Jump to content

Severe slowdown from MBAM


Recommended Posts

I've fielded several called from my customers today claiming severe PC slowness to the point of non-functionality. I've narrowed the cause of this down to MBAM (when I kill the 2 services from task manager the speed of the systems immediately return to normal) All are running legally licensed and registered copies. Networks and machines vary as do anti-virus programs on those machines. Most are WinXP SP3 but beyond that the similarity is MalwareBytes. Is anyone aware of a recent update that could hose their systems like this? I'm fearing more calls any minute now.

Thanks.

Link to post
Share on other sites

  • Replies 78
  • Created
  • Last Reply

Top Posters In This Topic

just a quick thought....

Did you excluded the MBAM files from the antivirus software being used?

Please exclude the following files from your antivirus:

Note: If using a software firewall besides the built in Windows Firewall you'll need to exclude them from it as well

For Windows XP:

  • C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe
  • C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
  • C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
  • C:\Documents and Settings\All Users\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\rules.ref
  • C:\Windows\System32\drivers\mbam.sys
  • C:\Windows\System32\drivers\mbamswissarmy.sys

For 32 bit versions Windows Vista or Windows 7:

  • C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe
  • C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
  • C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
  • C:\ProgramData\Malwarebytes\Malwarebytes' Anti-Malware\rules.ref
  • C:\Windows\System32\drivers\mbam.sys
  • C:\Windows\System32\drivers\mbamswissarmy.sys

For 64 bit versions of Windows Vista or Windows 7:

  • C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbam.exe
  • C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
  • C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
  • C:\ProgramData\Malwarebytes\Malwarebytes' Anti-Malware\rules.ref
  • C:\Windows\System32\drivers\mbam.sys
  • C:\Windows\SysWoW64\drivers\mbamswissarmy.sys

Please post back and let us know how it went.

Link to post
Share on other sites

Version 1.45 was released on Monday and just because it was trusted by the Anti-Virus for the original install they may not trust the new version and you may need to reset the file exclusions again.

I tried that on one machine, completely removed the blocks then re-added them without luck. I have not tried disabling the web blocking. I'm about to try completely removing the product, rebooting, running the clean util, rebooting again, reinstalling and re-registering, rebooting again then see how it goes.

Link to post
Share on other sites

I too have noticed a very marked slowdown on my WinXP Pro desktop computer since updating to MBAM 1.45. I had all the exclusions in my antivirus program, and the major ones in my firewall as well. I've now added the rest to my firewall. I haven't tried disabling the IP Protection, in part because the slowdown seems to occur whether or not I'm surfing the web. The one thing I've noticed is that on several occasions when things seemed particularly sluggish, I looked to see what programs were using the most CPU, and invariably, MBAM was at or near the top. That seemed a bit strange to me.

I'm not 100% sure that MBAM is the culprit, but at the moment it seems like a prime suspect.

Link to post
Share on other sites

Just adding here that I haven't personally been experiencing any system slowdowns since updating Mbam to 1.45. In fact, my computer seems to be faster than its been in a long time.

Link to post
Share on other sites

I'm glad to hear that, mountaintree. And I'm a little embarrassed (and also somewhat relieved) to report that rebooting seems to have helped cure much of the sluggishness I was seeing. Why I didn't try that before writing, I don't know :rolleyes: . This still doesn't explain why each time my computer was noticeably sluggish, MBAM was listed at or near the top of the CPU users, but for the moment, all seems well (knock on wood, salt over my shoulder).

Link to post
Share on other sites

@ whatmeworry?

That is why I go to My Controls then Edit Signature to show my system specifications so that helpers can offer pertinent advice.

Link to post
Share on other sites

Have you re-added exclusions for to your AV for Mbam by the way?

Hi, mountaintree. I took a look at my AV, and all the exclusions were still there. Since neither the locations nor the filenames have changed, I decided there was no need to re-add the exclusions. All I'd be doing would be removing the listings and then putting back the same listings. Since my AV hasn't been complaining and doesn't seem to be unhappy with MBAM, I'm inclined to leave things as they are.

Link to post
Share on other sites

Just a quick update, 1 client issue was resolved by switching AV software. The bundled AV suite with Verizon DSL did not allow bypassing specific services/files unless it found them as a virus (nice). Replaced with McAfee corporate and appropriate settings along with a clean install of MBAM resolved the issue.

Another client with Symantec Corp AV is still reporting issues with IE not functioning with MBAM enabled. Kill the services and it's fine. This is on a PC with a full clean removal and reinstall and website blocking disabled. Symantec has been configured for appropriate exclusions. Performing futher testing on those machines now and will report findings in the morning. Stay tuned! :)

Link to post
Share on other sites

After I downloaded 1.45, a process called "mbamservice.exe" was consistently using 35-45% of the CPU. I tried re-booting, as suggested on this thread and it stopped for a while, but started again when I ran an anti-virus scan. Not sure if it's a conflict issue, but I have Webroot (SpySweeper with Anti-Virus) and I don't see any way to exclude programs in it. Any suggestions there? I've been having occasional freeze-ups during Webroot scans and also sometimes when I try to open Internet Explorer or "My Computer" for the past couple months, and I'm wondering if this is why. Thanks for any help!

Link to post
Share on other sites

Hello Again ,Welcome to Malwarebytes.org

If this has been around for a month or so it sounds like you need one of our experts to check it out for a minor infection that slipped through -

As we don't work on Malware removal or diagnostics in the general forums please follow the directions below -

Please print out, read, and follow the directions here, skipping any steps you are unable to complete. Then post a NEW topic here.

One of the expert helpers there will give you one-on-one assistance when one becomes available.

After posting your new post make sure under options that you select Track this topic and choose one of the Email options so that you're alerted when someone has replied to your post - Please be patient as the experts can get a bit busy -

Alternatively, as a paying customer, you can contact the help desk at support@malwarebytes.org

Thank You - :)

Link to post
Share on other sites

Hello Again ,Welcome to Malwarebytes.org

If this has been around for a month or so it sounds like you need one of our experts to check it out for a minor infection that slipped through -

(snip)

Hi, thanks for the info, I will look into that, and I have been exploring that problem separately. But any thoughts as to why "mbamservice.exe" is using so much of the CPU at times? That doesn't seem like it would be virus-related. Also, do you know of any way to fix any conflict with Webroot anti-virus?

Thanks again for the help!

Link to post
Share on other sites

  • Root Admin

The basic premise is the same for all AV software. Add the appropriate exclusions as shown in the FAQ for other examples, however as you've seen not all AV allows the proper exclusions and some (such as McAfee) do not fully honor their own settings. You will need to explore Webroots interface and look for advanced options maybe to see if and where you can add the appropriate exclusions.

Link to post
Share on other sites

I have a similar issue with my PC and Laptop running Windows 7 64-bit version. After a clean install using default settings and latest MS updates, file transfer speeds are over 50mbps. After installing Malwarebytes v1.45 or even previous versions, the speed drops down to about 3mbps. On a windows xp OS, it's fine. I guess I'll just run Malwarebytes when I need to for now.

Link to post
Share on other sites

  • Root Admin
I have a similar issue with my PC and Laptop running Windows 7 64-bit version. After a clean install using default settings and latest MS updates, file transfer speeds are over 50mbps. After installing Malwarebytes v1.45 or even previous versions, the speed drops down to about 3mbps. On a windows xp OS, it's fine. I guess I'll just run Malwarebytes when I need to for now.

On some systems running x64 the Web Filtering feature does slow down the link like that. You can set it to not monitor permanently if needed or you can temporarily enable and disable it when downloading large files and turn it back on when only browsing.

We are still researching to see if there is some way to prevent this on x64 as not everyone has this issue but some do.

Link to post
Share on other sites

Another update to the original issue, all systems with the exception of 1 are fine. Full uninstall, clean and reinstall helped all but 2. Those 2 were ok after a 2nd reboot, go figure. Performance with AV apps that do not allow exceptions seems to be a serious issue with the latest version (1.44 was fine). Suspect the last PC with an issue is a limited resource problem and will be addressed Monday.

Link to post
Share on other sites

whatmeworry?

It is best to include the CPU type and speed and amount of RAM on your Dell Optiplex GX620 desktop: WinXP Pro SP3 system.

Go to Control Panel then System then in the General tab it will show processor type and speed and amount of RAM.

I upgraded my XP Pro system to 1.5GB RAM to accommodate the needs of running my anti virus and MBAM together and now it runs almost as fast as my Windows 7 system.

Link to post
Share on other sites

Hi, YoKenny. I added the sig info you suggested. If I were planning to keep this computer for another few years, I'd up the amount of RAM, but it's already four years old, and I suspect that within the year I'll probably replace it.

I would not use anything from McAfee on my home systems.

See AdvancedSetup's Post #18

Link to post
Share on other sites

YoKenny, I have some reservations about McAfee, primarily that it's a resource hog. For that reason, I did not put it on my netbook, running the rather limited Win7 Starter. However, I have not found Advanced Setup's statement to be true of my experience. I've used McAfee Enterprise edition on my desktop for years, primarily because my university makes it available for free via a site license. I've never had reason to regret using it. It hasn't let malware onto my system, nor has it given me lots of false positives--my two chief requirements for an AV program. Once I entered the MBAM exclusions into McAfee, it played nicely with MBAM Pro. You may have good reasons for not putting it on your system, but it has served me well on mine.

Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Recently Browsing   0 members

    • No registered users viewing this page.

Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.