Firefox block by Malwarebytes after updating to ver 58.0.
Every time I open firefox, I get this notification from Malwarebytes about blocking it then firefox closes. Here is the pic of the log in Malwarebytes(see attached file or link here https://i.imgur.com/gQOOTLL.png ).
Why is it now blocking firefox? Before ver 58.0, it's fine and no detections found. But now in ver 58.0, why??
Ilungisiwe
All Replies (13)
It's probably because Malwarebytes is serving up a false positive on the newest version of Firefox. I haven't heard too many complaints, but you can go into malwarebytes and add an exception for Firefox, and also update the malwarebytes definitions
Could you test in Firefox's Safe Mode? In Safe Mode, Firefox temporarily deactivates extensions, hardware acceleration, and some other advanced features to help you assess whether these are causing the problem.
If Firefox is not running: Hold down the Shift key when starting Firefox.
If Firefox is running: You can restart Firefox in Safe Mode using either:
- "3-bar" menu button > "?" button > Restart with Add-ons Disabled
- Help menu > Restart with Add-ons Disabled
and OK the restart.
Both scenarios: A small dialog should appear. Click "Start in Safe Mode" (not Refresh).
Any improvement?
https://forums.malwarebytes.com/topic/219551-firefox-58-malwarebytes-anti-exploit/ and Malwarebytes had a issue with Firefox 58.0b4 back in November https://forums.malwarebytes.com/topic/215365-firefox-quantum-beta-v-580b4-64b-closed-by-malwarebytes-v-3312183/
I have the same issue here and it only just started with the latest firefox version (it was perfectly fine before). https://i.imgur.com/FLWVUGG.png
Had a conversation on twitter on why this was and haven't gotten a solution either yet... https://twitter.com/DJDajova/status/955934191484592131
Ilungisiwe
dajova said
I have the same issue here and it only just started with the latest firefox version (it was perfectly fine before. https://i.imgur.com/FLWVUGG.png
In the malwarebytes threads I linked to says to uncheck "RET ROP Gadget detection" in Advanced Memory Protection if you checked them as it is unchecked by default.
Ilungisiwe
jscher2000 said
Could you test in Firefox's Safe Mode? In Safe Mode, Firefox temporarily deactivates extensions, hardware acceleration, and some other advanced features to help you assess whether these are causing the problem. If Firefox is not running: Hold down the Shift key when starting Firefox. If Firefox is running: You can restart Firefox in Safe Mode using either:and OK the restart. Both scenarios: A small dialog should appear. Click "Start in Safe Mode" (not Refresh). Any improvement?
- "3-bar" menu button > "?" button > Restart with Add-ons Disabled
- Help menu > Restart with Add-ons Disabled
Restarting in Safe Mode doesn't do anything. Thanks for the tip. Anyway I just uncheck it on the settings upon checking on the link that James shared above.
Hi all:
This sounds like Malwarebytes closing Firefox Quantum beta due to "detected exploit ROP gadget attack" - bug 1418594 .
Am I right?
Cheers!
...Roland
So far, after i unchecked that option, it hasn't crashed once, so i'm guessing it has helped. I'll make a post if it crashes again, but seems to work. Thanks @roland and @james.
Here's what I think - I got some malware (apparently by MacCleaner or something that I NEVER downloaded) and downloaded Malwarebytes which -- seemed to take care of it - ok, great. Now, as soon as my 'free trial' was up and I am getting notifications that Malwarebytes is expired - I now have this problem of, whenever I go to click a "like" on an article, pop up windows start opening and closing, opening and closing - continuously. Personally, I believe it is something that installed with Malwarebytes in the free trial so you are held hostage when the free trial is up. That's bullcr*p.
That's not true at all. Malwarebytes is a reputable application for many years.
Hi keltoid15, when a free trial ends and the product has reduced functionality, it's normal to be notified of that when you use the software. If you don't want reminders, uninstall the software.
You should consider the possibility that you have a different infection, or if you installed a so-called "strict" popup blocker add-on, that can cause normal popup windows to be closed after they open.
I suggest starting your investigation on the Add-ons page. Either:
- Command+Shift+a (Windows: Ctrl+Shift+a)
- "3-bar" menu button (or Tools menu) > Add-ons
- type or paste about:addons in the address bar and press Enter/Return
In the left column of the Add-ons page, click Extensions.
Then cast a critical eye over the list on the right side. Any extensions Firefox installs for built-in features are hidden from this page, so everything listed here is your choice (and your responsibility) to manage. Anything suspicious or that you just do not remember installing or why? Anything related to popups? If in doubt, disable (or remove).
Any improvement?
Tyler Downer said
That's not true at all. Malwarebytes is a reputable application for many years.
Then I shall call it disturbingly ironic and timely. I deleted it completely off my macbook.
jscher2000 said
Hi keltoid15, when a free trial ends and the product has reduced functionality, it's normal to be notified of that when you use the software. If you don't want reminders, uninstall the software. You should consider the possibility that you have a different infection, or if you installed a so-called "strict" popup blocker add-on, that can cause normal popup windows to be closed after they open. I suggest starting your investigation on the Add-ons page. Either:In the left column of the Add-ons page, click Extensions. Then cast a critical eye over the list on the right side. Any extensions Firefox installs for built-in features are hidden from this page, so everything listed here is your choice (and your responsibility) to manage. Anything suspicious or that you just do not remember installing or why? Anything related to popups? If in doubt, disable (or remove). Any improvement?
- Command+Shift+a (Windows: Ctrl+Shift+a)
- "3-bar" menu button (or Tools menu) > Add-ons
- type or paste about:addons in the address bar and press Enter/Return
Thanks for the info, jscher2000 - I'll look into it -