Unsolved
This post is more than 5 years old
3 Apprentice
•
15.6K Posts
0
41157
October 13th, 2014 15:00
Updates 10/13/14 - MBAM
Malwarebytes Anti-Malware (MBAM) 2.03.1025
This release is heavily focused on the fixing of bugs, accessibility and squashing new malware.
For the time being, in order to balance server load, we'll be throttling upgrades for existing Malwarebytes Anti-Malware users when they check for updates, but if you'd like to get the new version immediately, go right ahead and download it from https://www.malwarebytes.org/mwb-download/ and install it over your existing version.
The following has been copied/pasted from https://forums.malwarebytes.org/index.php?/topic/158652-malwarebytes-anti-malware-203-released/
New Features:
• Scans may now be set to run as lower priority processes to improve multi-tasking under Advanced Settings
• Added support for keyboard navigation of user interface
• Added support for JAWS and Windows Narrator screenreaders
Improvements:
• Malwarebytes Chameleon enhanced to be more effective against active malware infections in getting Malwarebytes Anti-Malware running
• Notification for outdated databases now configured to 7 days by default rather than 1 per user feedback
• All scans with Malwarebytes Anti-Malware now create an entry in protection logs
• Failed update checks are now logged in protection logs
• Updating Malwarebytes Anti-Malware should now function even when the Scan tab is awaiting action from the user
• Support for scanning encrypted drives improved when rootkit scanning is enabled
• Upgrading to new versions of Malwarebytes Anti-Malware should no longer prompt for a system restart
Issues Fixed:
• Google Chrome users should no longer experience Malwarebytes Anti-Malware getting stuck or hanging during heuristics scans with Malwarebytes Anti-Malware
• Scans should no longer hang during filesystem objects scan on some systems
• Several crashes in Malwarebytes Anti-Malware fixed
• Runtime errors during installation or upgrade of Malwarebytes Anti-Malware should no longer occur
• Rootkit scanning should no longer flag sectors on non-system volumes as forged when those volumes are encrypted
• Rootkit scanning should now work properly on Bitlocker encrypted drives
• Scanning TruCrypt encrypted system volumes with rootkit scanning disabled no longer results in the filesystem not being scanned
• Issue with repairing rootkit infected drivers on Windows 8 and Windows 8.1 fixed
• BSOD when using Driver Verifier software on a system running Malwarebytes Anti-Malware fixed
• BSOD when using Boxcryptor software fixed
• BSOD when using Malwarebytes Chameleon or self-protection in Malwarebytes Anti-Malware under certain conditions fixed
• Malwarebytes Anti-Malware should no longer crash when using the "Copy to Clipboard" function under certain circumstances
• Dashboard banner text should now reflect language changes in Malwarebytes Anti-Malware instantly
• Several issues with tray notifications fixed
• Display problems with some languages fixed
• Malware Exclusions and Web Exclusions should no longer display duplicate entries following database updates
• Occasional crash of MBAMService when upgrading from version 1.75 of Malwarebytes Anti-Malware should no longer occur
• Several issues with the right-click "Scan with Malwarebytes Anti-Malware” function fixed
• Several problems with access policies fixed
• Several UI performance issues fixed
• Several UI and user experience enhancements implemented
• More than one Malwarebytes Anti-Malware tray icon should no longer be displayed on system start under some circumstances
• Issue with Malicious Website Protection not enabling after install under some circumstances on Windows Vista fixed
• Minor display issues with tables within the UI fixed
=========================================
Remark: I have not (yet) personally downloaded/tested this new version.



ky331
3 Apprentice
•
15.6K Posts
0
October 13th, 2014 15:00
While I still haven't downloaded/tested the new version, I'd like to call attention to a change in behavior, which I believe is detrimental:
Under Settings/ Advanced Settings, there is an option:
Automatically quarantine detected items: When unchecked, any threats detected will not be quarantined immediately. A notification will instead be presented, and you must choose how to respond. If you do not respond within forty (40) seconds, the threat will be quarantined automatically.
In other words, the choice now is really between INSTANTANEOUS quarantining vs. DELAYED quarantining (unless user intervenes promptly) [rather than between "automatic" quarantining vs. MANUAL quarantining, as it had been].
The issue is being discussed/debated here: https://forums.malwarebytes.org/index.php?/topic/158478-auto-quarantine/
joe53
2 Intern
•
5.8K Posts
0
October 14th, 2014 01:00
Malicious Website Protection is not enabled, and cannot be enabled:
https://forums.malwarebytes.org/index.php?/topic/158692-malicious-website-protection-disabled/
Also I cannot run any Scans. I think this latest update is broke.
joe53
2 Intern
•
5.8K Posts
0
October 14th, 2014 02:00
joe53
2 Intern
•
5.8K Posts
1
October 14th, 2014 05:00
ky331
3 Apprentice
•
15.6K Posts
0
October 14th, 2014 05:00
This has been an issue, as reported in http://www.wilderssecurity.com/threads/malwarebytes-anti-malware-2-0-3-1025-released-today-october-13-2014.369193/
Quoting two key posts there:
From Marcin: "Hi guys, we're having issues with one of our CDN providers and the syncing with our origin servers. It's causing sync issues on the client as well. We're working as quickly as we can on this!"
From AdvancedSetup: "If you are receiving a message inside the MBAM program that Malicious Website Protection is disabled please do the following to correct the issue.
•On the Dashboard click "Update now" to get the latest database version
•Right click the Malwarebytes tray icon and click "Exit"
•Restart the Malwarebytes application from the programs menu or desktop shortcut.
•In most cases this resolves the issue, however if the issue still persists, reboot the computer and the issue should be resolved.
•If the above procedures still do not correct the issue for you then please download the MBAM installer http://www.malwarebytes.org/mwb-download/ and reinstall the program which will fix the issue for you."
ky331
3 Apprentice
•
15.6K Posts
0
October 14th, 2014 16:00
I don't believe this is an issue related to the new program version 2.0.3.1025... because I still have 2.0.2.1012, and am experiencing the same problem (Website protection disabled). I can click on the button to enable it on the Settings / Detection and Protection tab; and also, separately, by RIGHT-clicking on the MBAM icon in my system tray; and even doing both, the dashboard is still not acknowledging this.
So I would tend to hope it's a server/definitions issue, as had been asserted above. I have no plans to "mess-around" with what may turn out to be needless reinstallations.
By the way, having accessed the test website for protection, I can confirm the Malicious Website protection is indeed OFF, despite my having clicked both option locations to enable it.
ky331
3 Apprentice
•
15.6K Posts
0
October 14th, 2014 17:00
Marcin (or someone else from MBAM) offered a fix:
Delete (or just rename) the file C:\ProgramData\Malwarebytes\Malwarebytes Anti-Malware\RULES.REF
Exit and restart MBAM. (I opted for a reboot to do this).
The red warning is initially still there.
Open MBAM, to update its database.
Then enable Malicious Website Protection. It should "stick" this time.
Hopefully, this is a one-time fix that will survive reboots... time will tell.
joe53
2 Intern
•
5.8K Posts
0
October 14th, 2014 17:00
dalem29
2 Intern
•
2.2K Posts
0
October 14th, 2014 20:00
These steps worked for me....
•On the Dashboard click "Update now" to get the latest database version
•Right click the Malwarebytes tray icon and click "Exit"
•Restart the Malwarebytes application from the programs menu or desktop shortcut.
•In most cases this resolves the issue, however if the issue still persists, reboot the computer and the issue should be resolved.
Still on version 2.2012
ky331
3 Apprentice
•
15.6K Posts
0
October 16th, 2014 05:00
I was finally offered the program update on my win7 system, accepted it (keeping my fingers crossed), and all appears mostly well so far.
The only "issue" is that Delay Protection at Startup for 15 seconds [under Settings / Advanced Settings] is checked... and if you uncheck it, it will re-check itself (upon reboot). Some people are alleging the problem is merely in the GUI (Graphical User Interface), but not in the actual programming/running. If it is implementing the delay, I can't say I noticed it.
EDIT: for more information, see https://forums.malwarebytes.org/index.php?/topic/158699-malwarebytes-15-second-delay-on-startup-cannot-be-unchecked/page-2#entry890275
dalem29
2 Intern
•
2.2K Posts
0
October 20th, 2014 18:00
Finally got my download today, didn't notice any problems. I noticed the "scan for rootkits" box is not checked by default. Should I turn it on and run a scan?
ky331
3 Apprentice
•
15.6K Posts
0
October 21st, 2014 05:00
"Scan for rootkits utilizes a specific set of rules and tests to determine if a rootkit is present on your computer. For readers who unfamiliar with this term, an explanation may be handy. A rootkit is malicious software that can be placed on a computer which can modify operating system files in a manner that hides its presence. Malware detection methods that rely on hooks to the operating system for detection and analysis would prove ineffective if the hooks had been purposely manipulated by the malware. Our testing method is more intensive and more effective, but including rootkit scans as part of your overall scan strategy increases the time required to perform a scan."
Dale,
I guess it couldn't hurt to run a rootkit scan (once)... but if anything is actually found, you might want to consider inquiring about it (getting help) before removing it.
For what it's worth, I have the rootkit scan box checked.
I believe you have the paid version of MBAM? If so, you should have continual (real-time) protection. On that basis, I would NOT advocate "routine" scanning... rather, I would only scan if something seemed to be wrong on your system.
dalem29
2 Intern
•
2.2K Posts
0
October 21st, 2014 20:00
Bit of a problem here. Yesterday, I think I ran a scan with the rootkit scan enabled. Can't remember for sure, but the system froze and I had to do a manual shutdown. After restart worked fine. However, today, I noticed four items in quarantine...three of that Conduit pest and one of..xxx.Candy..something or other....
I suspect these are the same remnants that show up in Hitman Pro scans, and up till now, on no other scans. I went ahead and deleted them and started an easy scan, and walked away from the computer for a few minutes. When I got back I found a BSOD, but didn't write down the error code. So...hard shutdown and restart. Everything came back normally. I decided to see if the remnants would show up again, so ran one more quick scan.
This went normally except toward the end of the heuristic scan, when it froze with no BSOD. Tried the three finger restart and the screen then went black. One more hard shut down and restart. Everything seems to be working fine, but decided to quit trouble shooting for the night. Don't know if this has anything to do with the new version or not. Those malware remnants seem cause to no problems, so I just ignore them when I run Hitman Pro. AdwCleaner doesn't get rid of them.
ky331
3 Apprentice
•
15.6K Posts
0
October 22nd, 2014 08:00
Dale,
I just heard from Hernan (Iroc9555), and he's also reported a BSOD with MBAM:
https://forums.malwarebytes.org/index.php?/topic/158863-bsod-and-error-during-heuristic-analysis/
So far, I don't seem to be impacted, even running rootkit scans. (But in the back of my mind, I think it may have happened once, many months ago??? If so, it obviously wasn't with the same/current version.)
If you open MBAM, go to History, then Application Logs, you should see a list of your Scan Logs --- unless they were "lost" during the BSOD... so you can open it/them to see whether or not you had rootkit scanning enabled or disabled (lower left-hand box summarizing scan options). Hope this helps somewhat.
dalem29
2 Intern
•
2.2K Posts
0
October 22nd, 2014 12:00
Well...I did a regular scan without the rootkit option awhile ago. Everything went fine until 13:12 into the scan, then it quit counting. Highest object eached 255300. A bit before this happened my online radio went silent with the count at 254200 objects. I attempted to access its page to reset it but could not. Not sure of the key sequences I was doing, but after trying to go to Task Manager, the radio came back on and the count had reach the 255300. Then it all froze again, with the radio working when I had to do a hard shutdown and restart.
I had it start normally, then in a little bit the system wanted to do a ChkDsk. The results page went by too quickly to read, but it has started OK and is now running so I can type this. I'm gonna go browse the MBAM boards to see how many people beside IROC and me have had this problem. I suspect it is something in the new version, since the previous one worked fine.