[Arthi]

Hi Zeus_Dog,

If you are still experiencing this issue when you turn ON penetration testing protection, can you please attach this log.

C:\ProgramData\Malwarebytes\MBAMService\logs\mbae-default.log

Thanks.