9 replies to this topic

[Paul.R]

Hi!
 
After I install Malwarebytes, Dr. Web give me those 2 alerts:
 
1.

19.05.2020 20:29 Exploit Prevention Unauthorized code execution blocked PID: 15152 Process: C:\Program Files\Mozilla Firefox\firefox.exe Reason: Attempt to execute suspicious code

2.

19.05.2020 20:29 Exploit Prevention Unauthorized code execution blocked PID: 18264 Process: C:\Program Files\Mozilla Firefox\firefox.exe Reason: Attempt to execute suspicious code

Also I install Hitman pro just to check up a page that I was let any viruses on my system...I clean browser (Firefox) can't provide page that I visit.

 

All scans show that I have no viruses.

 

Windows 10 Pro x64 - latest version

All programs are up to date.

 

Thanks!

 

Have a nice day!

Edited by Paul.R, 19 May 2020 - 20:50.

[Dmitry_rus]

After I install Malwarebytes, Dr. Web give me those 2 alerts:

Did you get these alerts just after installing MBAM? Can you reproduce the issue now with (and without) MBAM installed?

Alert appears randomly, or when visiting some certain site(s)?

Anyway, best solution for now - make a log (Tools - Support - Report for technical support) and attach it here.

As workaround, you may also switch off Exploit prevention.

[Paul.R]

Just after I install Malwarebytes, I think it's a promo page from Malwarebytes that open after you install it. Thanks for the help.

Edited by Paul.R, 19 May 2020 - 21:15.

[Dmitry_rus]

Basic rule # 1. You shouldn't install/use more than 1 AV on your PC at the same time (except scanners-on-demand).

[Paul.R]

I set Malwarebytes to Free version from start , no real time scan or anything else that can affect dr. web. But I will uninstall It and let just Hitman Pro as a scanner or should I uninstall this one too?

[Dmitry_rus]

Generally, it might work. But nobody gives you 100% guarantee. Any modern AV is a complex product, which deeply (on a kernel level) integrates in your system, that's why installing more than 1 AV at the same time may cause unpredictable results (and that's why it's strongly NOT recommended).

Edited by Dmitry_rus, 19 May 2020 - 21:39.

[Paul.R]

Logs are here!

Edited by RomaNNN, 20 May 2020 - 15:40.
file deleted at the request of the author

[Dmitry_rus]

See PM.

[Paul.R]

Send a ticket to Dr. Web Support coming with a solution. Don't Close topic please!

[Paul.R]

Solved, topic can be closed!

 

Solution:

 

That's MB fault. Speaking shortly, MB has an realtime anti-exploit DLL library (mbae64.dll), which conflicts with Dr.Web Exploit Prevention. Dr.Web considers DLL's activity as Trojan.Exploit.

two application with the same protection function might be confliction. Please stay only one application with exploit protection. Thank you.
 

 

Thanks to Dmitry_rus and Lyudmila Teplova!