Malwarebytes for Mac 4.17 beta

[treed]

The beta has ended, and 4.17 is now released. Please note, though, that this does not - and cannot - fix the macOS Ventura bug that is mentioned in the important note below.

Thanks to everyone who provided feedback!

 

IMPORTANT NOTE:

If you have trouble with real-time protection on Ventura, this is not a bug in the beta. It is due to a bug in Ventura that is affecting ALL security products (not just Malwarebytes). More info and a fix can be found here:

https://forums.malwarebytes.com/topic/291428-ventura-causes-real-time-protection-to-turn-off/

Hi, all!

We've just released Malwarebytes for Mac version 4.17 in beta.

The primary change is the ability to install on macOS Ventura. If you have updated to Ventura, please try running this installer to make sure that it functions properly. (Note that we are aware of issues with the screenshots for granting Full Disk Access not matching the new System Settings on Ventura. This will be fixed in a future release... for now, we just needed to get this out ASAP.)

You can update to the beta within the app, with the Beta Application Updates feature turned on, or you can download the installer directly from here:

https://cdn.mwbsys.com/packages/mmac.installer.consumer/1/1/2/c/112cd1e5c53453535b1dcc163b15baaf/08ee079b-8bad-4cd9-b305-f3ee809086dd.pkg

Please reply here with any comments, questions, and problem reports!

BTW, I know it's been a while with few betas, but not to worry... we do have some cool stuff in the works! 🙂

 

 

Edited November 9, 2022 by treed
Corrected font issue

[ochompsky]

other than the incorrect screenshots, is real time protection supposed to work in this beta?  

[treed]

There is a bug in the release version of macOS Ventura that causes Full Disk Access for any security software to fail to work properly after the Ventura upgrade. This results in real-time protection being turned off, even though within System Settings it appears that Malwarebytes Protection actually has Full Disk Access.

For those affected, you can fix the issue by following these steps: open System Settings, click on Privacy & Security, then Full Disk Access.

1. Open the System Settings app
2. Click on Privacy & Security, then Full Disk Access (you should see something like the image below)
3. Click once on the Malwarebytes Protection item to select it
4. Click the minus (-) button at the bottom of the list to remove the item
5. Open Malwarebytes and attempt to turn on real-time protection
6. You will see a window guiding you through the process of giving Full Disk Access to Malwarebytes
7. Go back to System Settings and turn on Full Disk Access for Malwarebytes Protection, which will have been added back to the list

After you have done this, real-time protection should automatically turn back on, if it had been on before this happened. If it does not turn back on, in can be re-enabled within the Malwarebytes app.

Edited October 25, 2022 by treed

[1PW]

Hello @treed:

After successfully upgrading to Ventura, from Monterey, (with MB4 4.16.7.4745 already installed) on my 2021 MBP18.1 (Apple M1 Pro), notifications occurred regarding Full Disk Access for MB4. After spending a few fruitless moments trying to solve this, I downloaded/installed MB4 4.17.8.4831 but, the Full Disk Access notifications continued.

After reading the post of member @MaxLeopold and trying that fix, all was well. Reference: https://forums.malwarebytes.com/topic/289747-support-for-mac-os-ventura/?do=findComment&comment=1539109

After an initial threat scan was made that updated the updated MB4's cache, subsequent threat scans completed in eight (8) seconds as before the upgrade/update. Otherwise, all seems okay for now.

Thanks to the team for the Ventura compatibility beta.

 

[treed]

14 minutes ago, 1PW said:

Hello @treed:

After successfully upgrading to Ventura, from Monterey, (with MB4 4.16.7.4745 already installed) on my 2021 MBP18.1 (Apple M1 Pro), notifications occurred regarding Full Disk Access for MB4. After spending a few fruitless moments trying to solve this, I downloaded/installed MB4 4.17.8.4831 but, the Full Disk Access notifications continued.

Interesting... so, you were seeing the same problem on the older, non-beta version of MB4 on Ventura? That's definitely new behavior not observed with the Ventura betas. RTP worked just fine, as did FDA, on the betas I tested with. Thanks for the information! That may help track it down.

[mgw22]

thanks!!..all fixed now, back to 3 sec scan and fully protected. do we need to keep beta toggled?

[treed]

Just now, mgw22 said:

thanks!!..all fixed now, back to 3 sec scan and fully protected. do we need to keep beta toggled?

I'd advise it at this point, so you can get the next beta. Long term, it's up to you. Having that turned on does incur some risk, as seen here, but it also lets you get early access.

An alternative, if you want betas but don't want them installed automatically, would be to follow the beta forum, and then you can choose whether to manually install the beta or not.

[mgw22]

I as well had a non-beta version problem on my iMac and MacBook Pro....both new machines...

 

[noahbr]

Full Disk Access now enabled. Scans are wicked fast. Thanks for the update.

[1PW]

3 hours ago, treed said:

Interesting... so, you were seeing the same problem on the older, non-beta version of MB4 on Ventura?

Yes - that is correct.

[Massimiliano]

Installed the beta, after uninstallation, and followed the instructions (excluding

 

tccutil reset All

)

And everything is working properly

Thanks to all the team

[PretentiousFop]

Thank you, Thomas. That worked. JJP

[ochompsky]

will resetting tccutil also reset other apps which have been given permission? 

[PretentiousFop]

1 minute ago, ochompsky said:

will resetting tccutil also reset other apps which have been given permission? 

First follow the initial guidelines:

1. Right-click (control-click) the Malwarebytes Protection item and choose Show in Finder
2. A Finder window will appear. Make sure to keep that open, and switch back to System Settings
3. Click once on the Malwarebytes Protection item to select it
4. Click the minus (-) button at the bottom of the list to remove the item
5. Switch back to the Finder window showing an item named Malwarebytes Protection (and three other items)
6. Drag Malwarebytes Protection onto the Full Disk Access list in System Settings

For me after number 4, Malwarebytes temporarily disappeared from the Full Disk Access menu, and then (without even needing to proceed to number 5) it reappeared on the list toggled OFF. I then simply toggled it ON manually and all my problems disappeared. So, to recap, try the above before dealing with Terminal, you may not need to. JJP

[treed]

14 minutes ago, ochompsky said:

will resetting tccutil also reset other apps which have been given permission? 

It probably will, so try the first set of instructions first. Only use the tccutil reset instructions as a last resort.

(I say "probably" because tccutil reset All is not supposed to work anymore, due to the potential for abuse... but, for some reason, it works with this issue. There are definitely some weird Ventura bugs happening here.)

[ochompsky]

11 minutes ago, treed said:

It probably will, so try the first set of instructions first. Only use the tccutil reset instructions as a last resort.

(I say "probably" because tccutil reset All is not supposed to work anymore, due to the potential for abuse... but, for some reason, it works with this issue. There are definitely some weird Ventura bugs happening here.)

 

thanks that did the trick i probably missed something the first time.  

 

somehow, im not surprised by the bugs in ventura.  apple quality has gone downhill for a while now.

[treed]

Yeah, this is starting to look like entirely a Ventura issue. ESET has published a support article on their site addressing the same problem, with the same solution. I'll be confirming this with some other software, but if there are two entirely separate pieces of software having the same problem on Ventura, Occam's Razor says the simplest answer is probably correct: that the bug is in Ventura, not an identical bug in two other pieces of software.

[Agustina]

Hola! actualicé con ventura y ahora no puedo instalar bien malware, ya intenté todo lo que pusieron en este foro, me podrían ayudar? gracias!

[1PW]

Hola @Agustina and

¿Cuál es el error que se informa?

En su próxima respuesta, ¿puede adjuntar una captura de pantalla de Mac de la notificación de error?

Gracias.

Edited October 25, 2022 by 1PW

[Agustina]

Hola! el error es que ni malware ni el nod32 pueden proteger a la compu en su totalidad, me pide acceso al disco, yo voy a configuracion y trato de tildar la opción pero me rechaza la acción. Ya probé desinstalarlo y volverlo a instalar y tampoco funciona. Una imagen si figura tildado y en otra no.

[1PW]

Halo @Agustina:

Nos han dicho que ESET está experimentando una dificultad similar.

Antes de llevar el problema de la Mac a la gerencia senior de Malwarebytes, intente lo siguiente:

Mientras Malwarebytes para Mac aún está instalado, inicie la utilidad macOS Terminal.app y emita la siguiente línea de comando:

tccutil reset All

Informe al foro si el comando anterior resuelve los problemas de Mac.

Gracias.

[Agustina]

no lo resuelve al problema, sigue igual!

[1PW]

Halo @Agustina:

Solicitaré la asistencia de gestión senior de Malwarebytes.

Agradezco su cooperación hasta ahora.

Gracias.

Hello @treed:

Assistance at your level would be greatly appreciated. Perhaps English command line entries are not accepted on a system set to Spanish.

Thank you.

[brcd]

Up and running on Ventura. Thanks to Treed and others for the work around. 

[RGO]

Now I finally also applied the beta version directly, turned off the access as suggested and then added it again via the Malwarebytes program. But it seemed that I more or less just turned it on again in the Mac settings. Then the message on the icon directly was gone, and the search could be done!

So for some reason you must turn off + turn on this setting, to really make the Malwarebytes program understand that it IS turned on (as it was already earlier before the upload of Ventura, and also after the upload).