Перейти к содержимому


Фото
- - - - -

Dr. Web - Info Needed - Behavior Blocker


  • Закрыто Тема закрыта
9 ответов в этой теме

#1 Paul.R

Paul.R

    Newbie

  • Posters
  • 26 Сообщений:

Отправлено 19 Май 2020 - 20:48

Hi!
 
After I install Malwarebytes, Dr. Web give me those 2 alerts:
 
1.

19.05.2020 20:29 Exploit Prevention Unauthorized code execution blocked PID: 15152 Process: C:\Program Files\Mozilla Firefox\firefox.exe Reason: Attempt to execute suspicious code

2.

19.05.2020 20:29 Exploit Prevention Unauthorized code execution blocked PID: 18264 Process: C:\Program Files\Mozilla Firefox\firefox.exe Reason: Attempt to execute suspicious code

Also I install Hitman pro just to check up a page that I was let any viruses on my system...I clean browser (Firefox) can't provide page that I visit.

 

All scans show that I have no viruses.

 

Windows 10 Pro x64 - latest version

All programs are up to date.

 

Thanks!

 

Have a nice day!


Сообщение было изменено Paul.R: 19 Май 2020 - 20:50


#2 Dmitry_rus

Dmitry_rus

    Massive Poster

  • Helpers
  • 2 968 Сообщений:

Отправлено 19 Май 2020 - 21:07

After I install Malwarebytes, Dr. Web give me those 2 alerts:
Did you get these alerts just after installing MBAM? Can you reproduce the issue now with (and without) MBAM installed?

Alert appears randomly, or when visiting some certain site(s)?

Anyway, best solution for now - make a log (Tools - Support - Report for technical support) and attach it here.

As workaround, you may also switch off Exploit prevention.



#3 Paul.R

Paul.R

    Newbie

  • Posters
  • 26 Сообщений:

Отправлено 19 Май 2020 - 21:15

Just after I install Malwarebytes, I think it's a promo page from Malwarebytes that open after you install it. Thanks for the help.


Сообщение было изменено Paul.R: 19 Май 2020 - 21:15


#4 Dmitry_rus

Dmitry_rus

    Massive Poster

  • Helpers
  • 2 968 Сообщений:

Отправлено 19 Май 2020 - 21:21

Basic rule # 1. You shouldn't install/use more than 1 AV on your PC at the same time (except scanners-on-demand).



#5 Paul.R

Paul.R

    Newbie

  • Posters
  • 26 Сообщений:

Отправлено 19 Май 2020 - 21:27

I set Malwarebytes to Free version from start , no real time scan or anything else that can affect dr. web. But I will uninstall It and let just Hitman Pro as a scanner or should I uninstall this one too?



#6 Dmitry_rus

Dmitry_rus

    Massive Poster

  • Helpers
  • 2 968 Сообщений:

Отправлено 19 Май 2020 - 21:38

Generally, it might work. But nobody gives you 100% guarantee. Any modern AV is a complex product, which deeply (on a kernel level) integrates in your system, that's why installing more than 1 AV at the same time may cause unpredictable results (and that's why it's strongly NOT recommended).


Сообщение было изменено Dmitry_rus: 19 Май 2020 - 21:39


#7 Paul.R

Paul.R

    Newbie

  • Posters
  • 26 Сообщений:

Отправлено 19 Май 2020 - 21:40

Logs are here!


Сообщение было изменено RomaNNN: 20 Май 2020 - 15:40
file deleted at the request of the author


#8 Dmitry_rus

Dmitry_rus

    Massive Poster

  • Helpers
  • 2 968 Сообщений:

Отправлено 19 Май 2020 - 22:11

See PM.



#9 Paul.R

Paul.R

    Newbie

  • Posters
  • 26 Сообщений:

Отправлено 19 Май 2020 - 22:11

Send a ticket to Dr. Web Support coming with a solution. Don't Close topic please!



#10 Paul.R

Paul.R

    Newbie

  • Posters
  • 26 Сообщений:

Отправлено 20 Май 2020 - 11:25

Solved, topic can be closed!

 

Solution:

 

That's MB fault. Speaking shortly, MB has an realtime anti-exploit DLL library (mbae64.dll), which conflicts with Dr.Web Exploit Prevention. Dr.Web considers DLL's activity as Trojan.Exploit.

two application with the same protection function might be confliction. Please stay only one application with exploit protection. Thank you.
 

 

Thanks to Dmitry_rus and Lyudmila Teplova!
 




Читают тему: 0

0 пользователей, 0 гостей, 0 скрытых