Malwarebytes 4.4

Malwarebytes community, a new version of your product has been released: 4.4.0.117 component package 1.0.1308

As usual, if you don't want to wait for the 'Update Available' notification, go right ahead and retrieve the update manually by clicking "Check for updates" in Settings > General.

What’s New in 4.4:

  • Reduced redundancy for Web Blocks when integrated with Browser Guard
  • Teams Browser Guard tooltip
  • Enhancements for streamlining the WSC integration 
  • Enhanced update functionality
  • Improved detection and remediation     
  • Improved performance

Some Issues now addressed:

  • Fixed: Issue seen after installer upgrade where mbamservice not updated
  • Fixed: We leave crash dump files on disk after uninstall of MBAM
  • Fixed: Not able to uninstall MBAM in Safe Mode under certain circumstances
  • Fixed: MBAM UI is slow to open
  • Fixed: Several UI issues

Thank you so much.

-Erix

https://forums.malwarebytes.com/topic/274681-malwarebytes-44/?do=findComment&comment=1459055 

huwyngr:

... I have the free version and I've just updated it but before I did the first screen that comes up when I first started the unupdated version has a notice about Security and this displays a list of Security Issues and what they can turn on to protect me.

Are these part of MWB  or have they picked up settings in Norton that are not enabled?

Hi huwyngr:

Let us know if there's any particular section of Security Advisor that you have concerns about.  Keep in mind that Security Advisor is a relatively new feature and bugs are still being fixed. For example, the latest version v4.4.11 is supposed to fix a bug in previous Malwarebytes versions where Security Advisor would indicate that the Firewall was off immediately after boot-up on some systems.

My primary antivirus is Microsoft Defender and my Malwarebytes Premium runs in real-time protection mode (Security | Windows Security Center | Always Register Malwarebytes in the Windows Security Center is OFF) so I'm not sure what the Real-Time Protection section of Security Advisor is supposed to look like in Malwarebytes Free.  However, I assume that Security Advisor in Malwarebytes only reports the status of the real-time protection modules in Malwarebytes Premium (i.e., I don't think Malwarebytes Security Advisor would warn you if Exploit Protection was disabled in Norton at Settings | Exploit Protection).  Here's what Security Advisor shows if I temporarily turn off Ransomware Protection in my Malwarebytes Premium settings:

As Krusty13 noted <above>, I think the General Settings section of Malwarebytes Security Advisor is just reporting the same status detected by Windows at Settings | Update & Security | Windows Security | Open Windows Security (or right-click the Windows Security icon in the system tray and choose View Security Dashboard). I assume the Malwarebytes Security Advisor should report your Firewall and WiFi connection are fully protected as long as the corresponding Firewall & Network Protection tile on the Windows Security dashboard has a green checkmark (i.e., No Action Needed) .


----------------
64-bit Win 10 Pro v21H1 build 19043.1348 * Firefox v94.0.1 * Microsoft Defender v.4.18.2110.6-1.1.18700.4 * Malwarebytes Premium v4.4.11.149-1.0.1513
Dell Inspiron 15 5584, Intel i5-8265U CPU, 8 GB RAM, 256 GB Toshiba KBG40ZNS256G NVMe SSD, Intel UHD Graphics 620

Krusty13:

Hugh, I think MB just reports what Windows Security Center itself is reporting.

Hmmm -- I thought I'd disabled that <g>

Hugh, I think MB just reports what Windows Security Center itself is reporting.

Thanks -- I don't mind their warnings but my question:

Are these part of MWB  or have they picked up settings in Norton that are not enabled?

Meant does MWB use its own tools to check or does it know I have Norton installed and use its tool?

huwyngr:

... I have the free version and I've just updated it but before I did the first screen that comes up when I first started the unupdated version has a notice about Security and this displays a list of Security Issues and what they can turn on to protect me.

Are these part of MWB  or have they picked up settings in Norton that are not enabled?

Hi huwyngr:

I think you're referring to the new Security Advisor warnings that were added to the main dashboard of Malwarebytes v4.4.10 (see the release notes <above>). Click on the View Details link on the main dashboard and you should see warning if Security Advisory finds any problems with your Malwarebytes installation.  The support article Malwarebytes for Windows Security Advisor has more info.

When I updated to Malwarebytes Premium  v4.4.10 on 05-Nov-2021 Security Advisory warned me that I didn't have automatic product updates turned on in my Malwarebytes settings (which I disabled intentionally).  I didn't want to see this warning every time I opened Malwarebytes so I clicked View Details and dismissed the warning in the window shown below, and Security Advisor now says I'm fully protected again.

A question if I may:

I have the free version and I've just updated it but before I did the first screen that comes up when I first started the unupdated version has a notice about Security and this displays a list of Security Issues and what they can turn on to protect me.

Are these part of MWB  or have they picked up settings in Norton that are not enabled?

TIA

Hello again Malwarebytes community,

We want to let you know we just started rolling out this week's new version of your product, 4.4.11.149 component package 1.0.1513

As usual, if you don't want to wait for the 'Update Available' notification, go right ahead and retrieve the update manually by clicking "Check for updates" in Settings > General.

What’s New in 4.4.11:

  • Enhancements to Security Advisor
    • Show Windows Firewall status indicator on SA instantly
    • Replace shields fo Sec Adv for dark mode on the Dashboard
    • Sort order for monitored items and cards
  • Enhanced detection and remediation
  • Enhanced performance

Some Issues now addressed:

  • Immediately after Windows start-up, Security Advisor indicates Firewall is off
  • Clicking on General Settings -> Firewall -> "View Settings" in Security Advisor disappear the FW bullet item
  • Users still seeing, "Updated Available" notifications with the setting turned off.
  • RTP card doesn't contain RTP switches after activating Trial
  • "Restore Defaults" doesn't restore BFP to enabled for Teams
  • Certain memory leaks in MbamUI
  • UI minor Issues

Thank you so much.

-Erix

https://forums.malwarebytes.com/topic/274681-malwarebytes-44/?do=findComment&comment=1489041 

Hello Malwarebytes community,

Hoping that you are all doing well, we want to let you know we have started rolling out this week's new version of your product, 4.4.10.144 component package 1.0.1499

As our rollout propagates, if you don't want to wait for the 'Update Available' notification, you can go right ahead and try retrieving the update manually by clicking "Check for updates" in Settings > General.

What’s New in 4.4.10:

  • Updated RTP card states and buttons locations for free users
  • Added Security Advisor shields on the main screen dashboard
  • Enhanced detection and remediation
  • Enhanced performance

Some Issues now addressed:

  • AE winword.exe test sample detection only occurs with pen testing ON
  • High CPU usage during WU searches
  • Fixed: MBAMInstallerService fails when the system temp directory is not located in the system drive
  • Memory (and COM handle leak) when using MBScanner
  • Mwac.sys BSOD, UDP Context list is corrupted on release
  • Issue seen after installer upgrade where UI does not open unless as Admin
  • Mbae.dll is uninjected for processes protected within pentest mode
  • MBAMInstallerService fails when the system temp directory is not located in the system drive
  • Fixed: A few (additional) UI minor Issues

Thank you so much.

-Erix

https://forums.malwarebytes.com/topic/274681-malwarebytes-44/?tab=comments#comment-1486897 

Malwarebytes community,

Hoping that you remain in good spirits, we want to let you know we just released this week's new version for your product, 4.4.8.137 component package 1.0.1474

As usual, if you don't want to wait for the 'Update Available' notification, go right ahead and retrieve the update manually by clicking "Check for updates" in Settings > General.

What’s New in 4.4.8:

  • Web Protection False Positives Rapid Response
  • Browser Guard integration on FireFox ready and will be released soon
  • Enhanced detection and remediation

Some Issues now addressed:

  • Fixed: Pluralization issues with trial expiring toast notifications
  • Fixed: Trial countdown notifications out of sync with dashboard countdown
  • Fixed: Error 32 Sharing Violation during upgrades under certain circumstances 
  • Fixed: Malwarebytes will not open after Install/Upgrade under certain circumstances 
  • Fixed: User gets MWAC block page for FPRR-whitelisted website 
  • Fixed: Mbae.dll is injected for processes protected within pentest mode only after service restart
  • Fixed: New Version does not update DisplayName and DisplayVersion values in Uninstall key
  • Fixed: Popup dialogs don't close on Escape key
  • Fixed: mbam.exe crash on attempt to update to new version
  • Fixed: A few (additional) UI minor Issues

Thank you so much.

-Erix

https://forums.malwarebytes.com/topic/274681-malwarebytes-44/?do=findComment&comment=1483035 

Krusty13:

Greetings again Malwarebytes community,

Hoping that you all well, this week's release of your product, version 4.4.7.134 component package 1.0.1464 is available now. ...

https://forums.malwarebytes.com/topic/274681-malwarebytes-44/?do=findComment&comment=1481219 

Just an FYI that I (supposedly?) updated Malwarebytes to v4.4.7.134 - 1.0.1464 via Settings | General | Application Updates | Check for Updates on 25-Sep-2021, but according to Control Panel | Programs | Programs and Features I'm still on v4.4.6.132 (installed 09-Sep-2021).  I'm not the only user having this problem - see the images I posted in BillH99999's Update to MB 4.4.7.134 Left Wrong Version in Registry So SUMo Flagged It in the Malwarebytes forum.

-----------
64-bit Win 10 Pro v21H1 build 19043.1237 * Firefox v92.0.1 * Microsoft Defender v4.18.2108.7 * Malwarebytes Premium v4.4.7.134-1.0.1464
Dell Inspiron 15 5584, Intel i5-8265U CPU, 8 GB RAM, Toshiba KBG40ZNS256G 256 GB NVMe SSD, Intel UHD Graphics 620

Greetings again Malwarebytes community,

Hoping that you all well, this week's release of your product, version 4.4.7.134 component package 1.0.1464 is available now.

As you know, if you don't want to wait for the 'Update Available' notification, go right ahead and retrieve the update manually by clicking "Check for updates" in Settings > General.

What’s New in 4.4.7:

  • Detection and remediation enhancements
  • Improved functionality for starting trials
  • Only one prompt per UI session for Tamper Protection
  • Security Advisor added capabilities
    • Wi-Fi Monitoring
    • Scan History Monitoring
  • Browser Guard integration readiness with FireFox
  • Enhanced performance

Some Issues now addressed:

  • Fixed: Customer experiences BSOD (BugCheck 3B) related to farflt.sys with MB4 CU (1.0.1306)
  • Fixed: Malwarebytes freezes/crashes when user adds app to Allow list under certain circumstances
  • Fixed: MBAM fails to launch after upgrade. User gets the 0xC0000022 error message.
  • Fixed: BFP isn't switching on when resetting settings to default for Teams
  • Fixed: A few (additional) UI minor Issues

Thank you so much.

-Erix

https://forums.malwarebytes.com/topic/274681-malwarebytes-44/?do=findComment&comment=1481219 

Just an FYI that multiple users have posted reports  in the Malwarebytes False Positives - Exploit Protection board that the Exploit Protection module of Malwarebytes Premium v4.4.6.132 - 1.0.1453 (rel. 07-Sep-2021) is causing issues with a variety of Microsoft Office products .  I posted my own false positive report yesterday at MS Word 2019 - Exploit Office WMI Abuse Blocked (cmd.exe).
---------------
64-bit Win 10 Pro v21H1 build 19043.1237 * Firefox v92.0.0 * Microsoft Defender v4.18.2108.7 * Malwarebytes Premium v4.4.6.132-1.0.1453 * MS Office Home and Business 2019 C2R v2108 (build 14326.20238)
Dell Inspiron 15 5584, Intel i5-8265U CPU, 8 GB RAM, Toshiba KBG40ZNS256G 256 GB NVMe SSD, Intel UHD Graphics 620

Malwarebytes community,

Hoping that you all continue to be safe and calm as well as healthy, we want to let you know we just released a new version of your product, 4.4.6.132 component package 1.0.1453

As always, if you don't want to wait for the 'Update Available' notification, go right ahead and retrieve the update manually by clicking "Check for updates" in Settings > General.

What’s New in 4.4.6:

  • Improved UI Scaling for high DPI
  • Improved synchronization between Brute Force protection and Web protection
  • Scan Reminder Notifications
  • User Access Controls Renamed to Tamper Protection
  • Enhanced performance
  • Enhanced detection and remediation

Some Issues now addressed:

  • Fixed: Trial could not be started: Unable to check for updates because an update check is already in progress
  • Fixed: MBAM restart prompt for CU update disappears immediately after rendered    
  • Fixed: Mbam crash heap_corruption (0xc0000374) under certain circumstances
  • Fixed: BSOD caused by Web Protection under certain circumstances    
  • Fixed: Some Ig-xx.exe files are not removed after clean installation of MBAM
  • Fixed: Can't manually delete MWAC exclusion by BG command
  • Fixed: BFP setting remains active when MWAC is turned off
  • Fixed: Brute Force Protection informational prompt is misleading
  • Fixed: For Teams - message is shown as "Activate Malwarebytes for Teams" during license activation    
  • Fixed: Unexpected MBAM notification appears when typing previously detected and allowed URL in the Chrome's address bar
  • Fixed: Browser Guard: BG does not install for Edge, even though the installer offers it    
  • Fixed: Unable to show Scan progress page after visiting Settings tabs in UI
  • Fixed: Expiration Date value does not change when Trial End Date changes server side
  • Fixed: A few (additional) UI minor Issues

Thank you so much.

-Erix

https://forums.malwarebytes.com/topic/274681-malwarebytes-44/?do=findComment&comment=1478759 

Malwarebytes community,

We want to let you know we recently released a hotfix to your product, version 4.4.4.126 component package 1.0.1413

As usual, if you don't want to wait for the 'Update Available' notification, go right ahead and retrieve the update manually by clicking "Check for updates" in Settings > General.

  • Hardened Brute Force Protection (RDP)

Thank you so much.

-Erix

https://forums.malwarebytes.com/topic/274681-malwarebytes-44/?do=findComment&comment=1472358 

We want to let you know once more we recently released a new version of your product, 4.4.4.126 component package 1.0.1404...

      Some Issues now addressed:
  • Fixed: Browser Guard - MB4 interaction doesn't work after MB4 restart (need to restart Chrome also)
  • Fixed: Reopening of Chrome leads to high memory consumption of Native Messaging Host App ...
https://forums.malwarebytes.com/topic/274681-malwarebytes-44/?do=findComment&comment=1471741 

If you use both Malwarebytes Premium v4.x as well as the Malwarebytes Browser Guard browser extension in a Chromium browser (e.g., Google Chrome, MS Edge, etc.) just note that some users are reporting that the latest v4.4.4.126-1.0.1404 update of 29-Jul-2021 hasn't fixed the bug where the Malwarebytes Native Messaging Service can consume high amounts of memory on their system.  See the Task Manager image posted in HardCopy1's 31-Jul-2021 thread MalwareBytes 4.4.4.126 for Windows Uses Excessive Amount of Memory for one example of how this bug can eventually consume all available RAM and crash the system.  The download link for the MB v4.x full offline installer at https://downloads.malwarebytes.com/file/mb4_offline is currently offering the previous MB v4.4.3.125-1.0.1387 so it's possible that Malwarebytes has paused the rollout of MB v4.4.4.126-1.0.1404 while they continue to investigate.

I assume this bug is related to the recent integration of the Web Protection feature in Malwarebytes Premium with Malwarebytes Browser Guard for Chrome that was introduced in MB v4.4.0.117-1.0.1308 (rel. 24-May-2021).  I asked about this integration in my 30-Jun-2021 thread MB v4.4 and Reduced Redundancy for Web Blocks When Browser Guard Installed.  I rarely use my MS Edge (Chromium) browser so I'm not sure if this bug affects my own system since the high memory usage by the Malwarebytes Native Messaging Service only seems to be triggered under specific circumstances (e.g., after the Chromium browser is re-opened).
----------------
64-bit Win 10 Pro v20H2 build 19042.1110 * Microsoft Defender v4.18.2106.6 * Malwarebytes Premium v4.4.3.125-1.0.1387 * Firefox v90.0.2 * MS Edge v92.0.902.62 * Malwarebytes Browser Guard v2.3.5
Dell Inspiron 15 5584, Intel i5-8265U CPU, 8 GB RAM, Toshiba KBG40ZNS256G 256 GB NVMe SSD, Intel UHD Graphics 620

We want to let you know once more we recently released a new version of your product, 4.4.4.126 component package 1.0.1404

As always, if you don't want to wait for the 'Update Available' notification, go right ahead and retrieve the update manually by clicking "Check for updates" in Settings > General.

What’s New in this 4.4.4:

  • Brute Force Protection (for RDP)
  • Added Naming for Teams UI branding in the Check for Updates Dialog
  • Uninstall Protection 
  • Users are now allowed to suppress Scan Notifications when no threats are found
  • Enhanced detection and remediation     
  • Improved performance

Some Issues now addressed:

  • Fixed: Fix problem with showing the reboot dialog when CU stuck in some situations.
  • Fixed: Web exclusions get cleared when turning off Web Protection
  • Fixed: Italian language 'Scan time' formatting issue in UI
  • Fixed: Checking for updates doesn't inform user of network error when unable to reach license server
  • Fixed: Permanent exclusion can be added as "IP address" or "Website" exclusion when navigating to blocked IP
  • Fixed: Browser Guard - MB4 interaction doesn't work after MB4 restart (need to restart Chrome also)
  • Fixed: Reopening of Chrome leads to high memory consumption of Native Messaging Host App
  • Fixed: Allow List: Add an item window and Allow a file/website/app/previously detected exploit window are not aligned when German language selected
  • Fixed: Spelling issue Swedish
  • Fixed: mbamtray 'Access violation' crash under certain circumstances
  • Fixed: Tooltip content gets cut if opened on the edge of the window
  • Fixed: Several minor UI issues

https://forums.malwarebytes.com/topic/274681-malwarebytes-44/?do=findComment&comment=1471741 

A new Component Package v1.0.1318 for Malwarebytes v4.4.0.117 is now available. From the 03-Jun-2021 product release announcement at https://forums.malwarebytes.com/topic/274681-malwarebytes-44/?do=findComment&comment=1461307 :

We want to let you know we have just released a new version of your product, 4.4.0.117 component package 1.0.1318

As always, if you don't want to wait for the 'Update Available' notification, go right ahead and retrieve the update manually by clicking "Check for updates" in Settings > General.

What’s New in this 1.0.1318:

  • Continued Reduced redundancy for Web Blocks when integrated with Browser Guard
  • Help Page for Teams
  • Improved Trial notifications for Teams
  • Enhancements for WSC integration at Upgrades
  • Enhanced update functionality
  • Improved detection and remediation     
  • Improved performance

Some Issues now addressed:

  • Fixed: Dashboard Cards should be accessed and opened using Keyboard navigation
  • Fixed: MWAC.sys BSOD KMODE_EXCEPTION_NOT_HANDLED (1e)
  • Fixed: Mwac.sys BSOD (DPC_WATCHDOG_VIOLATION -0x133)
  • Fixed:  Incorrect header for Something went wrong page
  • Fixed: Threat scan advanced options window: text and fields are shifted/moved to the left
  • Fixed: Several UI issues

---------
64-bit Win 10 Pro v20H2 build 19042.985 * Microsoft Defender v4.18.2104.14 * Malwarebytes Premium v4.4.0.117-1.0.1318