Date Time Tick Count Process ID Thread ID Log Level Context Tag Function Name File Name Line Number Message 12/03/25 " 16:40:35.922" 62227687 2088 17f0 INFO LogController CLogController::Start "LogController.cpp" 94 "Started logging" 12/03/25 " 16:40:35.922" 62227687 2088 17f0 INFO LogController CLogController::Start "LogController.cpp" 96 "Local time zone: 'Środkowoeuropejski czas stand.' (UTC+01:00)" 12/03/25 " 16:40:36.069" 62227843 2088 17f0 INFO ServiceControllerImpl ServiceControllerImplementation::StartV2 "ServiceControllerImplementation.cpp" 471 "Service Controller starting controller initialization" 12/03/25 " 16:40:36.069" 62227843 2088 17f0 INFO ServiceControllerImpl ServiceControllerImplementation::StartV2 "ServiceControllerImplementation.cpp" 472 "Product code MBAM-C" 12/03/25 " 16:40:36.069" 62227843 2088 17f0 INFO ServiceControllerImpl ServiceControllerImplementation::StartV2 "ServiceControllerImplementation.cpp" 473 "Product version 5.4.5.226" 12/03/25 " 16:40:36.069" 62227843 2088 17f0 INFO ServiceControllerImpl ServiceControllerImplementation::StartV2 "ServiceControllerImplementation.cpp" 474 "Product build consumer" 12/03/25 " 16:40:36.069" 62227843 2088 17f0 INFO ServiceControllerImpl ServiceControllerImplementation::StartV2 "ServiceControllerImplementation.cpp" 475 "MBAMService.exe version 3.2.0.1450" 12/03/25 " 16:40:36.069" 62227843 2088 17f0 INFO ServiceControllerImpl ServiceControllerImplementation::StartV2 "ServiceControllerImplementation.cpp" 476 "OS Version Windows 10 (Build 19045.6466)" 12/03/25 " 16:40:36.069" 62227843 2088 17f0 INFO ServiceControllerImpl ServiceControllerImplementation::StartV2 "ServiceControllerImplementation.cpp" 481 "Service start requested with startTray set to: 1" 12/03/25 " 16:40:36.554" 62228328 2088 17f0 WARNING PoliciesControllerImpl mb::policiescontrollerimpl::PoliciesConfigHandler::LoadConfig "PoliciesConfigHandler.cpp" 422 "Config file not found C:\ProgramData\Malwarebytes\MBAMService\config\PoliciesConfig.json. Using default values." 12/03/25 " 16:40:36.608" 62228375 2088 17f0 WARNING PoliciesControllerImpl mb::policiescontrollerimpl::PoliciesConfigHandler::FixLanguageCode "PoliciesConfigHandler.cpp" 1608 "Fixing display language code. Old: en_US, New: en-US" 12/03/25 " 16:40:36.840" 62228609 2088 17f0 INFO PoliciesControllerImpl mb::policiescontrollerimpl::PoliciesConfigHandler::ShellExtensionControl "PoliciesConfigHandler.cpp" 1266 "Shell extension registered." 12/03/25 " 16:40:36.871" 62228640 2088 17f0 INFO ServiceControllerImpl ServiceControllerImplementation::StartPoliciesController "ServiceControllerImplementation.cpp" 2731 "Policies Controller Started" 12/03/25 " 16:40:36.871" 62228640 2088 17f0 INFO LicenseControllerCOM CLicenseController::Start "LicenseController.cpp" 103 "CLicenseController::Start" 12/03/25 " 16:40:37.457" 62229234 2088 17f0 INFO LicenseControllerImpl mb::licensecontrollerimpl::LicenseControllerImplV2::Initialize "LicenseControllerImplV2.cpp" 118 "Successfully initialized the LicenseControllerImpl." 12/03/25 " 16:40:37.457" 62229234 2088 17f0 INFO ServiceControllerImpl ServiceControllerImplementation::StartLicenseController "ServiceControllerImplementation.cpp" 2766 "License Controller Started" 12/03/25 " 16:40:37.827" 62229593 2088 17f0 ERROR UpdateControllerCOM mb::common::system::DynamicLibrary::GetFunctionAddress "DynamicLibrary.cpp" 127 "Could not load 'PerformTestOperation' function ptr from DLL, Nie można odnaleźć określonej procedury. (0x7f)" 12/03/25 " 16:40:37.827" 62229593 2088 17f0 WARNING UpdateControllerCOM CUpdateControllerModuleLoader::LoadProcs "UpdateControllerModuleLoader.cpp" 386 "Unable to get function address for PerformTestOperation. Continuing." 12/03/25 " 16:40:37.827" 62229593 2088 17f0 WARNING UpdateControllerImpl mb::common::json::JSONUtilities::ReadJSONFromFileEx "JSONUtilities.h" 87 "Could not open file for reading C:\ProgramData\Malwarebytes\MBAMService\config\UpdateControllerConfig.json" 12/03/25 " 16:40:37.827" 62229593 2088 17f0 WARNING UpdateControllerImpl mb::common::json::JSONUtilities::ReadJSONFromFile "JSONUtilities.h" 42 "Failed reading file C:\ProgramData\Malwarebytes\MBAMService\config\UpdateControllerConfig.json, error 2. Will try reading from the backup if it exists." 12/03/25 " 16:40:37.827" 62229593 2088 17f0 WARNING FileSystemUtils mb::common::io::FileSystemUtils::Copy "FileSystemUtils.cpp" 101 "File not found: C:\ProgramData\Malwarebytes\MBAMService\config\UpdateControllerConfig.json.bak" 12/03/25 " 16:40:37.827" 62229593 2088 17f0 WARNING UpdateControllerImpl mb::common::json::JSONUtilities::ReadJSONFromFile "JSONUtilities.h" 66 "Copy from backup failed for file C:\ProgramData\Malwarebytes\MBAMService\config\UpdateControllerConfig.json.bak. - 2" 12/03/25 " 16:40:37.827" 62229593 2088 17f0 INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl::ReadConfig "UpdateControllerImplHelper.cpp" 511 "Config file C:\ProgramData\Malwarebytes\MBAMService\config\UpdateControllerConfig.json not found; using default values" 12/03/25 " 16:40:37.880" 62229656 2088 17f0 WARNING UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl::Initialize "UpdateControllerImplHelper.cpp" 285 "Controller package version is 1.0.0 - config file may have reset" 12/03/25 " 16:40:37.981" 62229750 2088 17f0 INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl::SetInitialPackageVersions "UpdateControllerImplHelper.cpp" 3708 "Setting initial package versions" 12/03/25 " 16:40:38.175" 62229953 2088 17f0 INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl::UpdateInstalledPkgVersion "UpdateControllerImplHelper.cpp" 3912 "Successfully updated DB/ClsEng package version to: 1.0.105403" 12/03/25 " 16:40:38.260" 62230031 2088 17f0 INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl::UpdateInstalledPkgVersion "UpdateControllerImplHelper.cpp" 3928 "Set DB version to: 2025.12.03.10" 12/03/25 " 16:40:38.360" 62230125 2088 17f0 INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl::Initialize "UpdateControllerImplHelper.cpp" 404 "COMPONENT PACKAGE VERSION: 146.0.5441, DB PACKAGE VERSION: 1.0.105403" 12/03/25 " 16:40:38.476" 62230250 2088 17f0 INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl::ValidateDBManifest "UpdateControllerImplHelper.cpp" 5921 "Signature successfully validated" 12/03/25 " 16:40:39.504" 62231281 2088 17f0 INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl::ValidateDBManifest "UpdateControllerImplHelper.cpp" 5925 "DB manifest successfully validated" 12/03/25 " 16:40:39.504" 62231281 2088 17f0 INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl::CheckDbManifest "UpdateControllerImplHelper.cpp" 6317 "Validated DB manifest - success" 12/03/25 " 16:40:39.620" 62231390 2088 17f0 WARNING UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl::CopyDBFiles "UpdateControllerImplHelper.cpp" 6138 "File not found: C:\ProgramData\Malwarebytes\MBAMService\version.dat" 12/03/25 " 16:40:39.657" 62231421 2088 17f0 WARNING UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl::CopyDLLFiles "UpdateControllerImplHelper.cpp" 6164 "File not found: C:\Program Files\Malwarebytes\Anti-Malware\ActionsV5.dll" 12/03/25 " 16:40:39.657" 62231421 2088 17f0 WARNING UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl::CopyDLLFiles "UpdateControllerImplHelper.cpp" 6164 "File not found: C:\Program Files\Malwarebytes\Anti-Malware\MBAMCoreV5.dll" 12/03/25 " 16:40:39.657" 62231421 2088 17f0 WARNING UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl::CopyDLLFiles "UpdateControllerImplHelper.cpp" 6164 "File not found: C:\Program Files\Malwarebytes\Anti-Malware\BrowserSDKDLLV5.dll" 12/03/25 " 16:40:39.657" 62231421 2088 17f0 WARNING UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl::CopyDLLFiles "UpdateControllerImplHelper.cpp" 6164 "File not found: C:\Program Files\Malwarebytes\Anti-Malware\igV5.exe" 12/03/25 " 16:40:39.657" 62231421 2088 17f0 WARNING UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl::CopyDLLFiles "UpdateControllerImplHelper.cpp" 6164 "File not found: C:\Program Files\Malwarebytes\Anti-Malware\sampleV5.dll" 12/03/25 " 16:40:39.673" 62231437 2088 17f0 INFO ServiceControllerImpl ServiceControllerImplementation::StartUpdateController "ServiceControllerImplementation.cpp" 2851 "Update Controller Started" 12/03/25 " 16:40:39.673" 62231437 2088 17f0 INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl::SetMinSupportedCULevel "UpdateControllerImplHelper.cpp" 6923 "Minimum supported Component (CU) package version is: 144.0.5415" 12/03/25 " 16:40:39.673" 62231437 2088 17f0 INFO CloudController CCloudController::Start "CloudController.cpp" 102 "CCloudController::Initialize" 12/03/25 " 16:40:40.059" 62231828 2088 17f0 INFO CloudCtrlImpl Initialize "CloudControllerImpl.cpp" 56 "CC Initialize called" 12/03/25 " 16:40:40.074" 62231843 2088 17f0 WARNING CloudCtrlImpl mb::common::json::JSONUtilities::ReadJSONFromFileEx "JSONUtilities.h" 87 "Could not open file for reading C:\ProgramData\Malwarebytes\MBAMService\config\CloudConfig.json" 12/03/25 " 16:40:40.074" 62231843 2088 17f0 WARNING CloudCtrlImpl mb::common::json::JSONUtilities::ReadJSONFromFile "JSONUtilities.h" 42 "Failed reading file C:\ProgramData\Malwarebytes\MBAMService\config\CloudConfig.json, error 2. Will try reading from the backup if it exists." 12/03/25 " 16:40:40.074" 62231843 2088 17f0 WARNING FileSystemUtils mb::common::io::FileSystemUtils::Copy "FileSystemUtils.cpp" 102 "File not found: C:\ProgramData\Malwarebytes\MBAMService\config\CloudConfig.json.bak" 12/03/25 " 16:40:40.074" 62231843 2088 17f0 WARNING CloudCtrlImpl mb::common::json::JSONUtilities::ReadJSONFromFile "JSONUtilities.h" 66 "Copy from backup failed for file C:\ProgramData\Malwarebytes\MBAMService\config\CloudConfig.json.bak. - 2" 12/03/25 " 16:40:40.074" 62231843 2088 17f0 INFO CloudCtrlImpl CloudControllerImplHelper::ReadConfig "CloudControllerImplHelper.cpp" 4645 "Config file C:\ProgramData\Malwarebytes\MBAMService\config\CloudConfig.json not found; using default values" 12/03/25 " 16:40:40.222" 62232000 2088 17f0 INFO ServiceControllerImpl ServiceControllerImplementation::StartCloudController "ServiceControllerImplementation.cpp" 2922 "Cloud Controller Started" 12/03/25 " 16:40:40.337" 62232109 2088 17f0 INFO TelemController CTelemetryController::Start_impl "TelemetryController.cpp" 168 "::Initialize" 12/03/25 " 16:40:43.516" 62235281 2088 17f0 INFO TelemCtrlImpl TelemetryControllerImpl::Initialize "TelemetryControllerImplHelper.cpp" 231 "Telemetry Controller 3.3.0 starting up" 12/03/25 " 16:40:43.616" 62235390 2088 17f0 WARNING TelemCtrlImpl mb::common::json::JSONUtilities::ReadJSONFromFileEx "JSONUtilities.h" 87 "Could not open file for reading C:\ProgramData\Malwarebytes\MBAMService\config\TelemCtrlConfig.json" 12/03/25 " 16:40:43.616" 62235390 2088 17f0 WARNING TelemCtrlImpl mb::common::json::JSONUtilities::ReadJSONFromFile "JSONUtilities.h" 42 "Failed reading file C:\ProgramData\Malwarebytes\MBAMService\config\TelemCtrlConfig.json, error 2. Will try reading from the backup if it exists." 12/03/25 " 16:40:43.616" 62235390 2088 17f0 WARNING FileSystemUtils mb::common::io::FileSystemUtils::Copy "FileSystemUtils.cpp" 102 "File not found: C:\ProgramData\Malwarebytes\MBAMService\config\TelemCtrlConfig.json.bak" 12/03/25 " 16:40:43.616" 62235390 2088 17f0 WARNING TelemCtrlImpl mb::common::json::JSONUtilities::ReadJSONFromFile "JSONUtilities.h" 66 "Copy from backup failed for file C:\ProgramData\Malwarebytes\MBAMService\config\TelemCtrlConfig.json.bak. - 2" 12/03/25 " 16:40:43.616" 62235390 2088 17f0 INFO TelemCtrlImpl TelemetryControllerImpl::ReadConfig "TelemetryControllerImplHelper.cpp" 1042 "Config file C:\ProgramData\Malwarebytes\MBAMService\config\TelemCtrlConfig.json not found; using default values" 12/03/25 " 16:40:43.669" 62235437 2088 17f0 WARNING TelemCtrlImpl mb::common::json::JSONUtilities::ReadJSONFromFileEx "JSONUtilities.h" 87 "Could not open file for reading C:\ProgramData\Malwarebytes\MBAMService\config\telemetry.json" 12/03/25 " 16:40:43.669" 62235437 2088 17f0 WARNING TelemCtrlImpl mb::common::json::JSONUtilities::ReadJSONFromFile "JSONUtilities.h" 42 "Failed reading file C:\ProgramData\Malwarebytes\MBAMService\config\telemetry.json, error 2. Will try reading from the backup if it exists." 12/03/25 " 16:40:43.669" 62235437 2088 17f0 WARNING FileSystemUtils mb::common::io::FileSystemUtils::Copy "FileSystemUtils.cpp" 102 "File not found: C:\ProgramData\Malwarebytes\MBAMService\config\telemetry.json.bak" 12/03/25 " 16:40:43.669" 62235437 2088 17f0 WARNING TelemCtrlImpl mb::common::json::JSONUtilities::ReadJSONFromFile "JSONUtilities.h" 66 "Copy from backup failed for file C:\ProgramData\Malwarebytes\MBAMService\config\telemetry.json.bak. - 2" 12/03/25 " 16:40:43.832" 62235609 2088 17f0 INFO ServiceControllerImpl ServiceControllerImplementation::StartTelemetryController "ServiceControllerImplementation.cpp" 2992 "Telemetry Controller Started" 12/03/25 " 16:40:43.933" 62235703 2088 17f0 INFO CleanController CCleanController::StartV2 "CleanController.cpp" 161 "Initializing CleanController" 12/03/25 " 16:40:44.302" 62236078 2088 17f0 INFO CleanControllerImpl CleanControllerImpl::Start "CleanControllerImpl.cpp" 161 "Starting Clean Controller Impl" 12/03/25 " 16:40:44.302" 62236078 2088 17f0 WARNING CleanControllerImpl mb::common::json::JSONUtilities::ReadJSONFromFileEx "JSONUtilities.h" 87 "Could not open file for reading C:\ProgramData\Malwarebytes\MBAMService\config\CleanControllerConfig.json" 12/03/25 " 16:40:44.302" 62236078 2088 17f0 WARNING CleanControllerImpl mb::common::json::JSONUtilities::ReadJSONFromFile "JSONUtilities.h" 42 "Failed reading file C:\ProgramData\Malwarebytes\MBAMService\config\CleanControllerConfig.json, error 2. Will try reading from the backup if it exists." 12/03/25 " 16:40:44.302" 62236078 2088 17f0 WARNING FileSystemUtils mb::common::io::FileSystemUtils::Copy "FileSystemUtils.cpp" 102 "File not found: C:\ProgramData\Malwarebytes\MBAMService\config\CleanControllerConfig.json.bak" 12/03/25 " 16:40:44.302" 62236078 2088 17f0 WARNING CleanControllerImpl mb::common::json::JSONUtilities::ReadJSONFromFile "JSONUtilities.h" 66 "Copy from backup failed for file C:\ProgramData\Malwarebytes\MBAMService\config\CleanControllerConfig.json.bak. - 2" 12/03/25 " 16:40:44.302" 62236078 2088 17f0 WARNING CleanControllerImpl CleanControllerImpl::ReadConfig "CleanControllerImpl.cpp" 376 "Failed to read config file C:\ProgramData\Malwarebytes\MBAMService\config\CleanControllerConfig.json" 12/03/25 " 16:40:44.387" 62236156 2088 064c INFO CleanControllerImpl CleanControllerImpl::ThreadLoop "CleanControllerImpl.cpp" 1055 "Initializing system paths and resolving DOR status" 12/03/25 " 16:40:44.387" 62236156 2088 064c INFO CleanControllerImpl CleanControllerImpl::ThreadLoop "CleanControllerImpl.cpp" 1086 "Processing pending actions" 12/03/25 " 16:40:44.519" 62236296 2088 17f0 INFO CleanController CCleanController::StartV2::::operator () "CleanController.cpp" 162 "CleanController initialization complete" 12/03/25 " 16:40:44.519" 62236296 2088 17f0 INFO ServiceControllerImpl ServiceControllerImplementation::StartCleanController "ServiceControllerImplementation.cpp" 3059 "Clean Controller Started" 12/03/25 " 16:40:45.036" 62236812 2088 064c INFO Actions ActionsManager::ProcessPendingActionsAfterReboot "ActionsManager.cpp" 1107 "Executing pending post cleanup actions" 12/03/25 " 16:40:45.036" 62236812 2088 064c INFO CleanControllerImpl CleanControllerImpl::ThreadLoop "CleanControllerImpl.cpp" 1204 "Initializing CLS Engine" 12/03/25 " 16:40:45.268" 62237046 2088 064c INFO CleanControllerImpl CleanControllerImpl::ThreadLoop "CleanControllerImpl.cpp" 1241 "Initializing swiss army SDK" 12/03/25 " 16:40:45.305" 62237078 2088 17f0 WARNING ScanControllerImpl mb::scancontrollerimpl::ScanConfigHandler::LoadConfig "ScanConfigHandler.cpp" 140 "Could not load config file C:\ProgramData\Malwarebytes\MBAMService\config\ScanConfig.json. Using default values." 12/03/25 " 16:40:46.007" 62237781 2088 064c INFO SwissarmyDDA DDAInstall "dda.cpp" 270 "Existing driver is not loaded." 12/03/25 " 16:40:46.416" 62238187 2088 064c INFO SwissarmyDDA DDAInstall "dda.cpp" 284 "Successfully installed swissarmy driver." 12/03/25 " 16:40:46.416" 62238187 2088 064c INFO SwissarmyShim SwissarmyShimImpl::InstallEx "SwissarmyShimImpl.cpp" 1757 "Swissarmy was successfully installed. DdaContext (000001A0C3F363B0), Mode (0), DriverName (MBAMSwissArmy), DeviceFileName (\\.\MBAMSwissArmy), LogFile (), BootStart (false)." 12/03/25 " 16:40:46.469" 62238234 2088 064c INFO CleanControllerImpl CleanDBParser::Parse "CleanDBParser.cpp" 22 "Parsing C:\ProgramData\Malwarebytes\MBAMService\clean.mbdb" 12/03/25 " 16:40:46.469" 62238234 2088 064c INFO GalaxyRuleParser mb::common::galaxyrules::SimpleRuleFileParserV2::Parse "GalaxyRuleParser.cpp" 3004 "Successfully parsed 979 records." 12/03/25 " 16:40:46.469" 62238234 2088 064c INFO CleanControllerImpl CleanControllerImpl::ThreadLoop "CleanControllerImpl.cpp" 1308 "Loading Hubble cache" 12/03/25 " 16:40:46.538" 62238312 2088 064c INFO CleanControllerImpl CleanControllerImpl::ThreadLoop "CleanControllerImpl.cpp" 1338 "Loading ARW Predetection cache" 12/03/25 " 16:40:46.538" 62238312 2088 064c INFO CleanControllerImpl CleanControllerImpl::ThreadLoop "CleanControllerImpl.cpp" 1353 "Loading user white rules" 12/03/25 " 16:40:46.538" 62238312 2088 064c INFO CleanControllerImpl CleanControllerImpl::ThreadLoop "CleanControllerImpl.cpp" 1365 "Starting white list manager" 12/03/25 " 16:40:46.601" 62238375 2088 064c INFO CleanControllerImpl CleanControllerImpl::ThreadLoop "CleanControllerImpl.cpp" 1404 "Loading Chrome sync db cache" 12/03/25 " 16:40:46.601" 62238375 2088 064c INFO CleanControllerImpl CleanControllerImpl::ThreadLoop "CleanControllerImpl.cpp" 1419 "Loading 7z" 12/03/25 " 16:40:46.654" 62238421 2088 064c INFO CleanControllerImpl CleanControllerImpl::ThreadLoop "CleanControllerImpl.cpp" 1436 "Starting restore engine" 12/03/25 " 16:40:46.654" 62238421 2088 064c INFO CleanControllerImpl CleanControllerImpl::ThreadLoop "CleanControllerImpl.cpp" 1471 "Initializing Browser SDK" 12/03/25 " 16:40:46.685" 62238453 2088 17f0 INFO SwissarmyShim SwissarmyShimImpl::InstallEx "SwissarmyShimImpl.cpp" 1757 "Swissarmy was successfully installed. DdaContext (000001A0C2B59900), Mode (1), DriverName (MBAMSwissArmy), DeviceFileName (\\.\MBAMSwissArmy), LogFile (), BootStart (false)." 12/03/25 " 16:40:47.356" 62239125 2088 2fa8 INFO LicenseControllerImpl mb::licensecontrollerimpl::BackendAPIs::BackendCheck "BackendAPIs.cpp" 3270 "Attempting Check" 12/03/25 " 16:40:47.387" 62239156 2088 064c INFO CleanControllerImpl CleanControllerImpl::ThreadLoop "CleanControllerImpl.cpp" 1529 "Entering into main loop" 12/03/25 " 16:40:47.672" 62239437 2088 17f0 INFO SPShim SPShimImpl::Initialize "SpShimImpl.cpp" 65 "Initialize Shim - ref count (0)" 12/03/25 " 16:40:48.158" 62239937 2088 17f0 INFO SPShim SPShimImpl::InitializeInternal "SpShimImpl.cpp" 126 "SelfProtection dll was successfully loaded. SpFilePath=." 12/03/25 " 16:40:48.158" 62239937 2088 17f0 INFO SelfProtectionSDK SpUserImpl::SetLogging "SpUserImpl.cpp" 52 "Start Logging TMF file path C:\Program Files\Malwarebytes\Anti-Malware\sdk\MbamChameleon.tmf" 12/03/25 " 16:40:48.289" 62240062 2088 2fa8 INFO LicenseControllerImpl mb::licensecontrollerimpl::BackendAPIs::POSTRequestImpl "BackendAPIs.cpp" 1961 "X-Correlation-Id: 7328eee7-a52b-43bd-be2f-245c3e5f030c" 12/03/25 " 16:40:48.437" 62240203 2088 2fa8 INFO LicenseControllerImpl mb::licensecontrollerimpl::LicenseConfigHandler::LicenseState "LicenseConfigHandler.cpp" 1395 "License state changed." 12/03/25 " 16:40:48.437" 62240203 2088 2fa8 INFO LicenseControllerImpl mb::licensecontrollerimpl::LicenseConfigHandler::SendLicenseStateChangedNotification "LicenseConfigHandler.cpp" 1784 "Called License state changed callback." 12/03/25 " 16:40:48.437" 62240203 2088 2fa8 INFO LicenseControllerImpl mb::licensecontrollerimpl::LicenseConfigHandler::LicenseState "LicenseConfigHandler.cpp" 1403 "LicenseStateChangedNotification Sent with license state [1]." 12/03/25 " 16:40:48.691" 62240468 2088 2fa8 INFO LicenseControllerImpl mb::licensecontrollerimpl::BackendAPIs::Register "BackendAPIs.cpp" 2672 "Registration successful" 12/03/25 " 16:40:46.417" 62238183 0004 1f80 INFO MBAMSwissArmy DriverEntry "swissarmy.c" 171 "MBAMSwissArmy service started. (4.4.0.222)" 12/03/25 " 16:40:49.593" 62241359 2088 2fa8 INFO LicenseControllerImpl mb::licensecontrollerimpl::BackendAPIs::POSTRequestImpl "BackendAPIs.cpp" 1961 "X-Correlation-Id: fc03a7d1-6bde-4eb8-b932-7e1395b77100" 12/03/25 " 16:40:50.911" 62242687 2088 17f0 INFO SelfProtectionSDK SpUserImpl::Install "SpUserImpl.cpp" 126 "SelfProtection driver was successfully installed. Path= Mode=<1>." 12/03/25 " 16:40:50.911" 62242687 2088 17f0 INFO SelfProtectionSDK SpUserImpl::Install "SpUserImpl.cpp" 160 "SelfProtection StartDriver was already started - 0" 12/03/25 " 16:40:50.952" 62242718 2088 17f0 INFO ServiceControllerImpl ServiceControllerImplementation::StartScanController "ServiceControllerImplementation.cpp" 3094 "Scan Controller Started" 12/03/25 " 16:40:50.968" 62242734 2088 23f0 INFO ScanControllerImpl mb::scancontrollerimpl::ScanScheduler::UpdateScheduledScans "ScanScheduler.cpp" 1402 "License state changed from Unknown to Free." 12/03/25 " 16:40:51.638" 62243406 2088 17f0 INFO RTPControllerImpl mb::rtpcontrollerimpl::RTPControllerImpl::InitializeImpl "RTPControllerImplHelper.cpp" 351 "Initializing RtpControllerImpl.dll (3.3.0.1241)" 12/03/25 " 16:40:51.738" 62243515 2088 17f0 INFO RTP mb::rtpcontrollerimpl::thread::SimpleThreadPool::GrowThreadPool "SimpleThreadPool.cpp" 224 "ParallelAMEDDSThreadPool: Growing thread pool" 12/03/25 " 16:40:51.738" 62243515 2088 17f0 INFO RTP mb::rtpcontrollerimpl::thread::SimpleThreadPool::GrowThreadPool "SimpleThreadPool.cpp" 224 "ParallelAMEDDSThreadPool: Growing thread pool" 12/03/25 " 16:40:51.738" 62243515 2088 17f0 INFO RTP mb::rtpcontrollerimpl::thread::SimpleThreadPool::GrowThreadPool "SimpleThreadPool.cpp" 224 "ParallelAMEDDSThreadPool: Growing thread pool" 12/03/25 " 16:40:51.738" 62243515 2088 17f0 INFO RTP mb::rtpcontrollerimpl::thread::SimpleThreadPool::GrowThreadPool "SimpleThreadPool.cpp" 224 "ParallelAMEDDSThreadPool: Growing thread pool" 12/03/25 " 16:40:51.738" 62243515 2088 17f0 INFO RTP mb::rtpcontrollerimpl::thread::SimpleThreadPool::GrowThreadPool "SimpleThreadPool.cpp" 224 "ParallelAMEDDSThreadPool: Growing thread pool" 12/03/25 " 16:40:51.738" 62243515 2088 17f0 INFO RTP mb::rtpcontrollerimpl::thread::SimpleThreadPool::GrowThreadPool "SimpleThreadPool.cpp" 224 "ParallelAMEDDSThreadPool: Growing thread pool" 12/03/25 " 16:40:51.738" 62243515 2088 17f0 INFO RTP mb::rtpcontrollerimpl::thread::SimpleThreadPool::GrowThreadPool "SimpleThreadPool.cpp" 224 "ParallelAMEDDSThreadPool: Growing thread pool" 12/03/25 " 16:40:51.738" 62243515 2088 17f0 INFO RTP mb::rtpcontrollerimpl::thread::SimpleThreadPool::GrowThreadPool "SimpleThreadPool.cpp" 224 "ParallelAMEDDSThreadPool: Growing thread pool" 12/03/25 " 16:40:51.738" 62243515 2088 17f0 WARNING RTPControllerImpl mb::rtpcontrollerimpl::RTPConfigHandler::LoadConfig "RTPConfigHandler.cpp" 173 "Config file not found C:\ProgramData\Malwarebytes\MBAMService\config\RtpConfig.json. Using default values." 12/03/25 " 16:40:51.885" 62243656 2088 17f0 INFO RTPControllerImpl mb::rtpcontrollerimpl::AppControl::AppControlImpl::Initialize "AppControlImpl.cpp" 38 "Starting AppControlImpl" 12/03/25 " 16:40:51.901" 62243671 2088 17f0 INFO RTPControllerImpl mb::rtpcontrollerimpl::AppControl::AppControlImpl::Initialize::::operator () "AppControlImpl.cpp" 39 "Exiting AppControlImpl::Initialize()" 12/03/25 " 16:40:51.901" 62243671 2088 17f0 INFO RTPControllerImpl mb::rtpcontrollerimpl::SilentBlock::SilentBlockImpl::Initialize "SilentBlockImpl.cpp" 40 "Starting SilentBlockImpl" 12/03/25 " 16:40:51.923" 62243687 2088 17f0 INFO RTPControllerImpl mb::rtpcontrollerimpl::SilentBlock::SilentBlockImpl::Initialize::::operator () "SilentBlockImpl.cpp" 41 "Exiting SilentBlockImpl::Initialize()" 12/03/25 " 16:40:51.923" 62243687 2088 17f0 INFO ServiceControllerImpl ServiceControllerImplementation::StartRtpController "ServiceControllerImplementation.cpp" 3146 "RTP Controller Started" 12/03/25 " 16:40:51.923" 62243687 2088 17f0 INFO MWACControllerCOM CMWACController::InitializeV2 "MWACController.cpp" 348 "Initializing MWAC Controller" 12/03/25 " 16:40:51.923" 62243687 2088 17f0 INFO MWACControllerCOM CMWACController::InitializeV2::::operator () "MWACController.cpp" 349 "MWAC Controller initialization complete" 12/03/25 " 16:40:50.921" 62242700 2088 17f0 INFO MBAMChameleon RegisterALEResourceAssignmnentCallout "IG2ProtNet.c" 1667 "ALE Resource Assignment callout(797d6309-4a5e-4fcc-b57b-6627959006aa) registered succesfully!" 12/03/25 " 16:40:50.924" 62242703 2088 17f0 INFO MBAMChameleon RegisterALEResourceAssignmnentCallout "IG2ProtNet.c" 1667 "ALE Resource Assignment callout(2d21ccdb-0383-4ba4-81ed-7a7d58971107) registered succesfully!" 12/03/25 " 16:40:50.924" 62242703 2088 17f0 INFO MBAMChameleon ProcsSetState "IG2ProtProcs.c" 636 "Process Protection status changed to: 0x00000001(true)!" 12/03/25 " 16:40:50.924" 62242703 2088 17f0 INFO MBAMChameleon RegSetState "IG2ProtReg.c" 291 "Registry Protection status changed to: 0x00000001(true)!" 12/03/25 " 16:40:50.924" 62242703 2088 17f0 INFO MBAMChameleon FsSetState "IG2ProtFs.c" 563 "File System Protection status changed to: 0x00000001(true)!" 12/03/25 " 16:40:50.924" 62242703 2088 17f0 INFO MBAMChameleon NetSetState "IG2ProtNet.c" 1755 "Network Protection status changed to: 0x00000001(true)!" 12/03/25 " 16:40:50.924" 62242703 2088 17f0 INFO MBAMChameleon ObjSetState "IG2ProtObj.c" 325 "Object Manager Protection status changed to: 0x00000001(true)!" 12/03/25 " 16:40:50.924" 62242703 2088 17f0 INFO MBAMChameleon DispatchIoctl "watchdog-common.c" 2376 "Initialized IG" 12/03/25 " 16:40:52.973" 62244750 2088 17f0 INFO MwacControllerImpl mb::mwaccontrollerimpl::MwacControllerImpl::Initialize "MWACControllerImplHelper.cpp" 1153 "Initializing MWACControllerImpl.dll (3.2.0.720)" 12/03/25 " 16:40:52.973" 62244750 2088 17f0 INFO MwacControllerImpl mb::mwaccontrollerimpl::MwacConfigHandler::CreateMwacConfigFile "MwacConfigHandler.cpp" 431 "Config file not found C:\ProgramData\Malwarebytes\MBAMService\config\MwacControllerConfig.json. Using default values." 12/03/25 " 16:40:53.405" 62245171 2088 17f0 INFO ServiceControllerImpl ServiceControllerImplementation::StartMWACController "ServiceControllerImplementation.cpp" 3201 "MWAC Controller Started" 12/03/25 " 16:40:53.991" 62245765 2088 17f0 INFO ARWConfigHandler mb::arwcontrollerimpl::ArwConfigHandler::LoadConfig "ArwConfigHandler.cpp" 55 "Config file not found C:\ProgramData\Malwarebytes\MBAMService\config\ArwControllerConfig.json. Using default values." 12/03/25 " 16:40:54.092" 62245859 2088 17f0 INFO ServiceControllerImpl ServiceControllerImplementation::StartArwController "ServiceControllerImplementation.cpp" 3255 "ARW Controller Started" 12/03/25 " 16:40:54.593" 62246359 2088 17f0 WARNING AEControllerImpl mb::aecontrollerimpl::AEConfigHandler::LoadConfig "AeConfigHandler.cpp" 205 "Config file not found C:\ProgramData\Malwarebytes\MBAMService\config\AeConfig.json. Using default values." 12/03/25 " 16:40:54.808" 62246578 2088 17f0 ERROR AeSDKImpl AeSDKImpl::MbaeSetExclusions "AeSDKImpl.cpp" 358 "MbaeSetExclusions failed. status(16)" 12/03/25 " 16:40:54.808" 62246578 2088 17f0 ERROR AEControllerImpl mb::aecontrollerimpl::AeExclusionsHandler::InitializeExclusions "ExclusionsHandler.cpp" 97 "Could not configure exclusions in MbaeSdk (16)" 12/03/25 " 16:40:56.231" 62248000 2088 17f0 WARNING AEControllerImpl mb::aecontrollerimpl::AEControllerImplHelper::UpdateDynamicConfig "AEControllerImplHelper.cpp" 3583 "Did not find any config value pairs in section MACRO4ABUSE3" 12/03/25 " 16:40:57.009" 62248781 2088 17f0 ERROR AeSDKImpl AeSDKImpl::MbaeSetConfig "AeSDKImpl.cpp" 264 "MbaeSetConfig failed - 16" 12/03/25 " 16:40:57.009" 62248781 2088 17f0 ERROR AEControllerImpl mb::aecontrollerimpl::AEControllerImplHelper::AeSetOption "AEControllerImplHelper.cpp" 1499 "Error configuring mbae sdk engine (16)" 12/03/25 " 16:40:57.024" 62248796 2088 17f0 ERROR AeSDKImpl AeSDKImpl::MbaeSetConfig "AeSDKImpl.cpp" 264 "MbaeSetConfig failed - 16" 12/03/25 " 16:40:57.024" 62248796 2088 17f0 ERROR AEControllerImpl mb::aecontrollerimpl::AEControllerImplHelper::AeSetOption "AEControllerImplHelper.cpp" 1499 "Error configuring mbae sdk engine (16)" 12/03/25 " 16:40:57.062" 62248828 2088 17f0 ERROR AeSDKImpl AeSDKImpl::MbaeSetConfig "AeSDKImpl.cpp" 264 "MbaeSetConfig failed - 16" 12/03/25 " 16:40:57.062" 62248828 2088 17f0 ERROR AEControllerImpl mb::aecontrollerimpl::AEControllerImplHelper::AeSetOption "AEControllerImplHelper.cpp" 1499 "Error configuring mbae sdk engine (16)" 12/03/25 " 16:40:57.062" 62248828 2088 17f0 ERROR AeSDKImpl AeSDKImpl::MbaeSetConfig "AeSDKImpl.cpp" 264 "MbaeSetConfig failed - 16" 12/03/25 " 16:40:57.062" 62248828 2088 17f0 ERROR AEControllerImpl mb::aecontrollerimpl::AEControllerImplHelper::AeSetOption "AEControllerImplHelper.cpp" 1499 "Error configuring mbae sdk engine (16)" 12/03/25 " 16:40:57.140" 62248906 2088 17f0 INFO AEControllerImpl mb::aecontrollerimpl::AEControllerImplHelper::InitializeV2 "AEControllerImplHelper.cpp" 381 "Successfully Initialized AeControllerImpl 3.2.0.411" 12/03/25 " 16:40:57.156" 62248921 2088 17f0 INFO ServiceControllerImpl ServiceControllerImplementation::StartAEController "ServiceControllerImplementation.cpp" 3308 "Anti-Exploit Controller Started" 12/03/25 " 16:40:57.479" 62249250 2088 17f0 INFO SPControllerImpl mb::spcontrollerimpl::SPControllerImpl::InitializeImpl "SPControllerImplHelper.cpp" 103 "Initializing SPControllerImpl.dll (3.2.0.340)" 12/03/25 " 16:40:57.611" 62249375 2088 17f0 INFO SelfProtectionSDK SpUserImpl::SetLogCallback "SpUserImpl.cpp" 332 "Enter SetLogCallback Installed = 1 loggingStarted = 1." 12/03/25 " 16:40:57.611" 62249375 2088 17f0 INFO SelfProtectionSDK SpUserImpl::SetLogCallback "SpUserImpl.cpp" 359 "loggingStarted = 2." 12/03/25 " 16:40:57.611" 62249375 2088 17f0 INFO SPShim SPShimImpl::Initialize "SpShimImpl.cpp" 65 "Initialize Shim - ref count (1)" 12/03/25 " 16:40:57.626" 62249390 2088 17f0 WARNING SPControllerImpl mb::common::json::JSONUtilities::ReadJSONFromFileEx "JSONUtilities.h" 87 "Could not open file for reading C:\ProgramData\Malwarebytes\MBAMService\Config\SpConfigFile.json" 12/03/25 " 16:40:57.626" 62249390 2088 17f0 WARNING SPControllerImpl mb::common::json::JSONUtilities::ReadJSONFromFile "JSONUtilities.h" 42 "Failed reading file C:\ProgramData\Malwarebytes\MBAMService\Config\SpConfigFile.json, error 2. Will try reading from the backup if it exists." 12/03/25 " 16:40:57.626" 62249390 2088 17f0 WARNING FileSystemUtils mb::common::io::FileSystemUtils::Copy "FileSystemUtils.cpp" 101 "File not found: C:\ProgramData\Malwarebytes\MBAMService\Config\SpConfigFile.json.bak" 12/03/25 " 16:40:57.626" 62249390 2088 17f0 WARNING SPControllerImpl mb::common::json::JSONUtilities::ReadJSONFromFile "JSONUtilities.h" 66 "Copy from backup failed for file C:\ProgramData\Malwarebytes\MBAMService\Config\SpConfigFile.json.bak. - 2" 12/03/25 " 16:40:57.626" 62249390 2088 17f0 WARNING SPControllerImpl mb::spcontrollerimpl::SpConfigHandler::LoadConfig "SpConfigHandler.cpp" 330 "Config file not found C:\ProgramData\Malwarebytes\MBAMService\Config\SpConfigFile.json. Using default values." 12/03/25 " 16:40:57.679" 62249453 2088 17f0 INFO SPControllerImpl mb::spcontrollerimpl::SPShimModuleLoader::SPShimSetVerificationMode "SPShimModuleLoader.cpp" 532 "verification mode = 0 ." 12/03/25 " 16:40:57.679" 62249453 2088 17f0 INFO SPShim SPShimImpl::SetVerificationMode "SpShimImpl.cpp" 543 "Verification mode = 0." 12/03/25 " 16:40:57.726" 62249500 2088 17f0 INFO SPControllerImpl mb::spcontrollerimpl::SPControllerImpl::InitializeImpl "SPControllerImplHelper.cpp" 200 "Successfully initialized the SPControllerImpl, spFolderPath=[C:\Program Files\Malwarebytes\Anti-Malware]." 12/03/25 " 16:40:57.726" 62249500 2088 17f0 INFO ServiceControllerImpl ServiceControllerImplementation::StartSpController "ServiceControllerImplementation.cpp" 2957 "Self-Protection Controller Started" 12/03/25 " 16:40:58.112" 62249890 2088 17f0 INFO VPNControllerImpl mb::vpncontrollerimpl::VPNControllerImpl::Initialize "VPNControllerImpl.cpp" 213 "Starting VPNControllerImpl" 12/03/25 " 16:40:58.112" 62249890 2088 17f0 INFO VPNControllerImpl ConfigHandler::LoadConfig "ConfigHandlerImpl.h" 85 "Creating default configuration and saving to C:\ProgramData\Malwarebytes\MBAMService\config\VPNControllerConfig.json." 12/03/25 " 16:40:58.128" 62249906 2088 17f0 INFO VPNControllerImpl ConfigHandler::LoadConfig "ConfigHandlerImpl.h" 85 "Creating default configuration and saving to C:\ProgramData\Malwarebytes\MBAMService\config\VPNServerListConfig.json." 12/03/25 " 16:40:58.143" 62249921 2088 17f0 INFO VPNControllerImpl Initialize_LoadConfig "VPNControllerImpl.cpp" 158 "Migrated provider to Malwarebytes backend" 12/03/25 " 16:40:58.143" 62249921 2088 17f0 INFO VPNControllerImpl mb::vpncontrollerimpl::VPNControllerImpl::Initialize::::operator () "VPNControllerImpl.cpp" 214 "Exiting VPNControllerImpl::Initialize()" 12/03/25 " 16:40:58.143" 62249921 2088 17f0 INFO VPNControllerCOM CVPNController::Start "VPNController.cpp" 131 "VPNController Implementation DLL has been successfully loaded and initialized." 12/03/25 " 16:40:58.143" 62249921 2088 17f0 INFO ServiceControllerImpl ServiceControllerImplementation::StartVPNController "ServiceControllerImplementation.cpp" 3430 "VPN Controller Started" 12/03/25 " 16:40:58.143" 62249921 2088 17f0 INFO ServiceControllerImpl ServiceControllerImplementation::StartV2 "ServiceControllerImplementation.cpp" 617 "Start Service Controller complete" 12/03/25 " 16:40:58.165" 62249937 2088 1e54 INFO ServiceControllerImpl ServiceControllerImplementation::PowerSourceNotificationImpl "ServiceControllerImplementation.cpp" 3862 "Notifying controllers of power source change. System is plugged in." 12/03/25 " 16:40:58.165" 62249937 2088 1e54 INFO ServiceControllerImpl ServiceControllerImplementation::PowerIdleNotificationImpl "ServiceControllerImplementation.cpp" 3843 "Notifying controllers of power idle change. System is not idle." 12/03/25 " 16:40:58.297" 62250062 2088 0f50 INFO LicenseControllerImpl mb::licensecontrollerimpl::BackendAPIs::BackendCheck "BackendAPIs.cpp" 3270 "Attempting Check" 12/03/25 " 16:40:58.667" 62250437 2088 07fc INFO LicenseControllerImpl mb::licensecontrollerimpl::BackendAPIs::POSTRequestImpl "BackendAPIs.cpp" 1961 "X-Correlation-Id: 86019acd-b8db-495a-acd7-61b00850afbd" 12/03/25 " 16:40:59.247" 62251015 2088 0f50 INFO LicenseControllerImpl mb::licensecontrollerimpl::BackendAPIs::POSTRequestImpl "BackendAPIs.cpp" 1961 "X-Correlation-Id: b2bcd18b-add1-4c54-b2fd-5be3328adaaf" 12/03/25 " 16:41:03.377" 62255156 2088 2ba8 INFO ServiceControllerImpl ServiceControllerImplementation::StartApp "ServiceControllerImplementation.cpp" 112 "Starting 'C:\Program Files\Malwarebytes\Anti-Malware\Malwarebytes.exe' in session 0x2" 12/03/25 " 16:41:08.513" 62260281 2088 0f50 WARNING PoliciesControllerImpl mb::policiescontrollerimpl::PoliciesConfigHandler::LoadClientData "PoliciesConfigHandler.cpp" 1488 "Could not open file for reading C:\ProgramData\Malwarebytes\MBAMService\config\MbamClientConfig.json" 12/03/25 " 16:41:08.513" 62260281 2088 0f50 WARNING PoliciesControllerImpl mb::policiescontrollerimpl::PoliciesConfigHandler::LoadClientData "PoliciesConfigHandler.cpp" 1488 "Could not open file for reading C:\ProgramData\Malwarebytes\MBAMService\config\UI_ApplicationSettings.json" 12/03/25 " 16:41:09.315" 62261093 2088 0f50 ERROR RTPControllerImpl mb::rtpcontrollerimpl::MBAMShimModuleLoader::MBAMShimClearEngineCaches "MBAMShimModuleLoader.cpp" 396 "Cannot clear engine caches! MBAMShim is not loaded." 12/03/25 " 16:41:21.170" 62272937 2088 0f50 WARNING PoliciesControllerImpl mb::policiescontrollerimpl::PoliciesConfigHandler::LoadClientData "PoliciesConfigHandler.cpp" 1488 "Could not open file for reading C:\ProgramData\Malwarebytes\MBAMService\config\MbamClientConfig.json" 12/03/25 " 16:41:39.436" 62291203 2088 3144 ERROR MwacControllerImpl mb::mwaccontrollerimpl::MwacShimModuleLoader::ValidateFuncAddress "MwacShimModuleLoader.cpp" 173 "Web Access Control Sdk method 'SetFeatureFlags' is not available, impl module not loaded!" 12/03/25 " 16:42:22.004" 3999982482 2f04 0009 ERROR Malwarebytes "GetStringFromEndpointAsync" """MbamUI.Core.OSFacilities""" 254 "System.Net.Http.HttpRequestException: Response status code does not indicate success: 502 (Bad Gateway). at System.Net.Http.HttpResponseMessage.EnsureSuccessStatusCode() at MbamUI.Core.OSFacilities.GetStringFromEndpointAsync(String endpointUrl)" 12/03/25 " 16:42:22.006" 3999995771 2f04 0007 WARNING Malwarebytes "Execute" """MbamUI.Services.IrisService""" 87 "Failed to get raw Iris JSON from endpoint, using cached control statement chain" 12/03/25 " 16:42:22.007" 4000005265 2f04 0007 ERROR Malwarebytes "GetCachedControlStatementChain" """MbamUI.Services.IrisService""" 276 "No cached Iris data" 12/03/25 " 16:42:22.007" 4000008713 2f04 0007 ERROR Malwarebytes "Execute" """MbamUI.Services.IrisService""" 91 "Unable to get any control statement chain, can't run Iris" 12/03/25 " 16:43:12.397" 62384171 2088 3144 INFO LicenseControllerImpl mb::licensecontrollerimpl::LicenseControllerImplV2::StartV2Trial "LicenseControllerImplV2.cpp" 918 "StartV2Trial 1" 12/03/25 " 16:43:13.048" 62384812 2088 3144 INFO LicenseControllerImpl mb::licensecontrollerimpl::BackendAPIs::POSTRequestImpl "BackendAPIs.cpp" 1961 "X-Correlation-Id: 4b31f99d-f745-4a98-9bf9-659111eaf213" 12/03/25 " 16:43:13.062" 62384828 2088 3144 INFO LicenseControllerImpl mb::licensecontrollerimpl::LicenseConfigHandler::LicenseState "LicenseConfigHandler.cpp" 1395 "License state changed." 12/03/25 " 16:43:13.062" 62384828 2088 3144 INFO LicenseControllerImpl mb::licensecontrollerimpl::LicenseConfigHandler::SendLicenseStateChangedNotification "LicenseConfigHandler.cpp" 1784 "Called License state changed callback." 12/03/25 " 16:43:13.062" 62384828 2088 3144 INFO LicenseControllerImpl mb::licensecontrollerimpl::LicenseConfigHandler::LicenseState "LicenseConfigHandler.cpp" 1403 "LicenseStateChangedNotification Sent with license state [2]." 12/03/25 " 16:43:13.514" 62385281 2088 23f0 INFO ScanControllerImpl mb::scancontrollerimpl::ScanScheduler::UpdateScheduledScans "ScanScheduler.cpp" 1351 "License state changed from Free to Trial." 12/03/25 " 16:43:13.514" 62385281 2088 23f0 INFO ScanControllerImpl mb::scancontrollerimpl::ScanScheduler::UpdateScheduledScans "ScanScheduler.cpp" 1358 "There are no scheduled scans. Adding a default daily scan." 12/03/25 " 16:43:13.536" 62385312 2088 1eb4 INFO RTPControllerCOM CRTPController::StateChangedCallback::::operator () "RTPController.cpp" 1102 "Post callback : StateChangedCallback Fire_StateChangedCallback started" 12/03/25 " 16:43:13.551" 62385328 2088 23f0 INFO MwacControllerImpl mb::mwaccontrollerimpl::MwacControllerImpl::SetLicenseState "MWACControllerImplHelper.cpp" 5418 "Entering SetLicenseState Current State is [Not Available]; New License State is [Trial]" 12/03/25 " 16:43:13.629" 62385406 2088 314c INFO SPShim SPShimImpl::Initialize "SpShimImpl.cpp" 65 "Initialize Shim - ref count (2)" 12/03/25 " 16:43:13.636" 62385406 2088 314c INFO SelfProtectionSDK CControlWatchdogDriver::Install "ControlWatchdogDriver.cpp" 165 "SelfProtection driver refcount was incremented to 2" 12/03/25 " 16:43:13.636" 62385406 2088 314c INFO SelfProtectionSDK SpUserImpl::Install "SpUserImpl.cpp" 126 "SelfProtection driver was successfully installed. Path= Mode=<1>." 12/03/25 " 16:43:13.636" 62385406 2088 314c INFO SelfProtectionSDK SpUserImpl::Install "SpUserImpl.cpp" 160 "SelfProtection StartDriver was already started - 0" 12/03/25 " 16:43:13.868" 62385640 2088 0020 INFO AEControllerImpl mb::aecontrollerimpl::AEControllerImplHelper::LoadAeSdk "AEControllerImplHelper.cpp" 390 "Load and initialize the MbaeSdk" 12/03/25 " 16:43:13.868" 62385640 2088 0020 INFO AEControllerImpl mb::aecontrollerimpl::AESDKModuleLoader::AeSDKGetSdkVersion "AeSDKModuleLoader.cpp" 110 "Getting SDK version" 12/03/25 " 16:43:13.868" 62385640 2088 23f0 INFO SPControllerImpl mb::spcontrollerimpl::SPControllerImpl::SetLicenseState "SPControllerImplHelper.cpp" 1424 "Setting SpLicenseState to [2]" 12/03/25 " 16:43:13.868" 62385640 2088 23f0 INFO SPControllerImpl mb::spcontrollerimpl::SPControllerImpl::StartProtection "SPControllerImplHelper.cpp" 1223 "Enter StartProtection for SP controller." 12/03/25 " 16:43:13.868" 62385640 2088 23f0 INFO SPControllerImpl mb::spcontrollerimpl::SPControllerImpl::StartProtection "SPControllerImplHelper.cpp" 1232 "start mode == 1." 12/03/25 " 16:43:13.868" 62385640 2088 23f0 INFO SelfProtectionSDK CControlWatchdogDriver::Install "ControlWatchdogDriver.cpp" 165 "SelfProtection driver refcount was incremented to 3" 12/03/25 " 16:43:13.868" 62385640 2088 23f0 INFO SelfProtectionSDK SpUserImpl::Install "SpUserImpl.cpp" 126 "SelfProtection driver was successfully installed. Path= Mode=<1>." 12/03/25 " 16:43:13.868" 62385640 2088 23f0 INFO SelfProtectionSDK SpUserImpl::Install "SpUserImpl.cpp" 160 "SelfProtection StartDriver was already started - 0" 12/03/25 " 16:43:13.868" 62385640 2088 23f0 INFO SelfProtectionSDK SpUserImpl::ChangeMode "SpUserImpl.cpp" 872 "SelfProtection Setting Auto start." 12/03/25 " 16:43:14.624" 62386390 2088 2530 INFO MwacLib MwacLibImpl::Initialize "MwacLibImpl.cpp" 130 "Initializing MWAC SDK [1.1.0.340]..." 12/03/25 " 16:43:14.654" 62386421 2088 0020 INFO AeSDKImpl AeSDKImpl::MbaeLoad "AeSDKImpl.cpp" 559 "mbae-api-na.dll was successfully loaded. aePath=." 12/03/25 " 16:43:14.715" 62386484 2088 2274 INFO ARWRulesHandler mb::arwcontrollerimpl::ArwRulesHandler::LoadConfig "RulesHandler.cpp" 43 "Config file not found C:\ProgramData\Malwarebytes\MBAMService\config\ArwRulesConfig.json. Using default values." 12/03/25 " 16:43:14.887" 62386656 2088 1ed8 INFO ArwSDK ArwLib::Globals::Start "ArwLib.Globals.cpp" 385 "tid: 2274 - Starting SDK..." 12/03/25 " 16:43:14.887" 62386656 2088 314c INFO MBAMShimImpl MBAMShimImpl::InitializeInternal "MBAMShimImpl.cpp" 156 "MBAMCore v3.1.0.181 was successfully loaded. CoreFilePath=." 12/03/25 " 16:43:14.159" 62385938 2088 23f0 WARNING MBAMChameleon SearchForCert "fileverify.cpp" 2517 "Parser returns c000000d" 12/03/25 " 16:43:14.164" 62385943 2088 23f0 INFO MBAMChameleon DispatchIoctl "watchdog-common.c" 2408 "!Enable" 12/03/25 " 16:43:14.476" 62386255 2088 23f0 WARNING MBAMChameleon SearchForCert "fileverify.cpp" 2517 "Parser returns c000000d" 12/03/25 " 16:43:14.481" 62386260 2088 23f0 INFO MBAMChameleon AddToTrustedProcessList "ProcProt.c" 964 "Secure process: (0000000000002088) \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe" 12/03/25 " 16:43:14.492" 62386271 2088 23f0 WARNING MBAMChameleon SearchForCert "fileverify.cpp" 2517 "Parser returns c000000d" 12/03/25 " 16:43:14.494" 62386273 2088 23f0 INFO MBAMChameleon AddToTrustedProcessList "ProcProt.c" 964 "Secure process: (0000000000002F04) \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\Malwarebytes.exe" 12/03/25 " 16:43:14.607" 62386386 2088 23f0 WARNING MBAMChameleon SearchForCert "fileverify.cpp" 2517 "Parser returns c000000d" 12/03/25 " 16:43:14.611" 62386390 2088 23f0 INFO MBAMChameleon AddToTrustedProcessList "ProcProt.c" 964 "Secure process: (0000000000000FB4) \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\MbamBgNativeMsg.exe" 12/03/25 " 16:43:15.179" 62386953 2088 23f0 INFO SelfProtectionSDK SpUserImpl::Enable "SpUserImpl.cpp" 785 "SelfProtection driver was successfully enabled." 12/03/25 " 16:43:15.290" 62387062 2088 23f0 ERROR SelfProtectionSDK SpUserImpl::SetGpIfeoProtection "SpUserImpl.cpp" 1039 "SelfProtection Failed to remove hash LE=0x57 (0 - 1)" 12/03/25 " 16:43:15.833" 62387609 2088 314c INFO DDSScanner DDSScanner::SetIGFiltersOverride "DDSScanner.cpp" 1924 "IGFiltersOverride = false." 12/03/25 " 16:43:14.638" 62386417 0004 18ec WARNING MBAMChameleon ScrubCertificateRevocationListsWorker "watchdog-common.c" 958 "Failed to open user revocation list (0xc0000034(STATUS_OBJECT_NAME_NOT_FOUND)) (S-1-5-21-504369874-3521093726-15342627-1001_Classes\Software\Microsoft\SystemCertificates\Disallowed\Certificates)" 12/03/25 " 16:43:14.638" 62386417 0004 18ec WARNING MBAMChameleon ScrubCertificateRevocationListsWorker "watchdog-common.c" 958 "Failed to open user revocation list (0xc0000034(STATUS_OBJECT_NAME_NOT_FOUND)) (S-1-5-21-504369874-3521093726-15342627-1001_Classes\Software\Policies\Microsoft\SystemCertificates\Disallowed\Certificates)" 12/03/25 " 16:43:16.297" 62388062 2088 1ed8 INFO ArwSDK ArwLib::Globals::Start "ArwLib.Globals.cpp" 576 "tid: 2274 - Started SDK." 12/03/25 " 16:43:16.458" 62388234 2088 2530 INFO MwacLib MwacLibImpl::Initialize "MwacLibImpl.cpp" 185 "Successfully initialized MWAC SDK [1.1.0.340]." 12/03/25 " 16:43:16.801" 62388578 2088 23f0 INFO SelfProtectionSDK SpUserImpl::ChangeMode "SpUserImpl.cpp" 872 "SelfProtection Setting Auto start." 12/03/25 " 16:43:16.801" 62388578 2088 23f0 INFO SPControllerImpl mb::spcontrollerimpl::SPControllerImpl::SyncMountBlockState "SPControllerImplHelper.cpp" 1814 "Disable automatic mount blocking" 12/03/25 " 16:43:16.872" 62388640 2088 2530 INFO MwacControllerImpl mb::mwaccontrollerimpl::MwacControllerImpl::InitializeMwacSdk "MWACControllerImplHelper.cpp" 1826 "Initialization succeeded" 12/03/25 " 16:43:16.882" 62388656 2088 2530 INFO MwacControllerImpl mb::mwaccontrollerimpl::MwacControllerImpl::SetLicenseState::::operator () "MWACControllerImplHelper.cpp" 5484 "Successfully disabled BFP for Consumer by default on license activation" 12/03/25 " 16:43:17.033" 62388812 2088 2274 INFO ARWControllerImpl mb::arwcontrollerimpl::ArwControllerImpl::StartArwProtection "ArwControllerImplHelper.cpp" 951 "Anti-Ransomware protection has been started." 12/03/25 " 16:43:15.060" 62386839 2088 23f0 WARNING MBAMChameleon SearchForCert "fileverify.cpp" 2517 "Parser returns c000000d" 12/03/25 " 16:43:15.065" 62386844 2088 23f0 INFO MBAMChameleon AddToTrustedProcessList "ProcProt.c" 964 "Secure process: (0000000000002088) \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe" 12/03/25 " 16:43:15.079" 62386858 2088 23f0 WARNING MBAMChameleon SearchForCert "fileverify.cpp" 2517 "Parser returns c000000d" 12/03/25 " 16:43:15.082" 62386861 2088 23f0 INFO MBAMChameleon AddToTrustedProcessList "ProcProt.c" 964 "Secure process: (0000000000002F04) \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\Malwarebytes.exe" 12/03/25 " 16:43:15.174" 62386953 2088 23f0 WARNING MBAMChameleon SearchForCert "fileverify.cpp" 2517 "Parser returns c000000d" 12/03/25 " 16:43:15.178" 62386957 2088 23f0 INFO MBAMChameleon AddToTrustedProcessList "ProcProt.c" 964 "Secure process: (0000000000000FB4) \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\MbamBgNativeMsg.exe" 12/03/25 " 16:43:15.298" 62387077 2088 23f0 ERROR MBAMChameleon DispatchIoctl "watchdog-common.c" 2710 "!Protect entry wrong structure length (Entry->Length > 0) 0, (Entry->Length + struct size > size of input buffer) 56 > 56 (proc = \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe) ?" 12/03/25 " 16:43:15.426" 62387205 033c 2c10 ERROR MBAMChameleon GetInstallPath "watchdog-common.c" 4424 "Could not read install path. ntStatus (STATUS_SUCCESS), key (\Registry\Machine\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1)" 12/03/25 " 16:43:16.350" 62388129 0fb4 2fe4 WARNING MBAMChameleon SearchForCert "fileverify.cpp" 2517 "Parser returns c000000d" 12/03/25 " 16:43:16.355" 62388134 0fb4 2fe4 INFO MBAMChameleon AddToTrustedProcessList "ProcProt.c" 964 "Secure process: (0000000000002088) \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe" 12/03/25 " 16:43:17.808" 62389578 2088 0020 INFO AeSDKImpl AeSDKImpl::InitializeInternal "AeSDKImpl.cpp" 215 "Successfully Initialized MBAE" 12/03/25 " 16:43:17.808" 62389578 2088 0020 INFO AeSDKImpl AeSDKImpl::MbaeSetConfig "AeSDKImpl.cpp" 258 "Successfully configured MBAE." 12/03/25 " 16:43:17.808" 62389578 2088 0020 INFO AeSDKImpl AeSDKImpl::MbaeSetExclusions "AeSDKImpl.cpp" 347 "Successfully set exclusion list" 12/03/25 " 16:43:17.878" 62389656 2088 0020 INFO AeSDKImpl AeSDKImpl::MbaeAddProtectedApp "AeSDKImpl.cpp" 295 "Successfully added protected app (svchost.exe)" 12/03/25 " 16:43:17.898" 62389671 2088 0020 INFO AeSDKImpl AeSDKImpl::MbaeAddProtectedApp "AeSDKImpl.cpp" 295 "Successfully added protected app (winrar.exe)" 12/03/25 " 16:43:17.918" 62389687 2088 0020 INFO AeSDKImpl AeSDKImpl::MbaeAddProtectedApp "AeSDKImpl.cpp" 295 "Successfully added protected app (winzip.exe)" 12/03/25 " 16:43:17.939" 62389703 2088 0020 INFO AeSDKImpl AeSDKImpl::MbaeAddProtectedApp "AeSDKImpl.cpp" 295 "Successfully added protected app (7z.exe)" 12/03/25 " 16:43:17.959" 62389734 2088 0020 INFO AeSDKImpl AeSDKImpl::MbaeAddProtectedApp "AeSDKImpl.cpp" 295 "Successfully added protected app (7zFM.exe)" 12/03/25 " 16:43:17.979" 62389750 2088 0020 INFO AeSDKImpl AeSDKImpl::MbaeAddProtectedApp "AeSDKImpl.cpp" 295 "Successfully added protected app (7zG.exe)" 12/03/25 " 16:43:17.999" 62389765 2088 0020 INFO AeSDKImpl AeSDKImpl::MbaeAddProtectedApp "AeSDKImpl.cpp" 295 "Successfully added protected app (S7Z.exe)" 12/03/25 " 16:43:18.019" 62389796 2088 0020 INFO AeSDKImpl AeSDKImpl::MbaeAddProtectedApp "AeSDKImpl.cpp" 295 "Successfully added protected app (7zextractor.exe)" 12/03/25 " 16:43:18.040" 62389812 2088 0020 INFO AeSDKImpl AeSDKImpl::MbaeAddProtectedApp "AeSDKImpl.cpp" 295 "Successfully added protected app (Winzip32.exe)" 12/03/25 " 16:43:18.060" 62389828 2088 0020 INFO AeSDKImpl AeSDKImpl::MbaeAddProtectedApp "AeSDKImpl.cpp" 295 "Successfully added protected app (Winzip64.exe)" 12/03/25 " 16:43:18.080" 62389843 2088 0020 INFO AeSDKImpl AeSDKImpl::MbaeAddProtectedApp "AeSDKImpl.cpp" 295 "Successfully added protected app (wzdisktools.exe)" 12/03/25 " 16:43:18.100" 62389875 2088 0020 INFO AeSDKImpl AeSDKImpl::MbaeAddProtectedApp "AeSDKImpl.cpp" 295 "Successfully added protected app (winzipss.exe)" 12/03/25 " 16:43:18.120" 62389890 2088 0020 INFO AeSDKImpl AeSDKImpl::MbaeAddProtectedApp "AeSDKImpl.cpp" 295 "Successfully added protected app (cmd.exe)" 12/03/25 " 16:43:18.140" 62389906 2088 0020 INFO AeSDKImpl AeSDKImpl::MbaeAddProtectedApp "AeSDKImpl.cpp" 295 "Successfully added protected app (winhlp32.exe)" 12/03/25 " 16:43:18.161" 62389937 2088 0020 INFO AeSDKImpl AeSDKImpl::MbaeAddProtectedApp "AeSDKImpl.cpp" 295 "Successfully added protected app (mshta.exe)" 12/03/25 " 16:43:18.181" 62389953 2088 0020 INFO AeSDKImpl AeSDKImpl::MbaeAddProtectedApp "AeSDKImpl.cpp" 295 "Successfully added protected app (hh.exe)" 12/03/25 " 16:43:18.201" 62389968 2088 0020 INFO AeSDKImpl AeSDKImpl::MbaeAddProtectedApp "AeSDKImpl.cpp" 295 "Successfully added protected app (wscript.exe)" 12/03/25 " 16:43:16.366" 62388145 0fb4 2fe4 WARNING MBAMChameleon SearchForCert "fileverify.cpp" 2517 "Parser returns c000000d" 12/03/25 " 16:43:16.371" 62388150 0fb4 2fe4 INFO MBAMChameleon AddToTrustedProcessList "ProcProt.c" 964 "Secure process: (0000000000002F04) \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\Malwarebytes.exe" 12/03/25 " 16:43:16.464" 62388243 0fb4 2fe4 WARNING MBAMChameleon SearchForCert "fileverify.cpp" 2517 "Parser returns c000000d" 12/03/25 " 16:43:16.488" 62388267 0fb4 2fe4 INFO MBAMChameleon AddToTrustedProcessList "ProcProt.c" 964 "Secure process: (0000000000000FB4) \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\MbamBgNativeMsg.exe" 12/03/25 " 16:43:18.221" 62390000 2088 0020 INFO AeSDKImpl AeSDKImpl::MbaeAddProtectedApp "AeSDKImpl.cpp" 295 "Successfully added protected app (cscript.exe)" 12/03/25 " 16:43:18.241" 62390015 2088 0020 INFO AeSDKImpl AeSDKImpl::MbaeAddProtectedApp "AeSDKImpl.cpp" 295 "Successfully added protected app (bitsadmin.exe)" 12/03/25 " 16:43:18.261" 62390031 2088 0020 INFO AeSDKImpl AeSDKImpl::MbaeAddProtectedApp "AeSDKImpl.cpp" 295 "Successfully added protected app (certutil.exe)" 12/03/25 " 16:43:18.282" 62390046 2088 0020 INFO AeSDKImpl AeSDKImpl::MbaeAddProtectedApp "AeSDKImpl.cpp" 295 "Successfully added protected app (forfiles.exe)" 12/03/25 " 16:43:18.282" 62390046 2088 0020 INFO AeSDKImpl AeSDKImpl::MbaeAddProtectedApp "AeSDKImpl.cpp" 295 "Successfully added protected app (quicktimeplayer.exe)" 12/03/25 " 16:43:18.282" 62390046 2088 0020 INFO AeSDKImpl AeSDKImpl::MbaeAddProtectedApp "AeSDKImpl.cpp" 295 "Successfully added protected app (winamp.exe)" 12/03/25 " 16:43:18.282" 62390046 2088 0020 INFO AeSDKImpl AeSDKImpl::MbaeAddProtectedApp "AeSDKImpl.cpp" 295 "Successfully added protected app (vlc.exe)" 12/03/25 " 16:43:18.282" 62390046 2088 0020 INFO AeSDKImpl AeSDKImpl::MbaeAddProtectedApp "AeSDKImpl.cpp" 295 "Successfully added protected app (mplayer2.exe)" 12/03/25 " 16:43:18.282" 62390046 2088 0020 INFO AeSDKImpl AeSDKImpl::MbaeAddProtectedApp "AeSDKImpl.cpp" 295 "Successfully added protected app (wmplayer.exe)" 12/03/25 " 16:43:18.302" 62390078 2088 0020 INFO AeSDKImpl AeSDKImpl::MbaeAddProtectedApp "AeSDKImpl.cpp" 295 "Successfully added protected app (powerpnt.exe)" 12/03/25 " 16:43:18.322" 62390093 2088 0020 INFO AeSDKImpl AeSDKImpl::MbaeAddProtectedApp "AeSDKImpl.cpp" 295 "Successfully added protected app (excel.exe)" 12/03/25 " 16:43:18.342" 62390109 2088 0020 INFO AeSDKImpl AeSDKImpl::MbaeAddProtectedApp "AeSDKImpl.cpp" 295 "Successfully added protected app (excelc.exe)" 12/03/25 " 16:43:18.362" 62390140 2088 0020 INFO AeSDKImpl AeSDKImpl::MbaeAddProtectedApp "AeSDKImpl.cpp" 295 "Successfully added protected app (winword.exe)" 12/03/25 " 16:43:18.383" 62390156 2088 0020 INFO AeSDKImpl AeSDKImpl::MbaeAddProtectedApp "AeSDKImpl.cpp" 295 "Successfully added protected app (winwordc.exe)" 12/03/25 " 16:43:18.383" 62390156 2088 0020 INFO AeSDKImpl AeSDKImpl::MbaeAddProtectedApp "AeSDKImpl.cpp" 295 "Successfully added protected app (mspub.exe)" 12/03/25 " 16:43:18.403" 62390171 2088 0020 INFO AeSDKImpl AeSDKImpl::MbaeAddProtectedApp "AeSDKImpl.cpp" 295 "Successfully added protected app (eqnedt32.exe)" 12/03/25 " 16:43:18.403" 62390171 2088 0020 INFO AeSDKImpl AeSDKImpl::MbaeAddProtectedApp "AeSDKImpl.cpp" 295 "Successfully added protected app (msaccess.exe)" 12/03/25 " 16:43:18.423" 62390187 2088 0020 INFO AeSDKImpl AeSDKImpl::MbaeAddProtectedApp "AeSDKImpl.cpp" 295 "Successfully added protected app (onenote.exe)" 12/03/25 " 16:43:18.443" 62390218 2088 0020 INFO AeSDKImpl AeSDKImpl::MbaeAddProtectedApp "AeSDKImpl.cpp" 295 "Successfully added protected app (onenotem.exe)" 12/03/25 " 16:43:18.463" 62390234 2088 0020 INFO AeSDKImpl AeSDKImpl::MbaeAddProtectedApp "AeSDKImpl.cpp" 295 "Successfully added protected app (onenoteim.exe)" 12/03/25 " 16:43:18.483" 62390250 2088 0020 INFO AeSDKImpl AeSDKImpl::MbaeAddProtectedApp "AeSDKImpl.cpp" 295 "Successfully added protected app (soffice.bin)" 12/03/25 " 16:43:18.483" 62390250 2088 0020 INFO AeSDKImpl AeSDKImpl::MbaeAddProtectedApp "AeSDKImpl.cpp" 295 "Successfully added protected app (foxitreader.exe)" 12/03/25 " 16:43:18.483" 62390250 2088 0020 INFO AeSDKImpl AeSDKImpl::MbaeAddProtectedApp "AeSDKImpl.cpp" 295 "Successfully added protected app (foxit reader.exe)" 12/03/25 " 16:43:18.483" 62390250 2088 0020 INFO AeSDKImpl AeSDKImpl::MbaeAddProtectedApp "AeSDKImpl.cpp" 295 "Successfully added protected app (Foxit PhantomPDF.exe)" 12/03/25 " 16:43:18.483" 62390250 2088 0020 INFO AeSDKImpl AeSDKImpl::MbaeAddProtectedApp "AeSDKImpl.cpp" 295 "Successfully added protected app (FoxitPhantomPDF.exe)" 12/03/25 " 16:43:18.504" 62390281 2088 0020 INFO AeSDKImpl AeSDKImpl::MbaeAddProtectedApp "AeSDKImpl.cpp" 295 "Successfully added protected app (acrord32.exe)" 12/03/25 " 16:43:18.524" 62390296 2088 0020 INFO AeSDKImpl AeSDKImpl::MbaeAddProtectedApp "AeSDKImpl.cpp" 295 "Successfully added protected app (acrobat.exe)" 12/03/25 " 16:43:18.524" 62390296 2088 0020 INFO AeSDKImpl AeSDKImpl::MbaeAddProtectedApp "AeSDKImpl.cpp" 295 "Successfully added protected app (java.exe)" 12/03/25 " 16:43:18.524" 62390296 2088 0020 INFO AeSDKImpl AeSDKImpl::MbaeAddProtectedApp "AeSDKImpl.cpp" 295 "Successfully added protected app (javaw.exe)" 12/03/25 " 16:43:18.524" 62390296 2088 0020 INFO AeSDKImpl AeSDKImpl::MbaeAddProtectedApp "AeSDKImpl.cpp" 295 "Successfully added protected app (javaws.exe)" 12/03/25 " 16:43:18.524" 62390296 2088 0020 INFO AeSDKImpl AeSDKImpl::MbaeAddProtectedApp "AeSDKImpl.cpp" 295 "Successfully added protected app (jp2launcher.exe)" 12/03/25 " 16:43:18.524" 62390296 2088 0020 INFO AeSDKImpl AeSDKImpl::MbaeAddProtectedApp "AeSDKImpl.cpp" 295 "Successfully added protected app (dragon.exe)" 12/03/25 " 16:43:18.524" 62390296 2088 0020 INFO AeSDKImpl AeSDKImpl::MbaeAddProtectedApp "AeSDKImpl.cpp" 295 "Successfully added protected app (waterfox.exe)" 12/03/25 " 16:43:18.544" 62390312 2088 0020 INFO AeSDKImpl AeSDKImpl::MbaeAddProtectedApp "AeSDKImpl.cpp" 295 "Successfully added protected app (tor.exe)" 12/03/25 " 16:43:18.564" 62390328 2088 0020 INFO AeSDKImpl AeSDKImpl::MbaeAddProtectedApp "AeSDKImpl.cpp" 295 "Successfully added protected app (tbb-firefox.exe)" 12/03/25 " 16:43:18.564" 62390328 2088 0020 INFO AeSDKImpl AeSDKImpl::MbaeAddProtectedApp "AeSDKImpl.cpp" 295 "Successfully added protected app (palemoon.exe)" 12/03/25 " 16:43:18.564" 62390328 2088 0020 INFO AeSDKImpl AeSDKImpl::MbaeAddProtectedApp "AeSDKImpl.cpp" 295 "Successfully added protected app (cyberfox.exe)" 12/03/25 " 16:43:18.564" 62390328 2088 0020 INFO AeSDKImpl AeSDKImpl::MbaeAddProtectedApp "AeSDKImpl.cpp" 295 "Successfully added protected app (icedragon.exe)" 12/03/25 " 16:43:18.564" 62390328 2088 0020 INFO AeSDKImpl AeSDKImpl::MbaeAddProtectedApp "AeSDKImpl.cpp" 295 "Successfully added protected app (seamonkey.exe)" 12/03/25 " 16:43:18.564" 62390328 2088 0020 INFO AeSDKImpl AeSDKImpl::MbaeAddProtectedApp "AeSDKImpl.cpp" 295 "Successfully added protected app (maxthon.exe)" 12/03/25 " 16:43:18.564" 62390328 2088 0020 INFO AeSDKImpl AeSDKImpl::MbaeAddProtectedApp "AeSDKImpl.cpp" 295 "Successfully added protected app (mxapploader.exe)" 12/03/25 " 16:43:18.584" 62390359 2088 0020 INFO AeSDKImpl AeSDKImpl::MbaeAddProtectedApp "AeSDKImpl.cpp" 295 "Successfully added protected app (opera.exe)" 12/03/25 " 16:43:18.605" 62390375 2088 0020 INFO AeSDKImpl AeSDKImpl::MbaeAddProtectedApp "AeSDKImpl.cpp" 295 "Successfully added protected app (opera_plugin_wrapper.exe)" 12/03/25 " 16:43:18.607" 62390375 2088 1ed8 WARNING ArwSDK kernelLogger::LogK "ArwLib.Globals.cpp" 241 "tid: 2070 - [MBAMFarFlt] [fileverify.cpp:SearchForCert-2517] Parser returns c000000d." 12/03/25 " 16:43:18.607" 62390375 2088 1ed8 WARNING ArwSDK kernelLogger::LogK "ArwLib.Globals.cpp" 241 "tid: 2070 - [MBAMFarFlt] [fileverify.cpp:SearchForCert-2517] Parser returns c000000d." 12/03/25 " 16:43:18.607" 62390375 2088 1ed8 WARNING ArwSDK kernelLogger::LogK "ArwLib.Globals.cpp" 241 "tid: 2070 - [MBAMFarFlt] [fileverify.cpp:SearchForCert-2517] Parser returns c000000d." 12/03/25 " 16:43:18.607" 62390375 2088 1ed8 WARNING ArwSDK kernelLogger::LogK "ArwLib.Globals.cpp" 241 "tid: 2070 - [MBAMFarFlt] [fileverify.cpp:SearchForCert-2517] Parser returns c000000d." 12/03/25 " 16:43:18.607" 62390375 2088 1ed8 WARNING ArwSDK kernelLogger::LogK "ArwLib.Globals.cpp" 241 "tid: 2070 - [MBAMFarFlt] [fileverify.cpp:SearchForCert-2517] Parser returns c000000d." 12/03/25 " 16:43:18.607" 62390375 2088 1ed8 WARNING ArwSDK kernelLogger::LogK "ArwLib.Globals.cpp" 241 "tid: 2070 - [MBAMFarFlt] [fileverify.cpp:SearchForCert-2517] Parser returns c000000d." 12/03/25 " 16:43:18.625" 62390390 2088 0020 INFO AeSDKImpl AeSDKImpl::MbaeAddProtectedApp "AeSDKImpl.cpp" 295 "Successfully added protected app (opera_wrapper_32.exe)" 12/03/25 " 16:43:18.645" 62390421 2088 0020 INFO AeSDKImpl AeSDKImpl::MbaeAddProtectedApp "AeSDKImpl.cpp" 295 "Successfully added protected app (iexplore.exe)" 12/03/25 " 16:43:18.665" 62390437 2088 0020 INFO AeSDKImpl AeSDKImpl::MbaeAddProtectedApp "AeSDKImpl.cpp" 295 "Successfully added protected app (MicrosoftEdge.exe)" 12/03/25 " 16:43:18.685" 62390453 2088 0020 INFO AeSDKImpl AeSDKImpl::MbaeAddProtectedApp "AeSDKImpl.cpp" 295 "Successfully added protected app (MicrosoftEdgeCP.exe)" 12/03/25 " 16:43:18.705" 62390484 2088 0020 INFO AeSDKImpl AeSDKImpl::MbaeAddProtectedApp "AeSDKImpl.cpp" 295 "Successfully added protected app (msedge.exe)" 12/03/25 " 16:43:18.726" 62390500 2088 0020 INFO AeSDKImpl AeSDKImpl::MbaeAddProtectedApp "AeSDKImpl.cpp" 295 "Successfully added protected app (chrome.exe)" 12/03/25 " 16:43:18.746" 62390515 2088 0020 INFO AeSDKImpl AeSDKImpl::MbaeAddProtectedApp "AeSDKImpl.cpp" 295 "Successfully added protected app (old_chrome.exe)" 12/03/25 " 16:43:18.771" 62390546 2088 0020 INFO AeSDKImpl AeSDKImpl::MbaeAddProtectedApp "AeSDKImpl.cpp" 295 "Successfully added protected app (firefox.exe)" 12/03/25 " 16:43:18.787" 62390562 2088 0020 INFO AeSDKImpl AeSDKImpl::MbaeAddProtectedApp "AeSDKImpl.cpp" 295 "Successfully added protected app (plugin-container.exe)" 12/03/25 " 16:43:18.803" 62390578 2088 0020 INFO AeSDKImpl AeSDKImpl::MbaeAddProtectedApp "AeSDKImpl.cpp" 295 "Successfully added protected app (FlashPlayerPlugin*.exe)" 12/03/25 " 16:43:18.818" 62390593 2088 0020 INFO AeSDKImpl AeSDKImpl::MbaeAddProtectedApp "AeSDKImpl.cpp" 295 "Successfully added protected app (helpctr.exe)" 12/03/25 " 16:43:18.834" 62390609 2088 0020 INFO AeSDKImpl AeSDKImpl::MbaeAddProtectedApp "AeSDKImpl.cpp" 295 "Successfully added protected app (outlook.exe)" 12/03/25 " 16:43:18.850" 62390625 2088 0020 INFO AeSDKImpl AeSDKImpl::MbaeAddProtectedApp "AeSDKImpl.cpp" 295 "Successfully added protected app (msimn.exe)" 12/03/25 " 16:43:18.872" 62390640 2088 0020 INFO AeSDKImpl AeSDKImpl::MbaeAddProtectedApp "AeSDKImpl.cpp" 295 "Successfully added protected app (thunderbird.exe)" 12/03/25 " 16:43:18.887" 62390656 2088 0020 INFO AeSDKImpl AeSDKImpl::MbaeAddProtectedApp "AeSDKImpl.cpp" 295 "Successfully added protected app (powershell.exe)" 12/03/25 " 16:43:18.903" 62390671 2088 0020 INFO AeSDKImpl AeSDKImpl::MbaeAddProtectedApp "AeSDKImpl.cpp" 295 "Successfully added protected app (pwsh.exe)" 12/03/25 " 16:43:18.919" 62390687 2088 0020 INFO AeSDKImpl AeSDKImpl::MbaeAddProtectedApp "AeSDKImpl.cpp" 295 "Successfully added protected app (wsmprovhost.exe)" 12/03/25 " 16:43:18.934" 62390703 2088 0020 INFO AeSDKImpl AeSDKImpl::MbaeAddProtectedApp "AeSDKImpl.cpp" 295 "Successfully added protected app (psexesvc.exe)" 12/03/25 " 16:43:18.950" 62390718 2088 0020 INFO AeSDKImpl AeSDKImpl::MbaeAddProtectedApp "AeSDKImpl.cpp" 295 "Successfully added protected app (python.exe)" 12/03/25 " 16:43:18.972" 62390750 2088 0020 INFO AeSDKImpl AeSDKImpl::MbaeAddProtectedApp "AeSDKImpl.cpp" 295 "Successfully added protected app (python3.exe)" 12/03/25 " 16:43:18.988" 62390765 2088 0020 INFO AeSDKImpl AeSDKImpl::MbaeAddProtectedApp "AeSDKImpl.cpp" 295 "Successfully added protected app (ir_agent.exe)" 12/03/25 " 16:43:19.003" 62390781 2088 0020 INFO AeSDKImpl AeSDKImpl::MbaeAddProtectedApp "AeSDKImpl.cpp" 295 "Successfully added protected app (splunkd.exe)" 12/03/25 " 16:43:19.019" 62390796 2088 0020 INFO AeSDKImpl AeSDKImpl::MbaeAddProtectedApp "AeSDKImpl.cpp" 295 "Successfully added protected app (control.exe)" 12/03/25 " 16:43:19.035" 62390812 2088 0020 INFO AeSDKImpl AeSDKImpl::MbaeAddProtectedApp "AeSDKImpl.cpp" 295 "Successfully added protected app (c:\users\public\*.exe)" 12/03/25 " 16:43:19.050" 62390828 2088 0020 INFO AeSDKImpl AeSDKImpl::MbaeAddProtectedApp "AeSDKImpl.cpp" 295 "Successfully added protected app (msbuild.exe)" 12/03/25 " 16:43:19.067" 62390843 2088 0020 INFO AeSDKImpl AeSDKImpl::MbaeAddProtectedApp "AeSDKImpl.cpp" 295 "Successfully added protected app (mbae-test.exe)" 12/03/25 " 16:43:19.087" 62390859 2088 0020 INFO AeSDKImpl AeSDKImpl::MbaeAddProtectedApp "AeSDKImpl.cpp" 295 "Successfully added protected app (attckh4ck3r4pt.exe)" 12/03/25 " 16:43:20.307" 62392078 2088 314c INFO DDSIG IGSDK_Initialize "IGSDK.cpp" 551 "SDK Initialized (0)" 12/03/25 " 16:43:20.307" 62392078 2088 314c INFO DDSScanner DDSScanner::Initialize "DDSScanner.cpp" 223 "DDSIG SDk initialized successfully." 12/03/25 " 16:43:20.307" 62392078 2088 314c INFO DDSIG DdsGetSdkVersion "DdsMbSdk" 769 "MBAMService-DdsMbSdk(769) - 2025/12/03 - 16:43:20 - #4# - StaticIG: SigGetSigFileVersion(0): '1.0.7.41' - 30 - 0 - 12620 - 8328" 12/03/25 " 16:43:20.307" 62392078 2088 314c INFO DDSScanner DDSScanner::Initialize "DDSScanner.cpp" 232 "DDSIG Sdk Version: 1.0.6.39." 12/03/25 " 16:43:20.307" 62392078 2088 314c INFO DDSScanner DDSScanner::Initialize "DDSScanner.cpp" 247 "DDSIG Sig File Version: 03640809." 12/03/25 " 16:43:20.462" 62392234 2088 314c INFO DDSScanner DDSScanner::Initialize "DDSScanner.cpp" 263 "IG Sdk config set successfully." 12/03/25 " 16:43:20.526" 62392296 2088 314c INFO MBAMCoreImpl MBAMCoreImpl::Initialize "MBAMCoreImpl.cpp" 184 "MBAMCore was successfully initialized. CoreFolderPath=. DefsFolderPath=." 12/03/25 " 16:43:20.803" 62392578 2088 0020 INFO AeSDKImpl AeSDKImpl::MbaeStart "AeSDKImpl.cpp" 368 "MBAE started." 12/03/25 " 16:43:20.983" 62392750 2088 1420 INFO AEControllerImpl mb::aecontrollerimpl::AEControllerImplHelper::DoAppInjectedNotification "AEControllerImplHelper.cpp" 2879 "App Injected (Mozilla Firefox (and add-ons))" 12/03/25 " 16:43:21.724" 62393500 2088 314c INFO DDSScanner DDSScanner::SetIGFiltersOverride "DDSScanner.cpp" 1924 "IGFiltersOverride = false." 12/03/25 " 16:43:19.820" 62391599 05b4 2984 WARNING MBAMChameleon HandleFileCreate "FileProt.c" 444 "FileFilter: Blocking access to \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\mbae64.dll from mode 1 - process \Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe" 12/03/25 " 16:43:20.530" 62392309 2088 2478 WARNING MBAMChameleon SearchForCert "fileverify.cpp" 2517 "Parser returns c000000d" 12/03/25 " 16:43:20.535" 62392314 2088 2478 INFO MBAMChameleon ProcessNotify "ProcProt.c" 422 "Trusted process starting: Process (0000000000001C44) Name avail: 1 FO FFFFA28253B10600, \??\C:\Users\grzeg\AppData\LocalLow\IGDump\sec\ig.exe" 12/03/25 " 16:43:20.677" 62392456 2088 2478 INFO MBAMChameleon InitializeDualPath "IG2ProtUtils.c" 380 "Dual path succesfully initialized. Usr Path:""C:\Users\grzeg\AppData\LocalLow\IGDump\sec\ig.exe"", Krn Path:""\Device\HarddiskVolume3\Users\grzeg\AppData\LocalLow\IGDump\sec\ig.exe""" 12/03/25 " 16:43:20.677" 62392456 2088 2478 INFO MBAMChameleon AddProcessToIsolationList "DispatchIOCTL.c" 892 "New process added to isolation list. PID:0000000000001C44, Path:C:\Users\grzeg\AppData\LocalLow\IGDump\sec\ig.exe" 12/03/25 " 16:43:20.677" 62392456 2088 2478 INFO MBAMChameleon IG2PFS_AddExclusionPath "IG2ProtFs.c" 351 "Received path to add to FS Exclusions list: ""C:\Users\grzeg\AppData\LocalLow\IGDump\sec""." 12/03/25 " 16:43:20.677" 62392456 2088 2478 INFO MBAMChameleon InitializeDualPath "IG2ProtUtils.c" 380 "Dual path succesfully initialized. Usr Path:""C:\Users\grzeg\AppData\LocalLow\IGDump\sec"", Krn Path:""\DEVICE\HARDDISKVOLUME3\USERS\GRZEG\APPDATA\LOCALLOW\IGDUMP\SEC""" 12/03/25 " 16:43:20.677" 62392456 2088 2478 INFO MBAMChameleon IG2PFS_AddExclusionPath "IG2ProtFs.c" 382 "New path added to File System list: C:\Users\grzeg\AppData\LocalLow\IGDump\sec" 12/03/25 " 16:43:20.677" 62392456 2088 2478 INFO MBAMChameleon IG2PFS_AddExclusionPath "IG2ProtFs.c" 351 "Received path to add to FS Exclusions list: ""C:\Users\grzeg\AppData\LocalLow\IGDump\sec\*.bin""." 12/03/25 " 16:43:20.677" 62392456 2088 2478 INFO MBAMChameleon InitializeDualPath "IG2ProtUtils.c" 380 "Dual path succesfully initialized. Usr Path:""C:\Users\grzeg\AppData\LocalLow\IGDump\sec\*.bin"", Krn Path:""\DEVICE\HARDDISKVOLUME3\USERS\GRZEG\APPDATA\LOCALLOW\IGDUMP\SEC\*.BIN""" 12/03/25 " 16:43:20.677" 62392456 2088 2478 INFO MBAMChameleon IG2PFS_AddExclusionPath "IG2ProtFs.c" 382 "New path added to File System list: C:\Users\grzeg\AppData\LocalLow\IGDump\sec\*.bin" 12/03/25 " 16:43:20.677" 62392456 2088 2478 INFO MBAMChameleon IG2PFS_AddExclusionPath "IG2ProtFs.c" 351 "Received path to add to FS Exclusions list: ""C:\Users\grzeg\AppData\LocalLow\IGDump\sec\*.txt""." 12/03/25 " 16:43:20.677" 62392456 2088 2478 INFO MBAMChameleon InitializeDualPath "IG2ProtUtils.c" 380 "Dual path succesfully initialized. Usr Path:""C:\Users\grzeg\AppData\LocalLow\IGDump\sec\*.txt"", Krn Path:""\DEVICE\HARDDISKVOLUME3\USERS\GRZEG\APPDATA\LOCALLOW\IGDUMP\SEC\*.TXT""" 12/03/25 " 16:43:20.677" 62392456 2088 2478 INFO MBAMChameleon IG2PFS_AddExclusionPath "IG2ProtFs.c" 382 "New path added to File System list: C:\Users\grzeg\AppData\LocalLow\IGDump\sec\*.txt" 12/03/25 " 16:43:20.677" 62392456 2088 2478 INFO MBAMChameleon IG2PFS_AddExclusionPath "IG2ProtFs.c" 351 "Received path to add to FS Exclusions list: ""C:\Users\grzeg\AppData\LocalLow\IGDump\sec\*.ext""." 12/03/25 " 16:43:20.677" 62392456 2088 2478 INFO MBAMChameleon InitializeDualPath "IG2ProtUtils.c" 380 "Dual path succesfully initialized. Usr Path:""C:\Users\grzeg\AppData\LocalLow\IGDump\sec\*.ext"", Krn Path:""\DEVICE\HARDDISKVOLUME3\USERS\GRZEG\APPDATA\LOCALLOW\IGDUMP\SEC\*.EXT""" 12/03/25 " 16:43:20.677" 62392456 2088 2478 INFO MBAMChameleon IG2PFS_AddExclusionPath "IG2ProtFs.c" 382 "New path added to File System list: C:\Users\grzeg\AppData\LocalLow\IGDump\sec\*.ext" 12/03/25 " 16:43:20.678" 62392457 2088 2478 INFO MBAMChameleon AddNewPIDAndPathFilter "IG2ProtNet.c" 1586 "Added! New ALE Resource Assignment Filter by PID(0000000000001C44) and Path(""\Device\HarddiskVolume3\Users\grzeg\AppData\LocalLow\IGDump\sec\ig.exe"") filter for callout 2d21ccdb-0383-4ba4-81ed-7a7d58971107" 12/03/25 " 16:43:20.678" 62392457 2088 2478 INFO MBAMChameleon AddNewPIDAndPathFilter "IG2ProtNet.c" 1586 "Added! New ALE Resource Assignment Filter by PID(0000000000001C44) and Path(""\Device\HarddiskVolume3\Users\grzeg\AppData\LocalLow\IGDump\sec\ig.exe"") filter for callout 797d6309-4a5e-4fcc-b57b-6627959006aa" 12/03/25 " 16:43:21.036" 62392815 1c44 0194 WARNING MBAMChameleon cbIG2PFsPreCreate "IG2ProtFs.c" 1002 "FILE SYSTEM OPERATION BLOCKED! Path (\Device\HarddiskVolume3\Windows\Temp\MBI9EC.tmp), DesiredAccess (0x00120089), Options (0x02000060), Process (0000000000001C44)(\Device\HarddiskVolume3\Users\grzeg\AppData\LocalLow\IGDump\sec\ig.exe)" 12/03/25 " 16:43:21.036" 62392815 1c44 0194 WARNING MBAMChameleon IgRegistryNotifyRoutine "IG2ProtReg.c" 261 "REGISTRY OPERATION BLOCKED!! Due to rule for a process(0000000000001C44):(\Device\HarddiskVolume3\Users\grzeg\AppData\LocalLow\IGDump\sec\ig.exe)." 12/03/25 " 16:43:21.036" 62392815 1c44 0194 WARNING MBAMChameleon IgRegistryNotifyRoutine "IG2ProtReg.c" 261 "REGISTRY OPERATION BLOCKED!! Due to rule for a process(0000000000001C44):(\Device\HarddiskVolume3\Users\grzeg\AppData\LocalLow\IGDump\sec\ig.exe)." 12/03/25 " 16:43:21.063" 62392842 1c44 0194 INFO MBAMChameleon IgProcessCreateNotifyRoutineExUnload "IG2ProtProcs.c" 506 "New process([00000000000005CC]""\??\c:\windows\SysWOW64\help.exe"") attempted to launch." 12/03/25 " 16:43:21.063" 62392842 1c44 0194 INFO MBAMChameleon IgProcessCreateNotifyRoutineExUnload "IG2ProtProcs.c" 518 "Process([0000000000001C44]""\Device\HarddiskVolume3\Users\grzeg\AppData\LocalLow\IGDump\sec\ig.exe"") attempting to launch new process [00000000000005CC]""\??\c:\windows\SysWOW64\help.exe""." 12/03/25 " 16:43:21.063" 62392842 1c44 0194 WARNING MBAMChameleon IgProcessCreateNotifyRoutineExUnload "IG2ProtProcs.c" 559 "PROCESS OPERATION BLOCKED!! New process(00000000000005CC) to be created. Launcher Process PID:0000000000001C44" 12/03/25 " 16:43:21.090" 62392869 1c44 0194 INFO MBAMChameleon IgProcessCreateNotifyRoutineExUnload "IG2ProtProcs.c" 506 "New process([0000000000003234]""\??\c:\windows\SysWOW64\help.exe"") attempted to launch." 12/03/25 " 16:43:21.090" 62392869 1c44 0194 INFO MBAMChameleon IgProcessCreateNotifyRoutineExUnload "IG2ProtProcs.c" 518 "Process([0000000000001C44]""\Device\HarddiskVolume3\Users\grzeg\AppData\LocalLow\IGDump\sec\ig.exe"") attempting to launch new process [0000000000003234]""\??\c:\windows\SysWOW64\help.exe""." 12/03/25 " 16:43:21.090" 62392869 1c44 0194 WARNING MBAMChameleon IgProcessCreateNotifyRoutineExUnload "IG2ProtProcs.c" 559 "PROCESS OPERATION BLOCKED!! New process(0000000000003234) to be created. Launcher Process PID:0000000000001C44" 12/03/25 " 16:43:21.145" 62392924 1c44 0194 WARNING MBAMChameleon IgRegistryNotifyRoutine "IG2ProtReg.c" 255 "REGISTRY OPERATION BLOCKED!! Due to restricted COM access(0000000000001C44):(\Device\HarddiskVolume3\Users\grzeg\AppData\LocalLow\IGDump\sec\ig.exe) - (\REGISTRY\USER\S-1-5-21-504369874-3521093726-15342627-1001_Classes\WOW6432Node\CLSID\{1F486A52-3CB1-48FD-8F50-B8DC300D9F9D})." 12/03/25 " 16:43:21.145" 62392924 1c44 0194 WARNING MBAMChameleon IgRegistryNotifyRoutine "IG2ProtReg.c" 255 "REGISTRY OPERATION BLOCKED!! Due to restricted COM access(0000000000001C44):(\Device\HarddiskVolume3\Users\grzeg\AppData\LocalLow\IGDump\sec\ig.exe) - (\Registry\Machine\Software\Classes\WOW6432Node\CLSID\{1F486A52-3CB1-48FD-8F50-B8DC300D9F9D})." 12/03/25 " 16:43:21.161" 62392940 1c44 0194 WARNING MBAMChameleon IgRegistryNotifyRoutine "IG2ProtReg.c" 255 "REGISTRY OPERATION BLOCKED!! Due to restricted COM access(0000000000001C44):(\Device\HarddiskVolume3\Users\grzeg\AppData\LocalLow\IGDump\sec\ig.exe) - (\REGISTRY\USER\S-1-5-21-504369874-3521093726-15342627-1001_Classes\WOW6432Node\CLSID\{1F486A52-3CB1-48FD-8F50-B8DC300D9F9D})." 12/03/25 " 16:43:21.161" 62392940 1c44 0194 WARNING MBAMChameleon IgRegistryNotifyRoutine "IG2ProtReg.c" 255 "REGISTRY OPERATION BLOCKED!! Due to restricted COM access(0000000000001C44):(\Device\HarddiskVolume3\Users\grzeg\AppData\LocalLow\IGDump\sec\ig.exe) - (\Registry\Machine\Software\Classes\WOW6432Node\CLSID\{1F486A52-3CB1-48FD-8F50-B8DC300D9F9D})." 12/03/25 " 16:43:21.201" 62392980 1c44 0194 WARNING MBAMChameleon IgRegistryNotifyRoutine "IG2ProtReg.c" 255 "REGISTRY OPERATION BLOCKED!! Due to restricted COM access(0000000000001C44):(\Device\HarddiskVolume3\Users\grzeg\AppData\LocalLow\IGDump\sec\ig.exe) - (\REGISTRY\USER\S-1-5-21-504369874-3521093726-15342627-1001_Classes\WOW6432Node\CLSID\{F324E4F9-8496-40B2-A1FF-9617C1C9AFFE})." 12/03/25 " 16:43:21.201" 62392980 1c44 0194 WARNING MBAMChameleon IgRegistryNotifyRoutine "IG2ProtReg.c" 255 "REGISTRY OPERATION BLOCKED!! Due to restricted COM access(0000000000001C44):(\Device\HarddiskVolume3\Users\grzeg\AppData\LocalLow\IGDump\sec\ig.exe) - (\Registry\Machine\Software\Classes\WOW6432Node\CLSID\{F324E4F9-8496-40B2-A1FF-9617C1C9AFFE})." 12/03/25 " 16:43:21.203" 62392982 1c44 0194 WARNING MBAMChameleon IgRegistryNotifyRoutine "IG2ProtReg.c" 255 "REGISTRY OPERATION BLOCKED!! Due to restricted COM access(0000000000001C44):(\Device\HarddiskVolume3\Users\grzeg\AppData\LocalLow\IGDump\sec\ig.exe) - (\REGISTRY\USER\S-1-5-21-504369874-3521093726-15342627-1001_Classes\WOW6432Node\CLSID\{1F486A52-3CB1-48FD-8F50-B8DC300D9F9D})." 12/03/25 " 16:43:21.203" 62392982 1c44 0194 WARNING MBAMChameleon IgRegistryNotifyRoutine "IG2ProtReg.c" 255 "REGISTRY OPERATION BLOCKED!! Due to restricted COM access(0000000000001C44):(\Device\HarddiskVolume3\Users\grzeg\AppData\LocalLow\IGDump\sec\ig.exe) - (\Registry\Machine\Software\Classes\WOW6432Node\CLSID\{1F486A52-3CB1-48FD-8F50-B8DC300D9F9D})." 12/03/25 " 16:43:21.242" 62393021 1c44 1eac WARNING MBAMChameleon IgRegistryNotifyRoutine "IG2ProtReg.c" 255 "REGISTRY OPERATION BLOCKED!! Due to restricted COM access(0000000000001C44):(\Device\HarddiskVolume3\Users\grzeg\AppData\LocalLow\IGDump\sec\ig.exe) - (\REGISTRY\USER\S-1-5-21-504369874-3521093726-15342627-1001_Classes\WOW6432Node\CLSID\{C53E07EC-25F3-4093-AA39-FC67EA22E99D})." 12/03/25 " 16:43:21.242" 62393021 1c44 1eac WARNING MBAMChameleon IgRegistryNotifyRoutine "IG2ProtReg.c" 255 "REGISTRY OPERATION BLOCKED!! Due to restricted COM access(0000000000001C44):(\Device\HarddiskVolume3\Users\grzeg\AppData\LocalLow\IGDump\sec\ig.exe) - (\Registry\Machine\Software\Classes\WOW6432Node\CLSID\{C53E07EC-25F3-4093-AA39-FC67EA22E99D})." 12/03/25 " 16:43:21.246" 62393025 1c44 0194 WARNING MBAMChameleon IgRegistryNotifyRoutine "IG2ProtReg.c" 255 "REGISTRY OPERATION BLOCKED!! Due to restricted COM access(0000000000001C44):(\Device\HarddiskVolume3\Users\grzeg\AppData\LocalLow\IGDump\sec\ig.exe) - (\REGISTRY\USER\S-1-5-21-504369874-3521093726-15342627-1001_Classes\WOW6432Node\CLSID\{66742402-F9B9-11D1-A202-0000F81FEDEE})." 12/03/25 " 16:43:21.246" 62393025 1c44 0194 WARNING MBAMChameleon IgRegistryNotifyRoutine "IG2ProtReg.c" 255 "REGISTRY OPERATION BLOCKED!! Due to restricted COM access(0000000000001C44):(\Device\HarddiskVolume3\Users\grzeg\AppData\LocalLow\IGDump\sec\ig.exe) - (\Registry\Machine\Software\Classes\WOW6432Node\CLSID\{66742402-F9B9-11D1-A202-0000F81FEDEE})." 12/03/25 " 16:43:21.247" 62393026 1c44 0194 WARNING MBAMChameleon IgRegistryNotifyRoutine "IG2ProtReg.c" 255 "REGISTRY OPERATION BLOCKED!! Due to restricted COM access(0000000000001C44):(\Device\HarddiskVolume3\Users\grzeg\AppData\LocalLow\IGDump\sec\ig.exe) - (\REGISTRY\USER\S-1-5-21-504369874-3521093726-15342627-1001_Classes\WOW6432Node\CLSID\{F324E4F9-8496-40B2-A1FF-9617C1C9AFFE})." 12/03/25 " 16:43:21.247" 62393026 1c44 0194 WARNING MBAMChameleon IgRegistryNotifyRoutine "IG2ProtReg.c" 255 "REGISTRY OPERATION BLOCKED!! Due to restricted COM access(0000000000001C44):(\Device\HarddiskVolume3\Users\grzeg\AppData\LocalLow\IGDump\sec\ig.exe) - (\Registry\Machine\Software\Classes\WOW6432Node\CLSID\{F324E4F9-8496-40B2-A1FF-9617C1C9AFFE})." 12/03/25 " 16:43:21.248" 62393027 1c44 0194 WARNING MBAMChameleon IgRegistryNotifyRoutine "IG2ProtReg.c" 255 "REGISTRY OPERATION BLOCKED!! Due to restricted COM access(0000000000001C44):(\Device\HarddiskVolume3\Users\grzeg\AppData\LocalLow\IGDump\sec\ig.exe) - (\REGISTRY\USER\S-1-5-21-504369874-3521093726-15342627-1001_Classes\WOW6432Node\CLSID\{F324E4F9-8496-40B2-A1FF-9617C1C9AFFE})." 12/03/25 " 16:43:21.248" 62393027 1c44 0194 WARNING MBAMChameleon IgRegistryNotifyRoutine "IG2ProtReg.c" 255 "REGISTRY OPERATION BLOCKED!! Due to restricted COM access(0000000000001C44):(\Device\HarddiskVolume3\Users\grzeg\AppData\LocalLow\IGDump\sec\ig.exe) - (\Registry\Machine\Software\Classes\WOW6432Node\CLSID\{F324E4F9-8496-40B2-A1FF-9617C1C9AFFE})." 12/03/25 " 16:43:21.249" 62393028 1c44 0194 WARNING MBAMChameleon IgRegistryNotifyRoutine "IG2ProtReg.c" 255 "REGISTRY OPERATION BLOCKED!! Due to restricted COM access(0000000000001C44):(\Device\HarddiskVolume3\Users\grzeg\AppData\LocalLow\IGDump\sec\ig.exe) - (\REGISTRY\USER\S-1-5-21-504369874-3521093726-15342627-1001_Classes\WOW6432Node\CLSID\{76765B11-3F95-4AF2-AC9D-EA55D8994F1A})." 12/03/25 " 16:43:21.249" 62393028 1c44 0194 WARNING MBAMChameleon IgRegistryNotifyRoutine "IG2ProtReg.c" 255 "REGISTRY OPERATION BLOCKED!! Due to restricted COM access(0000000000001C44):(\Device\HarddiskVolume3\Users\grzeg\AppData\LocalLow\IGDump\sec\ig.exe) - (\Registry\Machine\Software\Classes\WOW6432Node\CLSID\{76765B11-3F95-4AF2-AC9D-EA55D8994F1A})." 12/03/25 " 16:43:21.262" 62393041 1c44 0194 WARNING MBAMChameleon IgRegistryNotifyRoutine "IG2ProtReg.c" 255 "REGISTRY OPERATION BLOCKED!! Due to restricted COM access(0000000000001C44):(\Device\HarddiskVolume3\Users\grzeg\AppData\LocalLow\IGDump\sec\ig.exe) - (\REGISTRY\USER\S-1-5-21-504369874-3521093726-15342627-1001_Classes\WOW6432Node\CLSID\{7B8A2D94-0AC9-11D1-896C-00C04FB6BFC4})." 12/03/25 " 16:43:21.262" 62393041 1c44 0194 WARNING MBAMChameleon IgRegistryNotifyRoutine "IG2ProtReg.c" 255 "REGISTRY OPERATION BLOCKED!! Due to restricted COM access(0000000000001C44):(\Device\HarddiskVolume3\Users\grzeg\AppData\LocalLow\IGDump\sec\ig.exe) - (\Registry\Machine\Software\Classes\WOW6432Node\CLSID\{7B8A2D94-0AC9-11D1-896C-00C04FB6BFC4})." 12/03/25 " 16:43:21.263" 62393042 1c44 0194 WARNING MBAMChameleon IgRegistryNotifyRoutine "IG2ProtReg.c" 255 "REGISTRY OPERATION BLOCKED!! Due to restricted COM access(0000000000001C44):(\Device\HarddiskVolume3\Users\grzeg\AppData\LocalLow\IGDump\sec\ig.exe) - (\REGISTRY\USER\S-1-5-21-504369874-3521093726-15342627-1001_Classes\WOW6432Node\CLSID\{76765B11-3F95-4AF2-AC9D-EA55D8994F1A})." 12/03/25 " 16:43:21.263" 62393042 1c44 0194 WARNING MBAMChameleon IgRegistryNotifyRoutine "IG2ProtReg.c" 255 "REGISTRY OPERATION BLOCKED!! Due to restricted COM access(0000000000001C44):(\Device\HarddiskVolume3\Users\grzeg\AppData\LocalLow\IGDump\sec\ig.exe) - (\Registry\Machine\Software\Classes\WOW6432Node\CLSID\{76765B11-3F95-4AF2-AC9D-EA55D8994F1A})." 12/03/25 " 16:43:21.263" 62393042 1c44 0194 WARNING MBAMChameleon IgRegistryNotifyRoutine "IG2ProtReg.c" 255 "REGISTRY OPERATION BLOCKED!! Due to restricted COM access(0000000000001C44):(\Device\HarddiskVolume3\Users\grzeg\AppData\LocalLow\IGDump\sec\ig.exe) - (\REGISTRY\USER\S-1-5-21-504369874-3521093726-15342627-1001_Classes\WOW6432Node\CLSID\{76765B11-3F95-4AF2-AC9D-EA55D8994F1A})." 12/03/25 " 16:43:21.263" 62393042 1c44 0194 WARNING MBAMChameleon IgRegistryNotifyRoutine "IG2ProtReg.c" 255 "REGISTRY OPERATION BLOCKED!! Due to restricted COM access(0000000000001C44):(\Device\HarddiskVolume3\Users\grzeg\AppData\LocalLow\IGDump\sec\ig.exe) - (\Registry\Machine\Software\Classes\WOW6432Node\CLSID\{76765B11-3F95-4AF2-AC9D-EA55D8994F1A})." 12/03/25 " 16:43:21.265" 62393044 1c44 0194 WARNING MBAMChameleon IgRegistryNotifyRoutine "IG2ProtReg.c" 255 "REGISTRY OPERATION BLOCKED!! Due to restricted COM access(0000000000001C44):(\Device\HarddiskVolume3\Users\grzeg\AppData\LocalLow\IGDump\sec\ig.exe) - (\REGISTRY\USER\S-1-5-21-504369874-3521093726-15342627-1001_Classes\WOW6432Node\CLSID\{CDC82860-468D-4D4E-B7E7-C298FF23AB2C})." 12/03/25 " 16:43:21.265" 62393044 1c44 0194 WARNING MBAMChameleon IgRegistryNotifyRoutine "IG2ProtReg.c" 255 "REGISTRY OPERATION BLOCKED!! Due to restricted COM access(0000000000001C44):(\Device\HarddiskVolume3\Users\grzeg\AppData\LocalLow\IGDump\sec\ig.exe) - (\Registry\Machine\Software\Classes\WOW6432Node\CLSID\{CDC82860-468D-4D4E-B7E7-C298FF23AB2C})." 12/03/25 " 16:43:21.272" 62393051 1c44 0194 WARNING MBAMChameleon IgRegistryNotifyRoutine "IG2ProtReg.c" 255 "REGISTRY OPERATION BLOCKED!! Due to restricted COM access(0000000000001C44):(\Device\HarddiskVolume3\Users\grzeg\AppData\LocalLow\IGDump\sec\ig.exe) - (\REGISTRY\USER\S-1-5-21-504369874-3521093726-15342627-1001_Classes\WOW6432Node\CLSID\{9AC9FBE1-E0A2-4AD6-B4EE-E212013EA917})." 12/03/25 " 16:43:21.272" 62393051 1c44 0194 WARNING MBAMChameleon IgRegistryNotifyRoutine "IG2ProtReg.c" 255 "REGISTRY OPERATION BLOCKED!! Due to restricted COM access(0000000000001C44):(\Device\HarddiskVolume3\Users\grzeg\AppData\LocalLow\IGDump\sec\ig.exe) - (\Registry\Machine\Software\Classes\WOW6432Node\CLSID\{9AC9FBE1-E0A2-4AD6-B4EE-E212013EA917})." 12/03/25 " 16:43:21.280" 62393059 1c44 2f74 INFO MBAMChameleon ProcessNotify "ProcProt.c" 519 "Trusted process terminating. 0000000000001C44 (\Device\HarddiskVolume3\Users\grzeg\AppData\LocalLow\IGDump\sec\ig.exe)" 12/03/25 " 16:43:22.518" 62394296 2088 314c INFO RTPControllerImpl mb::rtpcontrollerimpl::RtpModuleLoader::Install "RTPLoader.cpp" 121 "rtp.dll was successfully loaded. rtpPath=." 12/03/25 " 16:43:22.619" 62394390 2088 1ed8 WARNING ArwSDK kernelLogger::LogK "ArwLib.Globals.cpp" 241 "tid: 2070 - [MBAMFarFlt] [fileverify.cpp:SearchForCert-2517] Parser returns c000000d." 12/03/25 " 16:43:22.620" 62394390 2088 1ed8 WARNING ArwSDK kernelLogger::LogK "ArwLib.Globals.cpp" 241 "tid: 2070 - [MBAMFarFlt] [fileverify.cpp:SearchForCert-2517] Parser returns c000000d." 12/03/25 " 16:43:22.637" 62394406 2088 1ed8 WARNING ArwSDK kernelLogger::LogK "ArwLib.Globals.cpp" 241 "tid: 2070 - [MBAMFarFlt] [ProcessCB.c:FarPsDeletionCallback-432] Attempt to remove a non existing process (ProcessId = 1484)." 12/03/25 " 16:43:22.637" 62394406 2088 1ed8 WARNING ArwSDK kernelLogger::LogK "ArwLib.Globals.cpp" 241 "tid: 2070 - [MBAMFarFlt] [ProcessCB.c:FarPsDeletionCallback-432] Attempt to remove a non existing process (ProcessId = 12852)." 12/03/25 " 16:43:22.637" 62394406 2088 1ed8 WARNING ArwSDK kernelLogger::LogK "ArwLib.Globals.cpp" 241 "tid: 2070 - [MBAMFarFlt] [fileverify.cpp:SearchForCert-2517] Parser returns c000000d." 12/03/25 " 16:43:22.637" 62394406 2088 1ed8 WARNING ArwSDK kernelLogger::LogK "ArwLib.Globals.cpp" 241 "tid: 2070 - [MBAMFarFlt] [fileverify.cpp:SearchForCert-2517] Parser returns c000000d." 12/03/25 " 16:43:21.280" 62393059 0004 18ec INFO MBAMChameleon PurgeAddedFilters "IG2ProtNet.c" 1929 "Filter(0x74760) purged succesfully from Engine Filter." 12/03/25 " 16:43:21.280" 62393059 0004 18ec INFO MBAMChameleon PurgeAddedFilters "IG2ProtNet.c" 1929 "Filter(0x74759) purged succesfully from Engine Filter." 12/03/25 " 16:43:21.313" 62393092 05b4 2e1c WARNING MBAMChameleon HandleFileCreate "FileProt.c" 444 "FileFilter: Blocking access to \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\ig.exe from mode 1 - process \Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe" 12/03/25 " 16:43:21.314" 62393093 05b4 2738 WARNING MBAMChameleon HandleFileCreate "FileProt.c" 444 "FileFilter: Blocking access to \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\ig.exe from mode 1 - process \Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe" 12/03/25 " 16:43:21.387" 62393166 2088 2478 WARNING MBAMChameleon SearchForCert "fileverify.cpp" 2517 "Parser returns c000000d" 12/03/25 " 16:43:21.391" 62393170 2088 2478 INFO MBAMChameleon ProcessNotify "ProcProt.c" 422 "Trusted process starting: Process (00000000000014A4) Name avail: 1 FO FFFFA28253B082C0, \??\C:\Program Files\Malwarebytes\Anti-Malware\ig.exe" 12/03/25 " 16:43:21.549" 62393328 14a4 31fc INFO MBAMChameleon ProcessNotify "ProcProt.c" 519 "Trusted process terminating. 00000000000014A4 (\Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\ig.exe)" 12/03/25 " 16:43:21.570" 62393349 05b4 2e1c WARNING MBAMChameleon HandleFileCreate "FileProt.c" 444 "FileFilter: Blocking access to \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\ig.exe from mode 1 - process \Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe" 12/03/25 " 16:43:21.571" 62393350 05b4 2738 WARNING MBAMChameleon HandleFileCreate "FileProt.c" 444 "FileFilter: Blocking access to \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\ig.exe from mode 1 - process \Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe" 12/03/25 " 16:43:21.649" 62393428 2088 2478 WARNING MBAMChameleon SearchForCert "fileverify.cpp" 2517 "Parser returns c000000d" 12/03/25 " 16:43:21.652" 62393431 2088 2478 INFO MBAMChameleon ProcessNotify "ProcProt.c" 422 "Trusted process starting: Process (0000000000002EC0) Name avail: 1 FO FFFFA2824CA49900, \??\C:\Program Files\Malwarebytes\Anti-Malware\ig.exe" 12/03/25 " 16:43:21.744" 62393523 2ec0 2f4c INFO MBAMChameleon ProcessNotify "ProcProt.c" 519 "Trusted process terminating. 0000000000002EC0 (\Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\ig.exe)" 12/03/25 " 16:43:21.806" 62393585 05b4 2f18 WARNING MBAMChameleon HandleFileCreate "FileProt.c" 444 "FileFilter: Blocking access to \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\ig.exe from mode 1 - process \Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe" 12/03/25 " 16:43:21.806" 62393585 05b4 2e1c WARNING MBAMChameleon HandleFileCreate "FileProt.c" 444 "FileFilter: Blocking access to \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\ig.exe from mode 1 - process \Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe" 12/03/25 " 16:43:21.882" 62393661 2088 2478 WARNING MBAMChameleon SearchForCert "fileverify.cpp" 2517 "Parser returns c000000d" 12/03/25 " 16:43:21.886" 62393665 2088 2478 INFO MBAMChameleon ProcessNotify "ProcProt.c" 422 "Trusted process starting: Process (0000000000002154) Name avail: 1 FO FFFFA28253508770, \??\C:\Program Files\Malwarebytes\Anti-Malware\ig.exe" 12/03/25 " 16:43:21.960" 62393739 2154 26d0 INFO MBAMChameleon ProcessNotify "ProcProt.c" 519 "Trusted process terminating. 0000000000002154 (\Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\ig.exe)" 12/03/25 " 16:43:21.972" 62393751 05b4 2e1c WARNING MBAMChameleon HandleFileCreate "FileProt.c" 444 "FileFilter: Blocking access to \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\ig.exe from mode 1 - process \Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe" 12/03/25 " 16:43:21.972" 62393751 05b4 316c WARNING MBAMChameleon HandleFileCreate "FileProt.c" 444 "FileFilter: Blocking access to \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\ig.exe from mode 1 - process \Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe" 12/03/25 " 16:43:22.021" 62393800 2088 2478 WARNING MBAMChameleon SearchForCert "fileverify.cpp" 2517 "Parser returns c000000d" 12/03/25 " 16:43:22.025" 62393804 2088 2478 INFO MBAMChameleon ProcessNotify "ProcProt.c" 422 "Trusted process starting: Process (00000000000023EC) Name avail: 1 FO FFFFA2824CA50E30, \??\C:\Program Files\Malwarebytes\Anti-Malware\ig.exe" 12/03/25 " 16:43:22.095" 62393874 23ec 3154 INFO MBAMChameleon ProcessNotify "ProcProt.c" 519 "Trusted process terminating. 00000000000023EC (\Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\ig.exe)" 12/03/25 " 16:43:22.114" 62393893 05b4 2e1c WARNING MBAMChameleon HandleFileCreate "FileProt.c" 444 "FileFilter: Blocking access to \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\ig.exe from mode 1 - process \Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe" 12/03/25 " 16:43:22.115" 62393894 05b4 27c8 WARNING MBAMChameleon HandleFileCreate "FileProt.c" 444 "FileFilter: Blocking access to \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\ig.exe from mode 1 - process \Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe" 12/03/25 " 16:43:22.153" 62393932 2088 2478 WARNING MBAMChameleon SearchForCert "fileverify.cpp" 2517 "Parser returns c000000d" 12/03/25 " 16:43:22.157" 62393936 2088 2478 INFO MBAMChameleon ProcessNotify "ProcProt.c" 422 "Trusted process starting: Process (0000000000000440) Name avail: 1 FO FFFFA28253B06E70, \??\C:\Program Files\Malwarebytes\Anti-Malware\ig.exe" 12/03/25 " 16:43:22.230" 62394009 0440 1078 INFO MBAMChameleon ProcessNotify "ProcProt.c" 519 "Trusted process terminating. 0000000000000440 (\Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\ig.exe)" 12/03/25 " 16:43:22.241" 62394020 05b4 2e1c WARNING MBAMChameleon HandleFileCreate "FileProt.c" 444 "FileFilter: Blocking access to \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\ig.exe from mode 1 - process \Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe" 12/03/25 " 16:43:22.241" 62394020 05b4 2738 WARNING MBAMChameleon HandleFileCreate "FileProt.c" 444 "FileFilter: Blocking access to \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\ig.exe from mode 1 - process \Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe" 12/03/25 " 16:43:22.290" 62394069 2088 2478 WARNING MBAMChameleon SearchForCert "fileverify.cpp" 2517 "Parser returns c000000d" 12/03/25 " 16:43:22.293" 62394072 2088 2478 INFO MBAMChameleon ProcessNotify "ProcProt.c" 422 "Trusted process starting: Process (00000000000030F0) Name avail: 1 FO FFFFA28253B082C0, \??\C:\Program Files\Malwarebytes\Anti-Malware\ig.exe" 12/03/25 " 16:43:22.342" 62394121 30f0 09b0 INFO MBAMChameleon ProcessNotify "ProcProt.c" 519 "Trusted process terminating. 00000000000030F0 (\Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\ig.exe)" 12/03/25 " 16:43:22.360" 62394139 05b4 2738 WARNING MBAMChameleon HandleFileCreate "FileProt.c" 444 "FileFilter: Blocking access to \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\ig.exe from mode 1 - process \Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe" 12/03/25 " 16:43:22.360" 62394139 05b4 2e1c WARNING MBAMChameleon HandleFileCreate "FileProt.c" 444 "FileFilter: Blocking access to \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\ig.exe from mode 1 - process \Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe" 12/03/25 " 16:43:22.419" 62394198 2088 2478 WARNING MBAMChameleon SearchForCert "fileverify.cpp" 2517 "Parser returns c000000d" 12/03/25 " 16:43:22.423" 62394202 2088 2478 INFO MBAMChameleon ProcessNotify "ProcProt.c" 422 "Trusted process starting: Process (0000000000000954) Name avail: 1 FO FFFFA28253B082C0, \??\C:\Program Files\Malwarebytes\Anti-Malware\ig.exe" 12/03/25 " 16:43:22.487" 62394266 0954 07c4 INFO MBAMChameleon ProcessNotify "ProcProt.c" 519 "Trusted process terminating. 0000000000000954 (\Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\ig.exe)" 12/03/25 " 16:43:22.500" 62394279 05b4 2e1c WARNING MBAMChameleon HandleFileCreate "FileProt.c" 444 "FileFilter: Blocking access to \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\ig.exe from mode 1 - process \Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe" 12/03/25 " 16:43:22.501" 62394280 05b4 2738 WARNING MBAMChameleon HandleFileCreate "FileProt.c" 444 "FileFilter: Blocking access to \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\ig.exe from mode 1 - process \Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe" 12/03/25 " 16:43:22.555" 62394334 2088 2478 WARNING MBAMChameleon SearchForCert "fileverify.cpp" 2517 "Parser returns c000000d" 12/03/25 " 16:43:22.558" 62394337 2088 2478 INFO MBAMChameleon ProcessNotify "ProcProt.c" 422 "Trusted process starting: Process (0000000000002784) Name avail: 1 FO FFFFA28253502CD0, \??\C:\Program Files\Malwarebytes\Anti-Malware\ig.exe" 12/03/25 " 16:43:22.652" 62394431 2784 00dc INFO MBAMChameleon ProcessNotify "ProcProt.c" 519 "Trusted process terminating. 0000000000002784 (\Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\ig.exe)" 12/03/25 " 16:43:22.671" 62394450 05b4 2e1c WARNING MBAMChameleon HandleFileCreate "FileProt.c" 444 "FileFilter: Blocking access to \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\ig.exe from mode 1 - process \Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe" 12/03/25 " 16:43:22.672" 62394451 05b4 2f18 WARNING MBAMChameleon HandleFileCreate "FileProt.c" 444 "FileFilter: Blocking access to \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\ig.exe from mode 1 - process \Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe" 12/03/25 " 16:43:22.892" 62394656 2088 0020 INFO AEControllerImpl mb::aecontrollerimpl::AEControllerImplHelper::StartProtectionImpl "AEControllerImplHelper.cpp" 732 "Protection Started" 12/03/25 " 16:43:23.069" 62394843 2088 314c WARNING RtpSDK RtpUserImpl::Start "RtpUserImpl.cpp" 279 "Set sample path in filter driver [C:\ProgramData\Malwarebytes\MBAMService\RtpDetectionSamples\]" 12/03/25 " 16:43:23.070" 62394843 2088 314c INFO RtpSDK RtpUserImpl::Start "RtpUserImpl.cpp" 311 "Rtp driver started." 12/03/25 " 16:43:23.070" 62394843 2088 314c INFO RTPControllerImpl mb::rtpcontrollerimpl::RtpModuleLoader::Start "RTPLoader.cpp" 219 "Rtp successfully started." 12/03/25 " 16:43:23.072" 62394843 2088 314c WARNING RtpSDK RtpUserImpl::SetGameApp "RtpUserImpl.cpp" 637 "Set/Remove game appin filter driver [] 1" 12/03/25 " 16:43:23.627" 62395390 2088 1ed8 WARNING ArwSDK kernelLogger::LogK "ArwLib.Globals.cpp" 241 "tid: 2070 - [MBAMFarFlt] [fileverify.cpp:SearchForCert-2517] Parser returns c000000d." 12/03/25 " 16:43:23.628" 62395406 2088 1ed8 WARNING ArwSDK kernelLogger::LogK "ArwLib.Globals.cpp" 241 "tid: 2070 - [MBAMFarFlt] [fileverify.cpp:SearchForCert-2517] Parser returns c000000d." 12/03/25 " 16:43:23.628" 62395406 2088 1ed8 WARNING ArwSDK kernelLogger::LogK "ArwLib.Globals.cpp" 241 "tid: 2070 - [MBAMFarFlt] [fileverify.cpp:SearchForCert-2517] Parser returns c000000d." 12/03/25 " 16:43:23.628" 62395406 2088 1ed8 WARNING ArwSDK kernelLogger::LogK "ArwLib.Globals.cpp" 241 "tid: 2070 - [MBAMFarFlt] [fileverify.cpp:SearchForCert-2517] Parser returns c000000d." 12/03/25 " 16:43:23.628" 62395406 2088 1ed8 WARNING ArwSDK kernelLogger::LogK "ArwLib.Globals.cpp" 241 "tid: 2070 - [MBAMFarFlt] [fileverify.cpp:SearchForCert-2517] Parser returns c000000d." 12/03/25 " 16:43:23.628" 62395406 2088 1ed8 WARNING ArwSDK kernelLogger::LogK "ArwLib.Globals.cpp" 241 "tid: 2070 - [MBAMFarFlt] [fileverify.cpp:SearchForCert-2517] Parser returns c000000d." 12/03/25 " 16:43:23.628" 62395406 2088 1ed8 WARNING ArwSDK kernelLogger::LogK "ArwLib.Globals.cpp" 241 "tid: 2070 - [MBAMFarFlt] [fileverify.cpp:SearchForCert-2517] Parser returns c000000d." 12/03/25 " 16:43:23.628" 62395406 2088 1ed8 WARNING ArwSDK kernelLogger::LogK "ArwLib.Globals.cpp" 241 "tid: 2070 - [MBAMFarFlt] [fileverify.cpp:SearchForCert-2517] Parser returns c000000d." 12/03/25 " 16:43:22.715" 62394494 2088 2478 WARNING MBAMChameleon SearchForCert "fileverify.cpp" 2517 "Parser returns c000000d" 12/03/25 " 16:43:22.718" 62394497 2088 2478 INFO MBAMChameleon ProcessNotify "ProcProt.c" 422 "Trusted process starting: Process (0000000000002090) Name avail: 1 FO FFFFA2824CA50E30, \??\C:\Program Files\Malwarebytes\Anti-Malware\ig.exe" 12/03/25 " 16:43:22.813" 62394592 2090 299c INFO MBAMChameleon ProcessNotify "ProcProt.c" 519 "Trusted process terminating. 0000000000002090 (\Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\ig.exe)" 12/03/25 " 16:43:22.825" 62394604 05b4 316c WARNING MBAMChameleon HandleFileCreate "FileProt.c" 444 "FileFilter: Blocking access to \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\ig.exe from mode 1 - process \Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe" 12/03/25 " 16:43:22.825" 62394604 05b4 2e1c WARNING MBAMChameleon HandleFileCreate "FileProt.c" 444 "FileFilter: Blocking access to \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\ig.exe from mode 1 - process \Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe" 12/03/25 " 16:43:22.886" 62394665 2088 2478 WARNING MBAMChameleon SearchForCert "fileverify.cpp" 2517 "Parser returns c000000d" 12/03/25 " 16:43:22.889" 62394668 2088 2478 INFO MBAMChameleon ProcessNotify "ProcProt.c" 422 "Trusted process starting: Process (0000000000001244) Name avail: 1 FO FFFFA28253B0B970, \??\C:\Program Files\Malwarebytes\Anti-Malware\ig.exe" 12/03/25 " 16:43:22.945" 62394724 1244 321c INFO MBAMChameleon ProcessNotify "ProcProt.c" 519 "Trusted process terminating. 0000000000001244 (\Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\ig.exe)" 12/03/25 " 16:43:22.955" 62394734 05b4 2e1c WARNING MBAMChameleon HandleFileCreate "FileProt.c" 444 "FileFilter: Blocking access to \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\ig.exe from mode 1 - process \Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe" 12/03/25 " 16:43:22.955" 62394734 05b4 2738 WARNING MBAMChameleon HandleFileCreate "FileProt.c" 444 "FileFilter: Blocking access to \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\ig.exe from mode 1 - process \Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe" 12/03/25 " 16:43:22.998" 62394777 2088 2478 WARNING MBAMChameleon SearchForCert "fileverify.cpp" 2517 "Parser returns c000000d" 12/03/25 " 16:43:23.002" 62394781 2088 2478 INFO MBAMChameleon ProcessNotify "ProcProt.c" 422 "Trusted process starting: Process (0000000000002F2C) Name avail: 1 FO FFFFA282535034A0, \??\C:\Program Files\Malwarebytes\Anti-Malware\ig.exe" 12/03/25 " 16:43:23.110" 62394889 2f2c 2d3c INFO MBAMChameleon ProcessNotify "ProcProt.c" 519 "Trusted process terminating. 0000000000002F2C (\Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\ig.exe)" 12/03/25 " 16:43:23.160" 62394939 05b4 2f18 WARNING MBAMChameleon HandleFileCreate "FileProt.c" 444 "FileFilter: Blocking access to \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\ig.exe from mode 1 - process \Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe" 12/03/25 " 16:43:23.160" 62394939 05b4 2e1c WARNING MBAMChameleon HandleFileCreate "FileProt.c" 444 "FileFilter: Blocking access to \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\ig.exe from mode 1 - process \Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe" 12/03/25 " 16:43:23.236" 62395015 2088 2478 WARNING MBAMChameleon SearchForCert "fileverify.cpp" 2517 "Parser returns c000000d" 12/03/25 " 16:43:23.240" 62395019 2088 2478 INFO MBAMChameleon ProcessNotify "ProcProt.c" 422 "Trusted process starting: Process (000000000000122C) Name avail: 1 FO FFFFA2824CA51600, \??\C:\Program Files\Malwarebytes\Anti-Malware\ig.exe" 12/03/25 " 16:43:23.311" 62395090 122c 0934 INFO MBAMChameleon ProcessNotify "ProcProt.c" 519 "Trusted process terminating. 000000000000122C (\Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\ig.exe)" 12/03/25 " 16:43:23.322" 62395101 05b4 2e1c WARNING MBAMChameleon HandleFileCreate "FileProt.c" 444 "FileFilter: Blocking access to \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\ig.exe from mode 1 - process \Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe" 12/03/25 " 16:43:23.322" 62395101 05b4 316c WARNING MBAMChameleon HandleFileCreate "FileProt.c" 444 "FileFilter: Blocking access to \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\ig.exe from mode 1 - process \Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe" 12/03/25 " 16:43:23.331" 62395110 05b4 1af4 WARNING MBAMChameleon HandleFileCreate "FileProt.c" 444 "FileFilter: Blocking access to \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware from mode 1 - process \Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe" 12/03/25 " 16:43:23.372" 62395151 2088 2478 WARNING MBAMChameleon SearchForCert "fileverify.cpp" 2517 "Parser returns c000000d" 12/03/25 " 16:43:23.377" 62395156 2088 2478 INFO MBAMChameleon ProcessNotify "ProcProt.c" 422 "Trusted process starting: Process (0000000000002018) Name avail: 1 FO FFFFA28253B0B4C0, \??\C:\Program Files\Malwarebytes\Anti-Malware\ig.exe" 12/03/25 " 16:43:23.434" 62395213 05b4 1af4 WARNING MBAMChameleon HandleFileCreate "FileProt.c" 444 "FileFilter: Blocking access to \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\MBAMWsc.exe:Zone.Identifier from mode 1 - process \Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe" 12/03/25 " 16:43:23.440" 62395219 2018 0e54 INFO MBAMChameleon ProcessNotify "ProcProt.c" 519 "Trusted process terminating. 0000000000002018 (\Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\ig.exe)" 12/03/25 " 16:43:23.458" 62395237 05b4 2e1c WARNING MBAMChameleon HandleFileCreate "FileProt.c" 444 "FileFilter: Blocking access to \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\MBAMWsc.exe from mode 1 - process \Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe" 12/03/25 " 16:43:23.461" 62395240 05b4 2e1c WARNING MBAMChameleon HandleFileCreate "FileProt.c" 444 "FileFilter: Blocking access to \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\MBAMWsc.exe from mode 1 - process \Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe" 12/03/25 " 16:43:23.463" 62395242 05b4 27c8 WARNING MBAMChameleon HandleFileCreate "FileProt.c" 444 "FileFilter: Blocking access to \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\MBAMWsc.exe from mode 1 - process \Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe" 12/03/25 " 16:43:23.466" 62395245 05b4 2984 WARNING MBAMChameleon HandleFileCreate "FileProt.c" 444 "FileFilter: Blocking access to \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\MBAMWsc.exe from mode 1 - process \Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe" 12/03/25 " 16:43:23.481" 62395260 05b4 2e1c WARNING MBAMChameleon HandleFileCreate "FileProt.c" 444 "FileFilter: Blocking access to \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\ig.exe from mode 1 - process \Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe" 12/03/25 " 16:43:23.482" 62395261 05b4 27c8 WARNING MBAMChameleon HandleFileCreate "FileProt.c" 444 "FileFilter: Blocking access to \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\ig.exe from mode 1 - process \Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe" 12/03/25 " 16:43:24.637" 62396406 2088 1ed8 WARNING ArwSDK kernelLogger::LogK "ArwLib.Globals.cpp" 241 "tid: 2070 - [MBAMFarFlt] [fileverify.cpp:SearchForCert-2517] Parser returns c000000d." 12/03/25 " 16:43:24.637" 62396406 2088 1ed8 WARNING ArwSDK kernelLogger::LogK "ArwLib.Globals.cpp" 241 "tid: 2070 - [MBAMFarFlt] [fileverify.cpp:SearchForCert-2517] Parser returns c000000d." 12/03/25 " 16:43:24.637" 62396406 2088 1ed8 WARNING ArwSDK kernelLogger::LogK "ArwLib.Globals.cpp" 241 "tid: 2070 - [MBAMFarFlt] [fileverify.cpp:SearchForCert-2517] Parser returns c000000d." 12/03/25 " 16:43:24.637" 62396406 2088 1ed8 WARNING ArwSDK kernelLogger::LogK "ArwLib.Globals.cpp" 241 "tid: 2070 - [MBAMFarFlt] [fileverify.cpp:SearchForCert-2517] Parser returns c000000d." 12/03/25 " 16:43:24.637" 62396406 2088 1ed8 WARNING ArwSDK kernelLogger::LogK "ArwLib.Globals.cpp" 241 "tid: 2070 - [MBAMFarFlt] [fileverify.cpp:SearchForCert-2517] Parser returns c000000d." 12/03/25 " 16:43:24.638" 62396406 2088 1ed8 WARNING ArwSDK kernelLogger::LogK "ArwLib.Globals.cpp" 241 "tid: 2070 - [MBAMFarFlt] [fileverify.cpp:SearchForCert-2517] Parser returns c000000d." 12/03/25 " 16:43:24.638" 62396406 2088 1ed8 WARNING ArwSDK kernelLogger::LogK "ArwLib.Globals.cpp" 241 "tid: 2070 - [MBAMFarFlt] [fileverify.cpp:SearchForCert-2517] Parser returns c000000d." 12/03/25 " 16:43:23.565" 62395344 2088 2478 WARNING MBAMChameleon SearchForCert "fileverify.cpp" 2517 "Parser returns c000000d" 12/03/25 " 16:43:23.569" 62395348 2088 2478 INFO MBAMChameleon ProcessNotify "ProcProt.c" 422 "Trusted process starting: Process (00000000000031B0) Name avail: 1 FO FFFFA28253502CD0, \??\C:\Program Files\Malwarebytes\Anti-Malware\ig.exe" 12/03/25 " 16:43:23.632" 62395411 31b0 2c30 INFO MBAMChameleon ProcessNotify "ProcProt.c" 519 "Trusted process terminating. 00000000000031B0 (\Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\ig.exe)" 12/03/25 " 16:43:23.668" 62395447 05b4 2738 WARNING MBAMChameleon HandleFileCreate "FileProt.c" 444 "FileFilter: Blocking access to \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\ig.exe from mode 1 - process \Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe" 12/03/25 " 16:43:23.668" 62395447 05b4 2e1c WARNING MBAMChameleon HandleFileCreate "FileProt.c" 444 "FileFilter: Blocking access to \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\ig.exe from mode 1 - process \Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe" 12/03/25 " 16:43:23.766" 62395545 2088 1cb4 WARNING MBAMChameleon SearchForCert "fileverify.cpp" 2517 "Parser returns c000000d" 12/03/25 " 16:43:23.773" 62395552 2088 1cb4 INFO MBAMChameleon ProcessNotify "ProcProt.c" 422 "Trusted process starting: Process (00000000000003A4) Name avail: 1 FO FFFFA28253B0AB60, \??\C:\Program Files\Malwarebytes\Anti-Malware\MBAMWsc.exe" 12/03/25 " 16:43:23.782" 62395561 2088 2478 WARNING MBAMChameleon SearchForCert "fileverify.cpp" 2517 "Parser returns c000000d" 12/03/25 " 16:43:23.786" 62395565 2088 2478 INFO MBAMChameleon ProcessNotify "ProcProt.c" 422 "Trusted process starting: Process (000000000000129C) Name avail: 1 FO FFFFA28253502CD0, \??\C:\Program Files\Malwarebytes\Anti-Malware\ig.exe" 12/03/25 " 16:43:23.924" 62395703 129c 2f50 INFO MBAMChameleon ProcessNotify "ProcProt.c" 519 "Trusted process terminating. 000000000000129C (\Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\ig.exe)" 12/03/25 " 16:43:23.955" 62395734 05b4 1b00 WARNING MBAMChameleon HandleFileCreate "FileProt.c" 444 "FileFilter: Blocking access to \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\ig.exe from mode 1 - process \Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe" 12/03/25 " 16:43:23.955" 62395734 05b4 2e1c WARNING MBAMChameleon HandleFileCreate "FileProt.c" 444 "FileFilter: Blocking access to \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\ig.exe from mode 1 - process \Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe" 12/03/25 " 16:43:24.010" 62395789 2088 2478 WARNING MBAMChameleon SearchForCert "fileverify.cpp" 2517 "Parser returns c000000d" 12/03/25 " 16:43:24.014" 62395793 2088 2478 INFO MBAMChameleon ProcessNotify "ProcProt.c" 422 "Trusted process starting: Process (0000000000002104) Name avail: 1 FO FFFFA28247D2C750, \??\C:\Program Files\Malwarebytes\Anti-Malware\ig.exe" 12/03/25 " 16:43:24.075" 62395854 2104 14d4 INFO MBAMChameleon ProcessNotify "ProcProt.c" 519 "Trusted process terminating. 0000000000002104 (\Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\ig.exe)" 12/03/25 " 16:43:24.086" 62395865 05b4 2f18 WARNING MBAMChameleon HandleFileCreate "FileProt.c" 444 "FileFilter: Blocking access to \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\ig.exe from mode 1 - process \Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe" 12/03/25 " 16:43:24.086" 62395865 05b4 2e1c WARNING MBAMChameleon HandleFileCreate "FileProt.c" 444 "FileFilter: Blocking access to \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\ig.exe from mode 1 - process \Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe" 12/03/25 " 16:43:24.134" 62395913 2088 2478 WARNING MBAMChameleon SearchForCert "fileverify.cpp" 2517 "Parser returns c000000d" 12/03/25 " 16:43:24.138" 62395917 2088 2478 INFO MBAMChameleon ProcessNotify "ProcProt.c" 422 "Trusted process starting: Process (00000000000024EC) Name avail: 1 FO FFFFA2824877FDD0, \??\C:\Program Files\Malwarebytes\Anti-Malware\ig.exe" 12/03/25 " 16:43:24.204" 62395983 24ec 1b68 INFO MBAMChameleon ProcessNotify "ProcProt.c" 519 "Trusted process terminating. 00000000000024EC (\Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\ig.exe)" 12/03/25 " 16:43:24.219" 62395998 05b4 2e1c WARNING MBAMChameleon HandleFileCreate "FileProt.c" 444 "FileFilter: Blocking access to \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\ig.exe from mode 1 - process \Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe" 12/03/25 " 16:43:24.220" 62395999 05b4 2f18 WARNING MBAMChameleon HandleFileCreate "FileProt.c" 444 "FileFilter: Blocking access to \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\ig.exe from mode 1 - process \Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe" 12/03/25 " 16:43:24.263" 62396042 2088 2478 WARNING MBAMChameleon SearchForCert "fileverify.cpp" 2517 "Parser returns c000000d" 12/03/25 " 16:43:24.267" 62396046 2088 2478 INFO MBAMChameleon ProcessNotify "ProcProt.c" 422 "Trusted process starting: Process (0000000000002A44) Name avail: 1 FO FFFFA28245CA9B30, \??\C:\Program Files\Malwarebytes\Anti-Malware\ig.exe" 12/03/25 " 16:43:24.324" 62396103 2a44 245c INFO MBAMChameleon ProcessNotify "ProcProt.c" 519 "Trusted process terminating. 0000000000002A44 (\Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\ig.exe)" 12/03/25 " 16:43:24.336" 62396115 05b4 2e1c WARNING MBAMChameleon HandleFileCreate "FileProt.c" 444 "FileFilter: Blocking access to \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\ig.exe from mode 1 - process \Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe" 12/03/25 " 16:43:24.336" 62396115 05b4 27c8 WARNING MBAMChameleon HandleFileCreate "FileProt.c" 444 "FileFilter: Blocking access to \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\ig.exe from mode 1 - process \Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe" 12/03/25 " 16:43:24.379" 62396158 2088 2478 WARNING MBAMChameleon SearchForCert "fileverify.cpp" 2517 "Parser returns c000000d" 12/03/25 " 16:43:24.382" 62396161 2088 2478 INFO MBAMChameleon ProcessNotify "ProcProt.c" 422 "Trusted process starting: Process (0000000000001724) Name avail: 1 FO FFFFA2824F3A9B60, \??\C:\Program Files\Malwarebytes\Anti-Malware\ig.exe" 12/03/25 " 16:43:24.438" 62396217 1724 242c INFO MBAMChameleon ProcessNotify "ProcProt.c" 519 "Trusted process terminating. 0000000000001724 (\Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\ig.exe)" 12/03/25 " 16:43:24.449" 62396228 05b4 2738 WARNING MBAMChameleon HandleFileCreate "FileProt.c" 444 "FileFilter: Blocking access to \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\ig.exe from mode 1 - process \Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe" 12/03/25 " 16:43:24.449" 62396228 05b4 2e1c WARNING MBAMChameleon HandleFileCreate "FileProt.c" 444 "FileFilter: Blocking access to \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\ig.exe from mode 1 - process \Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe" 12/03/25 " 16:43:24.495" 62396274 2088 2478 WARNING MBAMChameleon SearchForCert "fileverify.cpp" 2517 "Parser returns c000000d" 12/03/25 " 16:43:24.498" 62396277 2088 2478 INFO MBAMChameleon ProcessNotify "ProcProt.c" 422 "Trusted process starting: Process (0000000000003258) Name avail: 1 FO FFFFA2824F88C6B0, \??\C:\Program Files\Malwarebytes\Anti-Malware\ig.exe" 12/03/25 " 16:43:24.550" 62396329 3258 1f08 INFO MBAMChameleon ProcessNotify "ProcProt.c" 519 "Trusted process terminating. 0000000000003258 (\Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\ig.exe)" 12/03/25 " 16:43:24.562" 62396341 05b4 2738 WARNING MBAMChameleon HandleFileCreate "FileProt.c" 444 "FileFilter: Blocking access to \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\ig.exe from mode 1 - process \Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe" 12/03/25 " 16:43:24.562" 62396341 05b4 2e1c WARNING MBAMChameleon HandleFileCreate "FileProt.c" 444 "FileFilter: Blocking access to \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\ig.exe from mode 1 - process \Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe" 12/03/25 " 16:43:24.606" 62396385 2088 2478 WARNING MBAMChameleon SearchForCert "fileverify.cpp" 2517 "Parser returns c000000d" 12/03/25 " 16:43:24.610" 62396389 2088 2478 INFO MBAMChameleon ProcessNotify "ProcProt.c" 422 "Trusted process starting: Process (00000000000005C4) Name avail: 1 FO FFFFA2824F88BD50, \??\C:\Program Files\Malwarebytes\Anti-Malware\ig.exe" 12/03/25 " 16:43:24.666" 62396445 05c4 2494 INFO MBAMChameleon ProcessNotify "ProcProt.c" 519 "Trusted process terminating. 00000000000005C4 (\Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\ig.exe)" 12/03/25 " 16:43:23.069" 62394841 0004 02dc INFO MBAMProtection DriverEntry$fin$0 "protector.c" 350 "MBAMProtection service started. (3.2.0.330)" 12/03/25 " 16:43:23.222" 62394994 0004 266c INFO MBAMProtection GetRunningGameProcessList "PathUtil.c" 179 "GetRunningProcessList: returning." 12/03/25 " 16:43:25.662" 62397437 2088 1ed8 WARNING ArwSDK kernelLogger::LogK "ArwLib.Globals.cpp" 241 "tid: 2070 - [MBAMFarFlt] [fileverify.cpp:SearchForCert-2517] Parser returns c000000d." 12/03/25 " 16:43:25.662" 62397437 2088 1ed8 WARNING ArwSDK kernelLogger::LogK "ArwLib.Globals.cpp" 241 "tid: 2070 - [MBAMFarFlt] [fileverify.cpp:SearchForCert-2517] Parser returns c000000d." 12/03/25 " 16:43:25.662" 62397437 2088 1ed8 WARNING ArwSDK kernelLogger::LogK "ArwLib.Globals.cpp" 241 "tid: 2070 - [MBAMFarFlt] [fileverify.cpp:SearchForCert-2517] Parser returns c000000d." 12/03/25 " 16:43:24.677" 62396456 05b4 2e1c WARNING MBAMChameleon HandleFileCreate "FileProt.c" 444 "FileFilter: Blocking access to \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\ig.exe from mode 1 - process \Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe" 12/03/25 " 16:43:24.677" 62396456 05b4 1b00 WARNING MBAMChameleon HandleFileCreate "FileProt.c" 444 "FileFilter: Blocking access to \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\ig.exe from mode 1 - process \Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe" 12/03/25 " 16:43:24.719" 62396498 2088 2478 WARNING MBAMChameleon SearchForCert "fileverify.cpp" 2517 "Parser returns c000000d" 12/03/25 " 16:43:24.723" 62396502 2088 2478 INFO MBAMChameleon ProcessNotify "ProcProt.c" 422 "Trusted process starting: Process (0000000000001F04) Name avail: 1 FO FFFFA2824F8889C0, \??\C:\Program Files\Malwarebytes\Anti-Malware\ig.exe" 12/03/25 " 16:43:24.780" 62396559 1f04 2238 INFO MBAMChameleon ProcessNotify "ProcProt.c" 519 "Trusted process terminating. 0000000000001F04 (\Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\ig.exe)" 12/03/25 " 16:43:24.791" 62396570 05b4 2f18 WARNING MBAMChameleon HandleFileCreate "FileProt.c" 444 "FileFilter: Blocking access to \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\ig.exe from mode 1 - process \Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe" 12/03/25 " 16:43:24.791" 62396570 05b4 2e1c WARNING MBAMChameleon HandleFileCreate "FileProt.c" 444 "FileFilter: Blocking access to \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\ig.exe from mode 1 - process \Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe" 12/03/25 " 16:43:24.848" 62396627 2088 2478 WARNING MBAMChameleon SearchForCert "fileverify.cpp" 2517 "Parser returns c000000d" 12/03/25 " 16:43:24.862" 62396641 2088 2478 INFO MBAMChameleon ProcessNotify "ProcProt.c" 422 "Trusted process starting: Process (0000000000002748) Name avail: 1 FO FFFFA2825350D8B0, \??\C:\Program Files\Malwarebytes\Anti-Malware\ig.exe" 12/03/25 " 16:43:24.965" 62396744 2748 1f44 INFO MBAMChameleon ProcessNotify "ProcProt.c" 519 "Trusted process terminating. 0000000000002748 (\Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\ig.exe)" 12/03/25 " 16:43:24.980" 62396759 05b4 2e1c WARNING MBAMChameleon HandleFileCreate "FileProt.c" 444 "FileFilter: Blocking access to \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\ig.exe from mode 1 - process \Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe" 12/03/25 " 16:43:24.983" 62396762 05b4 1b00 WARNING MBAMChameleon HandleFileCreate "FileProt.c" 444 "FileFilter: Blocking access to \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\ig.exe from mode 1 - process \Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe" 12/03/25 " 16:43:25.050" 62396829 2088 2478 WARNING MBAMChameleon SearchForCert "fileverify.cpp" 2517 "Parser returns c000000d" 12/03/25 " 16:43:25.054" 62396833 2088 2478 INFO MBAMChameleon ProcessNotify "ProcProt.c" 422 "Trusted process starting: Process (0000000000002584) Name avail: 1 FO FFFFA2824CA5E760, \??\C:\Program Files\Malwarebytes\Anti-Malware\ig.exe" 12/03/25 " 16:43:25.117" 62396896 2584 0d48 INFO MBAMChameleon ProcessNotify "ProcProt.c" 519 "Trusted process terminating. 0000000000002584 (\Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\ig.exe)" 12/03/25 " 16:43:25.127" 62396906 05b4 2e1c WARNING MBAMChameleon HandleFileCreate "FileProt.c" 444 "FileFilter: Blocking access to \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\ig.exe from mode 1 - process \Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe" 12/03/25 " 16:43:25.128" 62396907 05b4 2f18 WARNING MBAMChameleon HandleFileCreate "FileProt.c" 444 "FileFilter: Blocking access to \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\ig.exe from mode 1 - process \Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe" 12/03/25 " 16:43:25.218" 62396997 2088 2478 WARNING MBAMChameleon SearchForCert "fileverify.cpp" 2517 "Parser returns c000000d" 12/03/25 " 16:43:25.222" 62397001 2088 2478 INFO MBAMChameleon ProcessNotify "ProcProt.c" 422 "Trusted process starting: Process (0000000000002664) Name avail: 1 FO FFFFA2824DB6B8E0, \??\C:\Program Files\Malwarebytes\Anti-Malware\ig.exe" 12/03/25 " 16:43:25.282" 62397061 2664 0c60 INFO MBAMChameleon ProcessNotify "ProcProt.c" 519 "Trusted process terminating. 0000000000002664 (\Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\ig.exe)" 12/03/25 " 16:43:25.295" 62397074 05b4 2e1c WARNING MBAMChameleon HandleFileCreate "FileProt.c" 444 "FileFilter: Blocking access to \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\ig.exe from mode 1 - process \Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe" 12/03/25 " 16:43:25.295" 62397074 05b4 2f18 WARNING MBAMChameleon HandleFileCreate "FileProt.c" 444 "FileFilter: Blocking access to \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\ig.exe from mode 1 - process \Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe" 12/03/25 " 16:43:25.362" 62397141 2088 2478 WARNING MBAMChameleon SearchForCert "fileverify.cpp" 2517 "Parser returns c000000d" 12/03/25 " 16:43:25.365" 62397144 2088 2478 INFO MBAMChameleon ProcessNotify "ProcProt.c" 422 "Trusted process starting: Process (0000000000000748) Name avail: 1 FO FFFFA28253B085E0, \??\C:\Program Files\Malwarebytes\Anti-Malware\ig.exe" 12/03/25 " 16:43:25.427" 62397206 0748 0af4 INFO MBAMChameleon ProcessNotify "ProcProt.c" 519 "Trusted process terminating. 0000000000000748 (\Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\ig.exe)" 12/03/25 " 16:43:25.440" 62397219 05b4 2e1c WARNING MBAMChameleon HandleFileCreate "FileProt.c" 444 "FileFilter: Blocking access to \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\ig.exe from mode 1 - process \Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe" 12/03/25 " 16:43:25.441" 62397220 05b4 27c8 WARNING MBAMChameleon HandleFileCreate "FileProt.c" 444 "FileFilter: Blocking access to \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\ig.exe from mode 1 - process \Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe" 12/03/25 " 16:43:25.495" 62397274 2088 2478 WARNING MBAMChameleon SearchForCert "fileverify.cpp" 2517 "Parser returns c000000d" 12/03/25 " 16:43:25.499" 62397278 2088 2478 INFO MBAMChameleon ProcessNotify "ProcProt.c" 422 "Trusted process starting: Process (00000000000028FC) Name avail: 1 FO FFFFA28253B085E0, \??\C:\Program Files\Malwarebytes\Anti-Malware\ig.exe" 12/03/25 " 16:43:26.658" 62398437 2088 1ed8 WARNING ArwSDK kernelLogger::LogK "ArwLib.Globals.cpp" 241 "tid: 2070 - [MBAMFarFlt] [fileverify.cpp:SearchForCert-2517] Parser returns c000000d." 12/03/25 " 16:43:26.658" 62398437 2088 1ed8 WARNING ArwSDK kernelLogger::LogK "ArwLib.Globals.cpp" 241 "tid: 2070 - [MBAMFarFlt] [fileverify.cpp:SearchForCert-2517] Parser returns c000000d." 12/03/25 " 16:43:26.658" 62398437 2088 1ed8 WARNING ArwSDK kernelLogger::LogK "ArwLib.Globals.cpp" 241 "tid: 2070 - [MBAMFarFlt] [fileverify.cpp:SearchForCert-2517] Parser returns c000000d." 12/03/25 " 16:43:26.658" 62398437 2088 1ed8 WARNING ArwSDK kernelLogger::LogK "ArwLib.Globals.cpp" 241 "tid: 2070 - [MBAMFarFlt] [fileverify.cpp:SearchForCert-2517] Parser returns c000000d." 12/03/25 " 16:43:26.658" 62398437 2088 1ed8 WARNING ArwSDK kernelLogger::LogK "ArwLib.Globals.cpp" 241 "tid: 2070 - [MBAMFarFlt] [fileverify.cpp:SearchForCert-2517] Parser returns c000000d." 12/03/25 " 16:43:26.658" 62398437 2088 1ed8 WARNING ArwSDK kernelLogger::LogK "ArwLib.Globals.cpp" 241 "tid: 2070 - [MBAMFarFlt] [fileverify.cpp:SearchForCert-2517] Parser returns c000000d." 12/03/25 " 16:43:26.659" 62398437 2088 1ed8 WARNING ArwSDK kernelLogger::LogK "ArwLib.Globals.cpp" 241 "tid: 2070 - [MBAMFarFlt] [fileverify.cpp:SearchForCert-2517] Parser returns c000000d." 12/03/25 " 16:43:26.659" 62398437 2088 1ed8 WARNING ArwSDK kernelLogger::LogK "ArwLib.Globals.cpp" 241 "tid: 2070 - [MBAMFarFlt] [fileverify.cpp:SearchForCert-2517] Parser returns c000000d." 12/03/25 " 16:43:26.659" 62398437 2088 1ed8 WARNING ArwSDK kernelLogger::LogK "ArwLib.Globals.cpp" 241 "tid: 2070 - [MBAMFarFlt] [fileverify.cpp:SearchForCert-2517] Parser returns c000000d." 12/03/25 " 16:43:26.659" 62398437 2088 1ed8 WARNING ArwSDK kernelLogger::LogK "ArwLib.Globals.cpp" 241 "tid: 2070 - [MBAMFarFlt] [fileverify.cpp:SearchForCert-2517] Parser returns c000000d." 12/03/25 " 16:43:26.659" 62398437 2088 1ed8 WARNING ArwSDK kernelLogger::LogK "ArwLib.Globals.cpp" 241 "tid: 2070 - [MBAMFarFlt] [fileverify.cpp:SearchForCert-2517] Parser returns c000000d." 12/03/25 " 16:43:26.659" 62398437 2088 1ed8 WARNING ArwSDK kernelLogger::LogK "ArwLib.Globals.cpp" 241 "tid: 2070 - [MBAMFarFlt] [fileverify.cpp:SearchForCert-2517] Parser returns c000000d." 12/03/25 " 16:43:25.568" 62397347 28fc 2fac INFO MBAMChameleon ProcessNotify "ProcProt.c" 519 "Trusted process terminating. 00000000000028FC (\Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\ig.exe)" 12/03/25 " 16:43:25.584" 62397363 05b4 27c8 WARNING MBAMChameleon HandleFileCreate "FileProt.c" 444 "FileFilter: Blocking access to \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\ig.exe from mode 1 - process \Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe" 12/03/25 " 16:43:25.584" 62397363 05b4 2e1c WARNING MBAMChameleon HandleFileCreate "FileProt.c" 444 "FileFilter: Blocking access to \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\ig.exe from mode 1 - process \Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe" 12/03/25 " 16:43:25.640" 62397419 2088 2478 WARNING MBAMChameleon SearchForCert "fileverify.cpp" 2517 "Parser returns c000000d" 12/03/25 " 16:43:25.644" 62397423 2088 2478 INFO MBAMChameleon ProcessNotify "ProcProt.c" 422 "Trusted process starting: Process (0000000000000428) Name avail: 1 FO FFFFA2825350D8B0, \??\C:\Program Files\Malwarebytes\Anti-Malware\ig.exe" 12/03/25 " 16:43:25.708" 62397487 0428 2008 INFO MBAMChameleon ProcessNotify "ProcProt.c" 519 "Trusted process terminating. 0000000000000428 (\Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\ig.exe)" 12/03/25 " 16:43:25.736" 62397515 05b4 2e1c WARNING MBAMChameleon HandleFileCreate "FileProt.c" 444 "FileFilter: Blocking access to \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\ig.exe from mode 1 - process \Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe" 12/03/25 " 16:43:25.737" 62397516 05b4 27c8 WARNING MBAMChameleon HandleFileCreate "FileProt.c" 444 "FileFilter: Blocking access to \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\ig.exe from mode 1 - process \Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe" 12/03/25 " 16:43:25.817" 62397596 2088 2478 WARNING MBAMChameleon SearchForCert "fileverify.cpp" 2517 "Parser returns c000000d" 12/03/25 " 16:43:25.820" 62397599 2088 2478 INFO MBAMChameleon ProcessNotify "ProcProt.c" 422 "Trusted process starting: Process (0000000000000864) Name avail: 1 FO FFFFA28247D23790, \??\C:\Program Files\Malwarebytes\Anti-Malware\ig.exe" 12/03/25 " 16:43:25.886" 62397665 0864 06d0 INFO MBAMChameleon ProcessNotify "ProcProt.c" 519 "Trusted process terminating. 0000000000000864 (\Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\ig.exe)" 12/03/25 " 16:43:25.906" 62397685 05b4 2e1c WARNING MBAMChameleon HandleFileCreate "FileProt.c" 444 "FileFilter: Blocking access to \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\ig.exe from mode 1 - process \Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe" 12/03/25 " 16:43:25.907" 62397686 05b4 1b00 WARNING MBAMChameleon HandleFileCreate "FileProt.c" 444 "FileFilter: Blocking access to \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\ig.exe from mode 1 - process \Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe" 12/03/25 " 16:43:25.962" 62397741 03a4 2ad8 INFO MBAMChameleon ProcessNotify "ProcProt.c" 519 "Trusted process terminating. 00000000000003A4 (\Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\MBAMWsc.exe)" 12/03/25 " 16:43:25.988" 62397767 2088 2478 WARNING MBAMChameleon SearchForCert "fileverify.cpp" 2517 "Parser returns c000000d" 12/03/25 " 16:43:25.991" 62397770 2088 2478 INFO MBAMChameleon ProcessNotify "ProcProt.c" 422 "Trusted process starting: Process (0000000000000C5C) Name avail: 1 FO FFFFA2824CA5E760, \??\C:\Program Files\Malwarebytes\Anti-Malware\ig.exe" 12/03/25 " 16:43:26.056" 62397835 0c5c 0290 INFO MBAMChameleon ProcessNotify "ProcProt.c" 519 "Trusted process terminating. 0000000000000C5C (\Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\ig.exe)" 12/03/25 " 16:43:26.070" 62397849 05b4 2e1c WARNING MBAMChameleon HandleFileCreate "FileProt.c" 444 "FileFilter: Blocking access to \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\ig.exe from mode 1 - process \Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe" 12/03/25 " 16:43:26.071" 62397850 05b4 2f18 WARNING MBAMChameleon HandleFileCreate "FileProt.c" 444 "FileFilter: Blocking access to \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\ig.exe from mode 1 - process \Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe" 12/03/25 " 16:43:26.117" 62397896 2088 2478 WARNING MBAMChameleon SearchForCert "fileverify.cpp" 2517 "Parser returns c000000d" 12/03/25 " 16:43:26.121" 62397900 2088 2478 INFO MBAMChameleon ProcessNotify "ProcProt.c" 422 "Trusted process starting: Process (0000000000001200) Name avail: 1 FO FFFFA28253B110F0, \??\C:\Program Files\Malwarebytes\Anti-Malware\ig.exe" 12/03/25 " 16:43:26.170" 62397949 1200 262c INFO MBAMChameleon ProcessNotify "ProcProt.c" 519 "Trusted process terminating. 0000000000001200 (\Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\ig.exe)" 12/03/25 " 16:43:26.181" 62397960 05b4 27c8 WARNING MBAMChameleon HandleFileCreate "FileProt.c" 444 "FileFilter: Blocking access to \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\ig.exe from mode 1 - process \Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe" 12/03/25 " 16:43:26.181" 62397960 05b4 2e1c WARNING MBAMChameleon HandleFileCreate "FileProt.c" 444 "FileFilter: Blocking access to \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\ig.exe from mode 1 - process \Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe" 12/03/25 " 16:43:26.224" 62398003 2088 2478 WARNING MBAMChameleon SearchForCert "fileverify.cpp" 2517 "Parser returns c000000d" 12/03/25 " 16:43:26.228" 62398007 2088 2478 INFO MBAMChameleon ProcessNotify "ProcProt.c" 422 "Trusted process starting: Process (00000000000012B0) Name avail: 1 FO FFFFA28253B0B970, \??\C:\Program Files\Malwarebytes\Anti-Malware\ig.exe" 12/03/25 " 16:43:26.283" 62398062 12b0 2c60 INFO MBAMChameleon ProcessNotify "ProcProt.c" 519 "Trusted process terminating. 00000000000012B0 (\Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\ig.exe)" 12/03/25 " 16:43:26.292" 62398071 05b4 2e1c WARNING MBAMChameleon HandleFileCreate "FileProt.c" 444 "FileFilter: Blocking access to \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\ig.exe from mode 1 - process \Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe" 12/03/25 " 16:43:26.292" 62398071 05b4 2738 WARNING MBAMChameleon HandleFileCreate "FileProt.c" 444 "FileFilter: Blocking access to \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\ig.exe from mode 1 - process \Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe" 12/03/25 " 16:43:26.350" 62398129 2088 2478 WARNING MBAMChameleon SearchForCert "fileverify.cpp" 2517 "Parser returns c000000d" 12/03/25 " 16:43:26.354" 62398133 2088 2478 INFO MBAMChameleon ProcessNotify "ProcProt.c" 422 "Trusted process starting: Process (00000000000013C4) Name avail: 1 FO FFFFA28253B0B970, \??\C:\Program Files\Malwarebytes\Anti-Malware\ig.exe" 12/03/25 " 16:43:26.406" 62398185 13c4 21cc INFO MBAMChameleon ProcessNotify "ProcProt.c" 519 "Trusted process terminating. 00000000000013C4 (\Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\ig.exe)" 12/03/25 " 16:43:26.415" 62398194 05b4 2e1c WARNING MBAMChameleon HandleFileCreate "FileProt.c" 444 "FileFilter: Blocking access to \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\ig.exe from mode 1 - process \Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe" 12/03/25 " 16:43:26.415" 62398194 05b4 27c8 WARNING MBAMChameleon HandleFileCreate "FileProt.c" 444 "FileFilter: Blocking access to \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\ig.exe from mode 1 - process \Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe" 12/03/25 " 16:43:26.457" 62398236 2088 2478 WARNING MBAMChameleon SearchForCert "fileverify.cpp" 2517 "Parser returns c000000d" 12/03/25 " 16:43:26.460" 62398239 2088 2478 INFO MBAMChameleon ProcessNotify "ProcProt.c" 422 "Trusted process starting: Process (0000000000001048) Name avail: 1 FO FFFFA28253B0B970, \??\C:\Program Files\Malwarebytes\Anti-Malware\ig.exe" 12/03/25 " 16:43:26.508" 62398287 1048 07f8 INFO MBAMChameleon ProcessNotify "ProcProt.c" 519 "Trusted process terminating. 0000000000001048 (\Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\ig.exe)" 12/03/25 " 16:43:26.517" 62398296 05b4 2e1c WARNING MBAMChameleon HandleFileCreate "FileProt.c" 444 "FileFilter: Blocking access to \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\ig.exe from mode 1 - process \Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe" 12/03/25 " 16:43:26.517" 62398296 05b4 27c8 WARNING MBAMChameleon HandleFileCreate "FileProt.c" 444 "FileFilter: Blocking access to \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\ig.exe from mode 1 - process \Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe" 12/03/25 " 16:43:26.572" 62398351 2088 2478 WARNING MBAMChameleon SearchForCert "fileverify.cpp" 2517 "Parser returns c000000d" 12/03/25 " 16:43:26.576" 62398355 2088 2478 INFO MBAMChameleon ProcessNotify "ProcProt.c" 422 "Trusted process starting: Process (00000000000024E8) Name avail: 1 FO FFFFA282535085E0, \??\C:\Program Files\Malwarebytes\Anti-Malware\ig.exe" 12/03/25 " 16:43:26.626" 62398405 24e8 3174 INFO MBAMChameleon ProcessNotify "ProcProt.c" 519 "Trusted process terminating. 00000000000024E8 (\Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\ig.exe)" 12/03/25 " 16:43:26.634" 62398413 05b4 2e1c WARNING MBAMChameleon HandleFileCreate "FileProt.c" 444 "FileFilter: Blocking access to \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\ig.exe from mode 1 - process \Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe" 12/03/25 " 16:43:26.635" 62398414 05b4 2738 WARNING MBAMChameleon HandleFileCreate "FileProt.c" 444 "FileFilter: Blocking access to \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\ig.exe from mode 1 - process \Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe" 12/03/25 " 16:43:26.679" 62398458 2088 2478 WARNING MBAMChameleon SearchForCert "fileverify.cpp" 2517 "Parser returns c000000d" 12/03/25 " 16:43:26.683" 62398462 2088 2478 INFO MBAMChameleon ProcessNotify "ProcProt.c" 422 "Trusted process starting: Process (0000000000002458) Name avail: 1 FO FFFFA282535085E0, \??\C:\Program Files\Malwarebytes\Anti-Malware\ig.exe" 12/03/25 " 16:43:27.668" 62399437 2088 1ed8 WARNING ArwSDK kernelLogger::LogK "ArwLib.Globals.cpp" 241 "tid: 2070 - [MBAMFarFlt] [fileverify.cpp:SearchForCert-2517] Parser returns c000000d." 12/03/25 " 16:43:27.668" 62399437 2088 1ed8 WARNING ArwSDK kernelLogger::LogK "ArwLib.Globals.cpp" 241 "tid: 2070 - [MBAMFarFlt] [fileverify.cpp:SearchForCert-2517] Parser returns c000000d." 12/03/25 " 16:43:27.668" 62399437 2088 1ed8 WARNING ArwSDK kernelLogger::LogK "ArwLib.Globals.cpp" 241 "tid: 2070 - [MBAMFarFlt] [fileverify.cpp:SearchForCert-2517] Parser returns c000000d." 12/03/25 " 16:43:27.668" 62399437 2088 1ed8 WARNING ArwSDK kernelLogger::LogK "ArwLib.Globals.cpp" 241 "tid: 2070 - [MBAMFarFlt] [fileverify.cpp:SearchForCert-2517] Parser returns c000000d." 12/03/25 " 16:43:27.668" 62399437 2088 1ed8 WARNING ArwSDK kernelLogger::LogK "ArwLib.Globals.cpp" 241 "tid: 2070 - [MBAMFarFlt] [fileverify.cpp:SearchForCert-2517] Parser returns c000000d." 12/03/25 " 16:43:27.668" 62399437 2088 1ed8 WARNING ArwSDK kernelLogger::LogK "ArwLib.Globals.cpp" 241 "tid: 2070 - [MBAMFarFlt] [fileverify.cpp:SearchForCert-2517] Parser returns c000000d." 12/03/25 " 16:43:27.668" 62399437 2088 1ed8 WARNING ArwSDK kernelLogger::LogK "ArwLib.Globals.cpp" 241 "tid: 2070 - [MBAMFarFlt] [fileverify.cpp:SearchForCert-2517] Parser returns c000000d." 12/03/25 " 16:43:27.669" 62399437 2088 1ed8 WARNING ArwSDK kernelLogger::LogK "ArwLib.Globals.cpp" 241 "tid: 2070 - [MBAMFarFlt] [fileverify.cpp:SearchForCert-2517] Parser returns c000000d." 12/03/25 " 16:43:27.669" 62399437 2088 1ed8 WARNING ArwSDK kernelLogger::LogK "ArwLib.Globals.cpp" 241 "tid: 2070 - [MBAMFarFlt] [fileverify.cpp:SearchForCert-2517] Parser returns c000000d." 12/03/25 " 16:43:27.669" 62399437 2088 1ed8 WARNING ArwSDK kernelLogger::LogK "ArwLib.Globals.cpp" 241 "tid: 2070 - [MBAMFarFlt] [fileverify.cpp:SearchForCert-2517] Parser returns c000000d." 12/03/25 " 16:43:27.669" 62399437 2088 1ed8 WARNING ArwSDK kernelLogger::LogK "ArwLib.Globals.cpp" 241 "tid: 2070 - [MBAMFarFlt] [fileverify.cpp:SearchForCert-2517] Parser returns c000000d." 12/03/25 " 16:43:27.669" 62399437 2088 1ed8 WARNING ArwSDK kernelLogger::LogK "ArwLib.Globals.cpp" 241 "tid: 2070 - [MBAMFarFlt] [fileverify.cpp:SearchForCert-2517] Parser returns c000000d." 12/03/25 " 16:43:27.811" 62399578 2088 21a0 INFO CleanControllerImpl mb::cleanctlrimpl::whitelist::PredetectSignatureWhiteLister::IsObjectWhiteListedEx "PredetectSignatureWhiteLister.cpp" 124 "'S.C. BITDEFENDER S.R.L.' not found in whitesigs" 12/03/25 " 16:43:26.737" 62398516 2458 0ea4 INFO MBAMChameleon ProcessNotify "ProcProt.c" 519 "Trusted process terminating. 0000000000002458 (\Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\ig.exe)" 12/03/25 " 16:43:26.746" 62398525 05b4 2e1c WARNING MBAMChameleon HandleFileCreate "FileProt.c" 444 "FileFilter: Blocking access to \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\ig.exe from mode 1 - process \Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe" 12/03/25 " 16:43:26.746" 62398525 05b4 2f18 WARNING MBAMChameleon HandleFileCreate "FileProt.c" 444 "FileFilter: Blocking access to \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\ig.exe from mode 1 - process \Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe" 12/03/25 " 16:43:26.789" 62398568 2088 2478 WARNING MBAMChameleon SearchForCert "fileverify.cpp" 2517 "Parser returns c000000d" 12/03/25 " 16:43:26.792" 62398571 2088 2478 INFO MBAMChameleon ProcessNotify "ProcProt.c" 422 "Trusted process starting: Process (000000000000098C) Name avail: 1 FO FFFFA28247D23790, \??\C:\Program Files\Malwarebytes\Anti-Malware\ig.exe" 12/03/25 " 16:43:26.839" 62398618 098c 327c INFO MBAMChameleon ProcessNotify "ProcProt.c" 519 "Trusted process terminating. 000000000000098C (\Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\ig.exe)" 12/03/25 " 16:43:26.849" 62398628 05b4 2e1c WARNING MBAMChameleon HandleFileCreate "FileProt.c" 444 "FileFilter: Blocking access to \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\ig.exe from mode 1 - process \Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe" 12/03/25 " 16:43:26.850" 62398629 05b4 27c8 WARNING MBAMChameleon HandleFileCreate "FileProt.c" 444 "FileFilter: Blocking access to \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\ig.exe from mode 1 - process \Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe" 12/03/25 " 16:43:26.896" 62398675 2088 2478 WARNING MBAMChameleon SearchForCert "fileverify.cpp" 2517 "Parser returns c000000d" 12/03/25 " 16:43:26.900" 62398679 2088 2478 INFO MBAMChameleon ProcessNotify "ProcProt.c" 422 "Trusted process starting: Process (0000000000001900) Name avail: 1 FO FFFFA2824CA4AD50, \??\C:\Program Files\Malwarebytes\Anti-Malware\ig.exe" 12/03/25 " 16:43:26.947" 62398726 1900 2bf0 INFO MBAMChameleon ProcessNotify "ProcProt.c" 519 "Trusted process terminating. 0000000000001900 (\Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\ig.exe)" 12/03/25 " 16:43:26.957" 62398736 05b4 2738 WARNING MBAMChameleon HandleFileCreate "FileProt.c" 444 "FileFilter: Blocking access to \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\ig.exe from mode 1 - process \Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe" 12/03/25 " 16:43:26.957" 62398736 05b4 2e1c WARNING MBAMChameleon HandleFileCreate "FileProt.c" 444 "FileFilter: Blocking access to \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\ig.exe from mode 1 - process \Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe" 12/03/25 " 16:43:27.001" 62398780 2088 2478 WARNING MBAMChameleon SearchForCert "fileverify.cpp" 2517 "Parser returns c000000d" 12/03/25 " 16:43:27.004" 62398783 2088 2478 INFO MBAMChameleon ProcessNotify "ProcProt.c" 422 "Trusted process starting: Process (0000000000002514) Name avail: 1 FO FFFFA2824CA4AD50, \??\C:\Program Files\Malwarebytes\Anti-Malware\ig.exe" 12/03/25 " 16:43:27.072" 62398851 2514 278c INFO MBAMChameleon ProcessNotify "ProcProt.c" 519 "Trusted process terminating. 0000000000002514 (\Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\ig.exe)" 12/03/25 " 16:43:27.084" 62398863 05b4 2e1c WARNING MBAMChameleon HandleFileCreate "FileProt.c" 444 "FileFilter: Blocking access to \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\ig.exe from mode 1 - process \Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe" 12/03/25 " 16:43:27.084" 62398863 05b4 27c8 WARNING MBAMChameleon HandleFileCreate "FileProt.c" 444 "FileFilter: Blocking access to \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\ig.exe from mode 1 - process \Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe" 12/03/25 " 16:43:27.128" 62398907 2088 2478 WARNING MBAMChameleon SearchForCert "fileverify.cpp" 2517 "Parser returns c000000d" 12/03/25 " 16:43:27.132" 62398911 2088 2478 INFO MBAMChameleon ProcessNotify "ProcProt.c" 422 "Trusted process starting: Process (0000000000002A20) Name avail: 1 FO FFFFA2824DB6B8E0, \??\C:\Program Files\Malwarebytes\Anti-Malware\ig.exe" 12/03/25 " 16:43:27.181" 62398960 2a20 2814 INFO MBAMChameleon ProcessNotify "ProcProt.c" 519 "Trusted process terminating. 0000000000002A20 (\Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\ig.exe)" 12/03/25 " 16:43:27.192" 62398971 05b4 2e1c WARNING MBAMChameleon HandleFileCreate "FileProt.c" 444 "FileFilter: Blocking access to \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\ig.exe from mode 1 - process \Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe" 12/03/25 " 16:43:27.192" 62398971 05b4 27c8 WARNING MBAMChameleon HandleFileCreate "FileProt.c" 444 "FileFilter: Blocking access to \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\ig.exe from mode 1 - process \Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe" 12/03/25 " 16:43:27.234" 62399013 2088 2478 WARNING MBAMChameleon SearchForCert "fileverify.cpp" 2517 "Parser returns c000000d" 12/03/25 " 16:43:27.237" 62399016 2088 2478 INFO MBAMChameleon ProcessNotify "ProcProt.c" 422 "Trusted process starting: Process (0000000000003358) Name avail: 1 FO FFFFA28253B0B970, \??\C:\Program Files\Malwarebytes\Anti-Malware\ig.exe" 12/03/25 " 16:43:27.289" 62399068 3358 2df4 INFO MBAMChameleon ProcessNotify "ProcProt.c" 519 "Trusted process terminating. 0000000000003358 (\Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\ig.exe)" 12/03/25 " 16:43:27.299" 62399078 05b4 2e1c WARNING MBAMChameleon HandleFileCreate "FileProt.c" 444 "FileFilter: Blocking access to \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\ig.exe from mode 1 - process \Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe" 12/03/25 " 16:43:27.299" 62399078 05b4 2738 WARNING MBAMChameleon HandleFileCreate "FileProt.c" 444 "FileFilter: Blocking access to \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\ig.exe from mode 1 - process \Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe" 12/03/25 " 16:43:27.342" 62399121 2088 2478 WARNING MBAMChameleon SearchForCert "fileverify.cpp" 2517 "Parser returns c000000d" 12/03/25 " 16:43:27.345" 62399124 2088 2478 INFO MBAMChameleon ProcessNotify "ProcProt.c" 422 "Trusted process starting: Process (0000000000003254) Name avail: 1 FO FFFFA28253B0B970, \??\C:\Program Files\Malwarebytes\Anti-Malware\ig.exe" 12/03/25 " 16:43:27.395" 62399174 3254 26f0 INFO MBAMChameleon ProcessNotify "ProcProt.c" 519 "Trusted process terminating. 0000000000003254 (\Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\ig.exe)" 12/03/25 " 16:43:27.406" 62399185 05b4 2e1c WARNING MBAMChameleon HandleFileCreate "FileProt.c" 444 "FileFilter: Blocking access to \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\ig.exe from mode 1 - process \Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe" 12/03/25 " 16:43:27.406" 62399185 05b4 2f18 WARNING MBAMChameleon HandleFileCreate "FileProt.c" 444 "FileFilter: Blocking access to \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\ig.exe from mode 1 - process \Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe" 12/03/25 " 16:43:27.453" 62399232 2088 2478 WARNING MBAMChameleon SearchForCert "fileverify.cpp" 2517 "Parser returns c000000d" 12/03/25 " 16:43:27.456" 62399235 2088 2478 INFO MBAMChameleon ProcessNotify "ProcProt.c" 422 "Trusted process starting: Process (0000000000003030) Name avail: 1 FO FFFFA282535085E0, \??\C:\Program Files\Malwarebytes\Anti-Malware\ig.exe" 12/03/25 " 16:43:27.507" 62399286 3030 17a4 INFO MBAMChameleon ProcessNotify "ProcProt.c" 519 "Trusted process terminating. 0000000000003030 (\Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\ig.exe)" 12/03/25 " 16:43:27.517" 62399296 05b4 2e1c WARNING MBAMChameleon HandleFileCreate "FileProt.c" 444 "FileFilter: Blocking access to \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\ig.exe from mode 1 - process \Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe" 12/03/25 " 16:43:27.518" 62399297 05b4 27c8 WARNING MBAMChameleon HandleFileCreate "FileProt.c" 444 "FileFilter: Blocking access to \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\ig.exe from mode 1 - process \Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe" 12/03/25 " 16:43:27.569" 62399348 2088 2478 WARNING MBAMChameleon SearchForCert "fileverify.cpp" 2517 "Parser returns c000000d" 12/03/25 " 16:43:27.574" 62399353 2088 2478 INFO MBAMChameleon ProcessNotify "ProcProt.c" 422 "Trusted process starting: Process (000000000000307C) Name avail: 1 FO FFFFA282535085E0, \??\C:\Program Files\Malwarebytes\Anti-Malware\ig.exe" 12/03/25 " 16:43:27.622" 62399401 307c 1b24 INFO MBAMChameleon ProcessNotify "ProcProt.c" 519 "Trusted process terminating. 000000000000307C (\Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\ig.exe)" 12/03/25 " 16:43:27.631" 62399410 05b4 2e1c WARNING MBAMChameleon HandleFileCreate "FileProt.c" 444 "FileFilter: Blocking access to \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\ig.exe from mode 1 - process \Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe" 12/03/25 " 16:43:27.632" 62399411 05b4 2738 WARNING MBAMChameleon HandleFileCreate "FileProt.c" 444 "FileFilter: Blocking access to \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\ig.exe from mode 1 - process \Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe" 12/03/25 " 16:43:27.673" 62399452 2088 2478 WARNING MBAMChameleon SearchForCert "fileverify.cpp" 2517 "Parser returns c000000d" 12/03/25 " 16:43:27.677" 62399456 2088 2478 INFO MBAMChameleon ProcessNotify "ProcProt.c" 422 "Trusted process starting: Process (0000000000001BB8) Name avail: 1 FO FFFFA2824CA4AD50, \??\C:\Program Files\Malwarebytes\Anti-Malware\ig.exe" 12/03/25 " 16:43:27.719" 62399498 1bb8 0474 INFO MBAMChameleon ProcessNotify "ProcProt.c" 519 "Trusted process terminating. 0000000000001BB8 (\Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\ig.exe)" 12/03/25 " 16:43:27.728" 62399507 05b4 27c8 WARNING MBAMChameleon HandleFileCreate "FileProt.c" 444 "FileFilter: Blocking access to \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\ig.exe from mode 1 - process \Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe" 12/03/25 " 16:43:27.728" 62399507 05b4 2e1c WARNING MBAMChameleon HandleFileCreate "FileProt.c" 444 "FileFilter: Blocking access to \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\ig.exe from mode 1 - process \Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe" 12/03/25 " 16:43:28.676" 62400453 2088 1ed8 WARNING ArwSDK kernelLogger::LogK "ArwLib.Globals.cpp" 241 "tid: 2070 - [MBAMFarFlt] [fileverify.cpp:SearchForCert-2517] Parser returns c000000d." 12/03/25 " 16:43:28.677" 62400453 2088 1ed8 WARNING ArwSDK kernelLogger::LogK "ArwLib.Globals.cpp" 241 "tid: 2070 - [MBAMFarFlt] [fileverify.cpp:SearchForCert-2517] Parser returns c000000d." 12/03/25 " 16:43:28.677" 62400453 2088 1ed8 WARNING ArwSDK kernelLogger::LogK "ArwLib.Globals.cpp" 241 "tid: 2070 - [MBAMFarFlt] [fileverify.cpp:SearchForCert-2517] Parser returns c000000d." 12/03/25 " 16:43:28.677" 62400453 2088 1ed8 WARNING ArwSDK kernelLogger::LogK "ArwLib.Globals.cpp" 241 "tid: 2070 - [MBAMFarFlt] [fileverify.cpp:SearchForCert-2517] Parser returns c000000d." 12/03/25 " 16:43:28.677" 62400453 2088 1ed8 WARNING ArwSDK kernelLogger::LogK "ArwLib.Globals.cpp" 241 "tid: 2070 - [MBAMFarFlt] [fileverify.cpp:SearchForCert-2517] Parser returns c000000d." 12/03/25 " 16:43:27.766" 62399545 2088 2478 WARNING MBAMChameleon SearchForCert "fileverify.cpp" 2517 "Parser returns c000000d" 12/03/25 " 16:43:27.770" 62399549 2088 2478 INFO MBAMChameleon ProcessNotify "ProcProt.c" 422 "Trusted process starting: Process (0000000000001330) Name avail: 1 FO FFFFA2824CA4AD50, \??\C:\Program Files\Malwarebytes\Anti-Malware\ig.exe" 12/03/25 " 16:43:27.817" 62399596 1330 0df0 INFO MBAMChameleon ProcessNotify "ProcProt.c" 519 "Trusted process terminating. 0000000000001330 (\Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\ig.exe)" 12/03/25 " 16:43:27.827" 62399606 05b4 2e1c WARNING MBAMChameleon HandleFileCreate "FileProt.c" 444 "FileFilter: Blocking access to \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\ig.exe from mode 1 - process \Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe" 12/03/25 " 16:43:27.827" 62399606 05b4 27c8 WARNING MBAMChameleon HandleFileCreate "FileProt.c" 444 "FileFilter: Blocking access to \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\ig.exe from mode 1 - process \Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe" 12/03/25 " 16:43:27.867" 62399646 2088 2478 WARNING MBAMChameleon SearchForCert "fileverify.cpp" 2517 "Parser returns c000000d" 12/03/25 " 16:43:27.871" 62399650 2088 2478 INFO MBAMChameleon ProcessNotify "ProcProt.c" 422 "Trusted process starting: Process (00000000000010A0) Name avail: 1 FO FFFFA282476AFD70, \??\C:\Program Files\Malwarebytes\Anti-Malware\ig.exe" 12/03/25 " 16:43:27.922" 62399701 10a0 0460 INFO MBAMChameleon ProcessNotify "ProcProt.c" 519 "Trusted process terminating. 00000000000010A0 (\Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\ig.exe)" 12/03/25 " 16:43:27.932" 62399711 05b4 2e1c WARNING MBAMChameleon HandleFileCreate "FileProt.c" 444 "FileFilter: Blocking access to \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\ig.exe from mode 1 - process \Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe" 12/03/25 " 16:43:27.933" 62399712 05b4 2738 WARNING MBAMChameleon HandleFileCreate "FileProt.c" 444 "FileFilter: Blocking access to \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\ig.exe from mode 1 - process \Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe" 12/03/25 " 16:43:27.979" 62399758 2088 2478 WARNING MBAMChameleon SearchForCert "fileverify.cpp" 2517 "Parser returns c000000d" 12/03/25 " 16:43:27.984" 62399763 2088 2478 INFO MBAMChameleon ProcessNotify "ProcProt.c" 422 "Trusted process starting: Process (00000000000032F4) Name avail: 1 FO FFFFA28253B0B970, \??\C:\Program Files\Malwarebytes\Anti-Malware\ig.exe" 12/03/25 " 16:43:28.029" 62399808 32f4 0c2c INFO MBAMChameleon ProcessNotify "ProcProt.c" 519 "Trusted process terminating. 00000000000032F4 (\Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\ig.exe)" 12/03/25 " 16:43:28.038" 62399817 05b4 2f18 WARNING MBAMChameleon HandleFileCreate "FileProt.c" 444 "FileFilter: Blocking access to \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\ig.exe from mode 1 - process \Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe" 12/03/25 " 16:43:28.038" 62399817 05b4 2e1c WARNING MBAMChameleon HandleFileCreate "FileProt.c" 444 "FileFilter: Blocking access to \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\ig.exe from mode 1 - process \Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe" 12/03/25 " 16:43:28.086" 62399865 2088 2478 WARNING MBAMChameleon SearchForCert "fileverify.cpp" 2517 "Parser returns c000000d" 12/03/25 " 16:43:28.089" 62399868 2088 2478 INFO MBAMChameleon ProcessNotify "ProcProt.c" 422 "Trusted process starting: Process (00000000000012DC) Name avail: 1 FO FFFFA28253B0B970, \??\C:\Program Files\Malwarebytes\Anti-Malware\ig.exe" 12/03/25 " 16:43:28.140" 62399919 12dc 3268 INFO MBAMChameleon ProcessNotify "ProcProt.c" 519 "Trusted process terminating. 00000000000012DC (\Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\ig.exe)" 12/03/25 " 16:43:28.150" 62399929 05b4 2e1c WARNING MBAMChameleon HandleFileCreate "FileProt.c" 444 "FileFilter: Blocking access to \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\ig.exe from mode 1 - process \Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe" 12/03/25 " 16:43:28.151" 62399930 05b4 27c8 WARNING MBAMChameleon HandleFileCreate "FileProt.c" 444 "FileFilter: Blocking access to \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\ig.exe from mode 1 - process \Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe" 12/03/25 " 16:43:28.194" 62399973 2088 2478 WARNING MBAMChameleon SearchForCert "fileverify.cpp" 2517 "Parser returns c000000d" 12/03/25 " 16:43:28.198" 62399977 2088 2478 INFO MBAMChameleon ProcessNotify "ProcProt.c" 422 "Trusted process starting: Process (000000000000090C) Name avail: 1 FO FFFFA282535085E0, \??\C:\Program Files\Malwarebytes\Anti-Malware\ig.exe" 12/03/25 " 16:43:28.257" 62400036 090c 0ef4 INFO MBAMChameleon ProcessNotify "ProcProt.c" 519 "Trusted process terminating. 000000000000090C (\Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\ig.exe)" 12/03/25 " 16:43:28.266" 62400045 05b4 2e1c WARNING MBAMChameleon HandleFileCreate "FileProt.c" 444 "FileFilter: Blocking access to \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\ig.exe from mode 1 - process \Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe" 12/03/25 " 16:43:29.677" 62401453 2088 1ed8 WARNING ArwSDK kernelLogger::LogK "ArwLib.Globals.cpp" 241 "tid: 2070 - [MBAMFarFlt] [fileverify.cpp:SearchForCert-2517] Parser returns c000000d." 12/03/25 " 16:43:29.677" 62401453 2088 1ed8 WARNING ArwSDK kernelLogger::LogK "ArwLib.Globals.cpp" 241 "tid: 2070 - [MBAMFarFlt] [fileverify.cpp:SearchForCert-2517] Parser returns c000000d." 12/03/25 " 16:43:29.677" 62401453 2088 1ed8 WARNING ArwSDK kernelLogger::LogK "ArwLib.Globals.cpp" 241 "tid: 2070 - [MBAMFarFlt] [fileverify.cpp:SearchForCert-2517] Parser returns c000000d." 12/03/25 " 16:43:29.677" 62401453 2088 1ed8 WARNING ArwSDK kernelLogger::LogK "ArwLib.Globals.cpp" 241 "tid: 2070 - [MBAMFarFlt] [fileverify.cpp:SearchForCert-2517] Parser returns c000000d." 12/03/25 " 16:43:29.677" 62401453 2088 1ed8 WARNING ArwSDK kernelLogger::LogK "ArwLib.Globals.cpp" 241 "tid: 2070 - [MBAMFarFlt] [fileverify.cpp:SearchForCert-2517] Parser returns c000000d." 12/03/25 " 16:43:28.266" 62400045 05b4 2738 WARNING MBAMChameleon HandleFileCreate "FileProt.c" 444 "FileFilter: Blocking access to \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\ig.exe from mode 1 - process \Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe" 12/03/25 " 16:43:28.312" 62400091 2088 2478 WARNING MBAMChameleon SearchForCert "fileverify.cpp" 2517 "Parser returns c000000d" 12/03/25 " 16:43:28.315" 62400094 2088 2478 INFO MBAMChameleon ProcessNotify "ProcProt.c" 422 "Trusted process starting: Process (0000000000002F98) Name avail: 1 FO FFFFA282535085E0, \??\C:\Program Files\Malwarebytes\Anti-Malware\ig.exe" 12/03/25 " 16:43:28.363" 62400142 2f98 33d4 INFO MBAMChameleon ProcessNotify "ProcProt.c" 519 "Trusted process terminating. 0000000000002F98 (\Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\ig.exe)" 12/03/25 " 16:43:31.765" 62403531 2088 21a0 INFO CleanControllerImpl mb::cleanctlrimpl::whitelist::PredetectSignatureWhiteLister::IsObjectWhiteListedEx "PredetectSignatureWhiteLister.cpp" 124 "'Suunto Oy' not found in whitesigs" 12/03/25 " 16:43:34.748" 62406515 2088 2c54 INFO ScanControllerImpl mb::scancontrollerimpl::Scanner::StartScan "Scanner.cpp" 982 "Starting a Threat scan, clientID = MBAM5, clientType = MBClientFullUI." 12/03/25 " 16:43:34.752" 62406531 2088 1c78 INFO ScanControllerImpl mb::scancontrollerimpl::Scanner::SendScanStartedCCNotification "Scanner.cpp" 11802 "Sending scan started notification to clean controller." 12/03/25 " 16:43:34.753" 62406531 2088 1c78 INFO ScanControllerImpl mb::scancontrollerimpl::Scanner::InitializeScan "Scanner.cpp" 586 "Checking for def updates.." 12/03/25 " 16:43:34.753" 62406531 2088 1c78 INFO ScanControllerImpl mb::scancontrollerimpl::Scanner::InitializeScan "Scanner.cpp" 593 "Waiting for update check to complete." 12/03/25 " 16:43:34.754" 62406531 2088 2728 INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl::DoUpdate "UpdateControllerImplHelper.cpp" 743 "Normal database mode" 12/03/25 " 16:43:34.757" 62406531 2088 2728 INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl::ValidateDBManifest "UpdateControllerImplHelper.cpp" 5921 "Signature successfully validated" 12/03/25 " 16:43:36.468" 62408234 2088 2728 INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl::ValidateDBManifest "UpdateControllerImplHelper.cpp" 5925 "DB manifest successfully validated" 12/03/25 " 16:43:36.468" 62408234 2088 2728 INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl::CheckDbManifest "UpdateControllerImplHelper.cpp" 6317 "Validated DB manifest - success" 12/03/25 " 16:43:36.470" 62408234 2088 2728 INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl::DoUpdate "UpdateControllerImplHelper.cpp" 848 "DoUpdate - Starting check for updates (manual)" 12/03/25 " 16:43:36.470" 62408234 2088 2728 INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl::DoUpdate "UpdateControllerImplHelper.cpp" 858 "Checking for: Installer=[No], CU/SU/UI=[No], DB/CLS=[Yes]" 12/03/25 " 16:43:36.485" 62408250 2088 2728 INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl::GetInstalledPkgVersions "UpdateControllerImplHelper.cpp" 1731 "Updater package --> [mbam-c.updatr.64bit], current version: [1.0.0]" 12/03/25 " 16:43:36.486" 62408250 2088 2728 INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl::GetInstalledPkgVersions "UpdateControllerImplHelper.cpp" 1806 "DB/ClsEng package --> [mbam-c.dbcls.64bitv5], current version: [1.0.105403]" 12/03/25 " 16:43:34.918" 62406697 05b4 2f18 WARNING MBAMChameleon HandleFileCreate "FileProt.c" 444 "FileFilter: Blocking access to \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\MBAMWsc.exe from mode 1 - process \Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe" 12/03/25 " 16:43:34.918" 62406697 05b4 2e1c WARNING MBAMChameleon HandleFileCreate "FileProt.c" 444 "FileFilter: Blocking access to \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\MBAMWsc.exe from mode 1 - process \Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe" 12/03/25 " 16:43:37.021" 62408796 2088 2728 INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl::ProcessAvailablePackages "UpdateControllerImplHelper.cpp" 1480 "A New version (1.0.711) of pkg [mbam-c.updatr.64bit] (FULL) is available" 12/03/25 " 16:43:37.021" 62408796 2088 2728 INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl::DoUpdate "UpdateControllerImplHelper.cpp" 864 "Available updates found - beginning download" 12/03/25 " 16:43:37.131" 62408906 2088 1ed8 WARNING ArwSDK kernelLogger::LogK "ArwLib.Globals.cpp" 241 "tid: 2070 - [MBAMFarFlt] [fileverify.cpp:SearchForCert-2517] Parser returns c000000d." 12/03/25 " 16:43:35.030" 62406809 2088 1cb4 WARNING MBAMChameleon SearchForCert "fileverify.cpp" 2517 "Parser returns c000000d" 12/03/25 " 16:43:35.033" 62406812 2088 1cb4 INFO MBAMChameleon ProcessNotify "ProcProt.c" 422 "Trusted process starting: Process (0000000000001328) Name avail: 1 FO FFFFA2825351AEC0, \??\C:\Program Files\Malwarebytes\Anti-Malware\MBAMWsc.exe" 12/03/25 " 16:43:36.159" 62407938 1328 0c50 INFO MBAMChameleon ProcessNotify "ProcProt.c" 519 "Trusted process terminating. 0000000000001328 (\Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\MBAMWsc.exe)" 12/03/25 " 16:43:38.092" 62409859 2088 1bd8 INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl::DownloadComplete "UpdateControllerImplHelper.cpp" 4459 "Download Complete (Successful) for: C:\ProgramData\Malwarebytes\MBAMService\updatrpkg\mbam-c.updatr.64bit.7z" 12/03/25 " 16:43:38.361" 62410125 2088 2728 INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl::DownloadUpdates "UpdateControllerImplHelper.cpp" 2155 "Successfully downloaded: mbam-c.updatr.64bit" 12/03/25 " 16:43:38.361" 62410125 2088 2728 INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl::ProcessUpdatePackages "UpdateControllerImplHelper.cpp" 2197 "Enter ProcessUpdatePackages" 12/03/25 " 16:43:38.995" 62410774 05b4 2738 WARNING MBAMChameleon HandleFileCreate "FileProt.c" 444 "FileFilter: Blocking access to \Device\HarddiskVolume3\ProgramData\Malwarebytes\MBAMService\updatrpkg\mbupdatrV5.exe from mode 1 - process \Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe" 12/03/25 " 16:43:38.995" 62410774 05b4 2e1c WARNING MBAMChameleon HandleFileCreate "FileProt.c" 444 "FileFilter: Blocking access to \Device\HarddiskVolume3\ProgramData\Malwarebytes\MBAMService\updatrpkg\mbupdatrV5.exe from mode 1 - process \Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe" 12/03/25 " 16:43:39.140" 62410919 2088 2728 WARNING MBAMChameleon SearchForCert "fileverify.cpp" 2517 "Parser returns c000000d" 12/03/25 " 16:43:39.145" 62410924 2088 2728 INFO MBAMChameleon ProcessNotify "ProcProt.c" 422 "Trusted process starting: Process (0000000000000C24) Name avail: 1 FO FFFFA28253B1A240, \??\C:\ProgramData\Malwarebytes\MBAMService\updatrpkg\mbupdatrV5.exe" 12/03/25 " 16:43:43.038" 62414812 2088 2c54 INFO RTPControllerCOM CRTPController::get_KillSwitch "RTPController.cpp" 3595 "Getting Kill Switch value 3" 12/03/25 " 16:43:43.042" 62414812 2088 2c54 INFO RTPControllerCOM CRTPController::put_KillSwitch "RTPController.cpp" 3621 "Setting Kill Switch value 3" 12/03/25 " 16:43:43.067" 62414843 2088 2c54 INFO ScanControllerCOM CScanController::get_KillSwitch "ScanController.cpp" 4514 "Getting Kill Switch value 1" 12/03/25 " 16:43:43.071" 62414843 2088 2c54 INFO ScanControllerCOM CScanController::put_KillSwitch "ScanController.cpp" 4536 "Setting Kill Switch value 1" 12/03/25 " 16:43:43.098" 62414875 2088 2c54 INFO RTPControllerCOM CRTPController::get_KillSwitch "RTPController.cpp" 3595 "Getting Kill Switch value 2" 12/03/25 " 16:43:43.104" 62414875 2088 2c54 INFO RTPControllerCOM CRTPController::get_KillSwitch "RTPController.cpp" 3595 "Getting Kill Switch value 0" 12/03/25 " 16:43:43.108" 62414875 2088 2c54 INFO RTPControllerCOM CRTPController::put_KillSwitch "RTPController.cpp" 3621 "Setting Kill Switch value 0" 12/03/25 " 16:43:43.773" 62415546 2088 2c54 INFO RTPControllerImpl mb::rtpcontrollerimpl::AMSISdkModuleLoader::Install "AMSISdkLoader.cpp" 119 "amsi dll was successfully loaded. amsiPath=." 12/03/25 " 16:43:43.971" 62415750 2088 2c54 INFO RTPControllerImpl mb::rtpcontrollerimpl::AMSISdkModuleLoader::Start "AMSISdkLoader.cpp" 218 "AMSI successfully started." 12/03/25 " 16:43:43.971" 62415750 2088 2c54 INFO RTPControllerImpl mb::rtpcontrollerimpl::RTPControllerImpl::StartAMSIProtectionImpl "RTPControllerImplHelper.cpp" 1622 "Installed and started AMSI" 12/03/25 " 16:43:43.979" 62415750 2088 2c54 INFO RTPControllerCOM CRTPController::get_KillSwitch "RTPController.cpp" 3595 "Getting Kill Switch value 7" 12/03/25 " 16:43:43.984" 62415750 2088 2c54 INFO RTPControllerCOM CRTPController::put_KillSwitch "RTPController.cpp" 3621 "Setting Kill Switch value 7" 12/03/25 " 16:43:44.008" 62415781 2088 2c54 INFO RTPControllerCOM CRTPController::get_KillSwitch "RTPController.cpp" 3595 "Getting Kill Switch value 5" 12/03/25 " 16:43:44.012" 62415781 2088 2c54 INFO RTPControllerCOM CRTPController::get_KillSwitch "RTPController.cpp" 3595 "Getting Kill Switch value 4" 12/03/25 " 16:43:44.016" 62415781 2088 2c54 INFO RTPControllerCOM CRTPController::put_KillSwitch "RTPController.cpp" 3621 "Setting Kill Switch value 4" 12/03/25 " 16:43:44.028" 62415796 2088 2c54 INFO RTPControllerImpl mb::rtpcontrollerimpl::RTPControllerImpl::StartAMSIProtectionImpl "RTPControllerImplHelper.cpp" 1622 "Installed and started AMSI" 12/03/25 " 16:43:44.036" 62415812 2088 2c54 INFO RTPControllerCOM CRTPController::get_KillSwitch "RTPController.cpp" 3595 "Getting Kill Switch value 11" 12/03/25 " 16:43:44.052" 62415828 2088 2c54 INFO RTPControllerCOM CRTPController::get_KillSwitch "RTPController.cpp" 3595 "Getting Kill Switch value 9" 12/03/25 " 16:43:44.056" 62415828 2088 2c54 INFO RTPControllerCOM CRTPController::put_KillSwitch "RTPController.cpp" 3621 "Setting Kill Switch value 9" 12/03/25 " 16:43:44.068" 62415843 2088 2c54 INFO RTPControllerImpl mb::rtpcontrollerimpl::RTPControllerImpl::StartAMSIProtectionImpl "RTPControllerImplHelper.cpp" 1622 "Installed and started AMSI" 12/03/25 " 16:43:44.078" 62415843 2088 2c54 INFO RTPControllerCOM CRTPController::get_KillSwitch "RTPController.cpp" 3595 "Getting Kill Switch value 10" 12/03/25 " 16:43:44.084" 62415859 2088 2c54 INFO RTPControllerCOM CRTPController::put_KillSwitch "RTPController.cpp" 3621 "Setting Kill Switch value 10" 12/03/25 " 16:43:44.095" 62415859 2088 2c54 INFO RTPControllerImpl mb::rtpcontrollerimpl::RTPControllerImpl::StartAMSIProtectionImpl "RTPControllerImplHelper.cpp" 1622 "Installed and started AMSI" 12/03/25 " 16:43:44.116" 62415890 2088 2c54 INFO ArwControllerCOM CArwController::get_KillSwitch "ArwController.cpp" 1020 "Getting Kill Switch value 1" 12/03/25 " 16:43:44.121" 62415890 2088 2c54 INFO ArwControllerCOM CArwController::put_KillSwitch "ArwController.cpp" 1042 "Setting Kill Switch value 1" 12/03/25 " 16:43:44.174" 62415953 2088 1ed8 INFO ArwSDK ArwLib::Globals::Stop "ArwLib.Globals.cpp" 586 "tid: 2274 - Stopping SDK..." 12/03/25 " 16:43:44.343" 62416109 2088 1ed8 WARNING ArwSDK TaskBase::Stop "Core.Task.cpp" 148 "tid: 2274 - Thread 'ArwSDK.Detection.Dispatcher' is has invalid handle, skipping." 12/03/25 " 16:43:44.343" 62416109 2088 1ed8 WARNING ArwSDK TaskBase::Stop "Core.Task.cpp" 148 "tid: 2274 - Thread 'Action.Enforcer' is has invalid handle, skipping." 12/03/25 " 16:43:44.343" 62416109 2088 1ed8 WARNING ArwSDK TaskBase::Stop "Core.Task.cpp" 148 "tid: 2274 - Thread 'ArwSDK.Result.Dispatcher' is has invalid handle, skipping." 12/03/25 " 16:43:44.343" 62416109 2088 1ed8 WARNING ArwSDK TaskBase::Stop "Core.Task.cpp" 148 "tid: 2274 - Thread 'ArwSDK.Classification.Dispatcher' is has invalid handle, skipping." 12/03/25 " 16:43:44.484" 62416250 2088 1ed8 INFO ArwSDK kernelLogger::LogK "ArwLib.Globals.cpp" 245 "tid: 2070 - [MBAMFarFlt] [farlib.c:FarFilterUnload-534] FarFilterUnload." 12/03/25 " 16:43:44.484" 62416250 2088 1ed8 INFO ArwSDK kernelLogger::LogK "ArwLib.Globals.cpp" 245 "tid: 2070 - [MBAMFarFlt] [farlib.c:FarFilterUnload-537] FinalizeDriverEntryPoints completed." 12/03/25 " 16:43:44.484" 62416250 2088 1ed8 INFO ArwSDK kernelLogger::LogK "ArwLib.Globals.cpp" 245 "tid: 2070 - [MBAMFarFlt] [farlib.c:FarFilterUnload-547] UnregisterProcessTracking started." 12/03/25 " 16:43:44.484" 62416250 2088 1ed8 INFO ArwSDK kernelLogger::LogK "ArwLib.Globals.cpp" 245 "tid: 2070 - [MBAMFarFlt] [farlib.c:FarFilterUnload-549] UnregisterProcessTracking completed." 12/03/25 " 16:43:44.484" 62416250 2088 1ed8 INFO ArwSDK kernelLogger::LogK "ArwLib.Globals.cpp" 245 "tid: 2070 - [MBAMFarFlt] [farlib.c:FarFilterUnload-555] PsRemoveCreateThreadNotifyRoutine started." 12/03/25 " 16:43:44.484" 62416250 2088 1ed8 INFO ArwSDK kernelLogger::LogK "ArwLib.Globals.cpp" 245 "tid: 2070 - [MBAMFarFlt] [farlib.c:FarFilterUnload-557] PsRemoveCreateThreadNotifyRoutine completed." 12/03/25 " 16:43:44.484" 62416250 2088 1ed8 INFO ArwSDK kernelLogger::LogK "ArwLib.Globals.cpp" 245 "tid: 2070 - [MBAMFarFlt] [farlib.c:FarFilterUnload-562] PsRemoveLoadImageNotifyRoutine started." 12/03/25 " 16:43:44.484" 62416250 2088 1ed8 INFO ArwSDK kernelLogger::LogK "ArwLib.Globals.cpp" 245 "tid: 2070 - [MBAMFarFlt] [farlib.c:FarFilterUnload-564] PsRemoveLoadImageNotifyRoutine completed." 12/03/25 " 16:43:44.484" 62416250 2088 1ed8 INFO ArwSDK kernelLogger::LogK "ArwLib.Globals.cpp" 245 "tid: 2070 - [MBAMFarFlt] [farlib.c:FarFilterUnload-569] ObUnRegisterCallbacks started." 12/03/25 " 16:43:44.484" 62416250 2088 1ed8 INFO ArwSDK kernelLogger::LogK "ArwLib.Globals.cpp" 245 "tid: 2070 - [MBAMFarFlt] [farlib.c:FarFilterUnload-571] ObUnRegisterCallbacks completed." 12/03/25 " 16:43:44.484" 62416250 2088 1ed8 INFO ArwSDK kernelLogger::LogK "ArwLib.Globals.cpp" 245 "tid: 2070 - [MBAMFarFlt] [farlib.c:FarFilterUnload-577] UnRegisterRegistryCallback started." 12/03/25 " 16:43:44.484" 62416250 2088 1ed8 INFO ArwSDK kernelLogger::LogK "ArwLib.Globals.cpp" 245 "tid: 2070 - [MBAMFarFlt] [farlib.c:FarFilterUnload-579] UnRegisterRegistryCallback completed." 12/03/25 " 16:43:44.484" 62416250 2088 1ed8 INFO ArwSDK kernelLogger::LogK "ArwLib.Globals.cpp" 245 "tid: 2070 - [MBAMFarFlt] [farlib.c:FarFilterUnload-589] FarUnblockAllThreads completed." 12/03/25 " 16:43:44.485" 62416250 2088 1ed8 INFO ArwSDK kernelLogger::LogK "ArwLib.Globals.cpp" 245 "tid: 2070 - [MBAMFarFlt] [farlib.c:FarFilterUnload-592] FarKeeperFreeAllRecords completed." 12/03/25 " 16:43:44.485" 62416250 2088 1ed8 INFO ArwSDK kernelLogger::LogK "ArwLib.Globals.cpp" 245 "tid: 2070 - [MBAMFarFlt] [farlib.c:FarFilterUnload-595] FarDeviceFreeAllItems completed." 12/03/25 " 16:43:44.485" 62416250 2088 1ed8 INFO ArwSDK kernelLogger::LogK "ArwLib.Globals.cpp" 245 "tid: 2070 - [MBAMFarFlt] [farlib.c:FarFilterUnload-598] LsDone completed." 12/03/25 " 16:43:44.485" 62416250 2088 1ed8 INFO ArwSDK kernelLogger::LogK "ArwLib.Globals.cpp" 245 "tid: 2070 - [MBAMFarFlt] [farinit.c:FarPortDisconnect-814] farflt.sys port disconnected." 12/03/25 " 16:43:44.485" 62416250 2088 1ed8 INFO ArwSDK kernelLogger::LogK "ArwLib.Globals.cpp" 245 "tid: 2070 - [MBAMFarFlt] [farlib.c:FarFilterUnload-608] FltUnregisterFilter completed." 12/03/25 " 16:43:44.485" 62416250 2088 1ed8 INFO ArwSDK kernelLogger::LogK "ArwLib.Globals.cpp" 245 "tid: 2070 - [MBAMFarFlt] [farlib.c:FarFilterUnload-616] ExclusionsFinalize completed." 12/03/25 " 16:43:44.485" 62416250 2088 1ed8 INFO ArwSDK kernelLogger::LogK "ArwLib.Globals.cpp" 245 "tid: 2070 - [MBAMFarFlt] [farlib.c:FarFilterUnload-622] FarPsCleanupProcessTable completed." 12/03/25 " 16:43:44.485" 62416250 2088 1ed8 INFO ArwSDK kernelLogger::LogK "ArwLib.Globals.cpp" 245 "tid: 2070 - [MBAMFarFlt] [farlib.c:FarFilterUnload-625] FarPsFinalizeSystem completed." 12/03/25 " 16:43:44.485" 62416250 2088 1ed8 INFO ArwSDK kernelLogger::LogK "ArwLib.Globals.cpp" 245 "tid: 2070 - [MBAMFarFlt] [farlib.c:FarFilterUnload-628] FarReleaseSystemPath completed." 12/03/25 " 16:43:44.485" 62416250 2088 1ed8 INFO ArwSDK kernelLogger::LogK "ArwLib.Globals.cpp" 245 "tid: 2070 - [MBAMFarFlt] [farlib.c:FarFilterUnload-635] FarDeleteBlockedThreadList completed." 12/03/25 " 16:43:44.485" 62416250 2088 1ed8 INFO ArwSDK kernelLogger::LogK "ArwLib.Globals.cpp" 245 "tid: 2070 - [MBAMFarFlt] [farlib.c:FarFilterUnload-643] FarClearUnmonitoredLocations completed." 12/03/25 " 16:43:44.485" 62416250 2088 1ed8 INFO ArwSDK kernelLogger::LogK "ArwLib.Globals.cpp" 245 "tid: 2070 - [MBAMFarFlt] [farlib.c:FarFilterUnload-651] FarClearTrackedOperationsList completed." 12/03/25 " 16:43:44.485" 62416250 2088 1ed8 INFO ArwSDK kernelLogger::LogK "ArwLib.Globals.cpp" 245 "tid: 2070 - [MBAMFarFlt] [farlib.c:FarFilterUnload-654] FarIOFinalize completed." 12/03/25 " 16:43:44.485" 62416250 2088 1ed8 INFO ArwSDK kernelLogger::LogK "ArwLib.Globals.cpp" 245 "tid: 2070 - [MBAMFarFlt] [farlib.c:FarFilterUnload-657] FarFinalizeBlockedFiles completed." 12/03/25 " 16:43:44.485" 62416250 2088 1ed8 INFO ArwSDK kernelLogger::LogK "ArwLib.Globals.cpp" 245 "tid: 2070 - [MBAMFarFlt] [farlib.c:FarFilterUnload-660] FarConfigFreeItems completed." 12/03/25 " 16:43:44.485" 62416250 2088 1ed8 INFO ArwSDK kernelLogger::LogK "ArwLib.Globals.cpp" 245 "tid: 2070 - [MBAMFarFlt] [farlib.c:FarFilterUnload-666] FarKeeperFinalize completed." 12/03/25 " 16:43:44.485" 62416250 2088 1ed8 INFO ArwSDK kernelLogger::LogK "ArwLib.Globals.cpp" 245 "tid: 2070 - [MBAMFarFlt] [farlib.c:FarFilterUnload-669] FarDeviceFreeTreeFinalize completed." 12/03/25 " 16:43:44.485" 62416250 2088 1ed8 INFO ArwSDK kernelLogger::LogK "ArwLib.Globals.cpp" 245 "tid: 2070 - [MBAMFarFlt] [farlib.c:FarFilterUnload-675] FarMemTrackFinalize completed." 12/03/25 " 16:43:44.485" 62416250 2088 1ed8 INFO ArwSDK kernelLogger::LogK "ArwLib.Globals.cpp" 245 "tid: 2070 - [MBAMFarFlt] [farlib.c:FarFilterUnload-677] Finish." 12/03/25 " 16:43:44.488" 62416265 2088 2274 INFO ArwSDK LogDispatcher::DoStop "Log.Dispatcher.cpp" 59 "tid: 2274 - ArwSdk: Logging stopped." 12/03/25 " 16:43:47.241" 62419015 2088 2728 INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl::DoUpdate "UpdateControllerImplHelper.cpp" 928 "Update check is complete." 12/03/25 " 16:43:47.242" 62419015 2088 03b8 INFO ScanControllerImpl mb::scancontrollerimpl::ScanControllerImpl::UpdateCheckCompletedNotification "ScanControllerImplHelper.cpp" 4286 "Received update check completed notification." 12/03/25 " 16:43:47.242" 62419015 2088 03b8 INFO ScanControllerImpl mb::scancontrollerimpl::Scanner::UpdateCheckCompletedNotification "Scanner.cpp" 10188 "Received update check completed notification. Proceeding with the scan operations." 12/03/25 " 16:43:47.243" 62419015 2088 2728 INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl::DoUpdate "UpdateControllerImplHelper.cpp" 743 "Normal database mode" 12/03/25 " 16:43:47.244" 62419015 2088 1c78 INFO ScanControllerImpl mb::scancontrollerimpl::Scanner::InitializeScan "Scanner.cpp" 614 "Checking for def updates..Done." 12/03/25 " 16:43:47.244" 62419015 2088 2728 INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl::ValidateDBManifest "UpdateControllerImplHelper.cpp" 5921 "Signature successfully validated" 12/03/25 " 16:43:47.482" 62419250 2088 1c78 INFO GalaxyRuleParser mb::common::galaxyrules::SimpleRuleFileParserV2::Parse "GalaxyRuleParser.cpp" 3004 "Successfully parsed 14789 records." 12/03/25 " 16:43:47.482" 62419250 2088 1c78 INFO DDSScanner DDSScanner::SetIGFiltersOverride "DDSScanner.cpp" 1924 "IGFiltersOverride = false." 12/03/25 " 16:43:48.314" 62420078 2088 2274 INFO ARWRulesHandler mb::arwcontrollerimpl::ArwRulesHandler::LoadConfig "RulesHandler.cpp" 43 "Config file not found C:\ProgramData\Malwarebytes\MBAMService\config\ArwRulesConfig.json. Using default values." 12/03/25 " 16:43:48.379" 62420156 2088 2f28 INFO ArwSDK ArwLib::Globals::Start "ArwLib.Globals.cpp" 385 "tid: 2274 - Starting SDK..." 12/03/25 " 16:43:47.235" 62419014 0c24 1598 INFO MBAMChameleon ProcessNotify "ProcProt.c" 519 "Trusted process terminating. 0000000000000C24 (\Device\HarddiskVolume3\ProgramData\Malwarebytes\MBAMService\updatrpkg\mbupdatrV5.exe)" 12/03/25 " 16:43:51.361" 62423140 2088 2728 INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl::ValidateDBManifest "UpdateControllerImplHelper.cpp" 5925 "DB manifest successfully validated" 12/03/25 " 16:43:51.361" 62423140 2088 2728 INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl::CheckDbManifest "UpdateControllerImplHelper.cpp" 6317 "Validated DB manifest - success" 12/03/25 " 16:43:51.376" 62423140 2088 2728 INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl::DoUpdate "UpdateControllerImplHelper.cpp" 848 "DoUpdate - Starting check for updates (automatic)" 12/03/25 " 16:43:51.376" 62423140 2088 2728 INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl::DoUpdate "UpdateControllerImplHelper.cpp" 858 "Checking for: Installer=[No], CU/SU/UI=[No], DB/CLS=[Yes]" 12/03/25 " 16:43:51.377" 62423156 2088 2728 INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl::GetInstalledPkgVersions "UpdateControllerImplHelper.cpp" 1731 "Updater package --> [mbam-c.updatr.64bit], current version: [1.0.711]" 12/03/25 " 16:43:51.377" 62423156 2088 2728 INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl::GetInstalledPkgVersions "UpdateControllerImplHelper.cpp" 1806 "DB/ClsEng package --> [mbam-c.dbcls.64bitv5], current version: [1.0.105403]" 12/03/25 " 16:43:51.609" 62423375 2088 2f28 INFO ArwSDK ArwLib::Globals::Start "ArwLib.Globals.cpp" 576 "tid: 2274 - Started SDK." 12/03/25 " 16:43:52.314" 62424078 2088 2728 INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl::DoUpdate "UpdateControllerImplHelper.cpp" 906 "Checked for updates - no updates available" 12/03/25 " 16:43:52.377" 62424156 2088 2728 INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl::DoUpdate "UpdateControllerImplHelper.cpp" 928 "Update check is complete." 12/03/25 " 16:43:52.377" 62424156 2088 03b8 INFO ScanControllerImpl mb::scancontrollerimpl::ScanControllerImpl::UpdateCheckCompletedNotification "ScanControllerImplHelper.cpp" 4286 "Received update check completed notification." 12/03/25 " 16:43:52.377" 62424156 2088 03b8 INFO ScanControllerImpl mb::scancontrollerimpl::Scanner::UpdateCheckCompletedNotification "Scanner.cpp" 10188 "Received update check completed notification. Proceeding with the scan operations." 12/03/25 " 16:43:53.053" 62424828 2088 2274 INFO ARWControllerImpl mb::arwcontrollerimpl::ArwControllerImpl::StartArwProtection "ArwControllerImplHelper.cpp" 951 "Anti-Ransomware protection has been started." 12/03/25 " 16:43:53.131" 62424906 2088 2f28 WARNING ArwSDK kernelLogger::LogK "ArwLib.Globals.cpp" 241 "tid: 3ac - [MBAMFarFlt] [fileverify.cpp:SearchForCert-2517] Parser returns c000000d." 12/03/25 " 16:43:54.147" 62425921 2088 2f28 WARNING ArwSDK kernelLogger::LogK "ArwLib.Globals.cpp" 241 "tid: 3ac - [MBAMFarFlt] [fileverify.cpp:SearchForCert-2517] Parser returns c000000d." 12/03/25 " 16:43:54.147" 62425921 2088 2f28 WARNING ArwSDK kernelLogger::LogK "ArwLib.Globals.cpp" 241 "tid: 3ac - [MBAMFarFlt] [fileverify.cpp:SearchForCert-2517] Parser returns c000000d." 12/03/25 " 16:43:54.148" 62425921 2088 2f28 WARNING ArwSDK kernelLogger::LogK "ArwLib.Globals.cpp" 241 "tid: 3ac - [MBAMFarFlt] [fileverify.cpp:SearchForCert-2517] Parser returns c000000d." 12/03/25 " 16:43:54.148" 62425921 2088 2f28 WARNING ArwSDK kernelLogger::LogK "ArwLib.Globals.cpp" 241 "tid: 3ac - [MBAMFarFlt] [fileverify.cpp:SearchForCert-2517] Parser returns c000000d." 12/03/25 " 16:43:54.148" 62425921 2088 2f28 WARNING ArwSDK kernelLogger::LogK "ArwLib.Globals.cpp" 241 "tid: 3ac - [MBAMFarFlt] [fileverify.cpp:SearchForCert-2517] Parser returns c000000d." 12/03/25 " 16:44:02.964" 62434734 2088 1aa4 INFO ScanControllerImpl mb::scancontrollerimpl::Scanner::ProcessClassificationResultPostWhitelistCheck "Scanner.cpp" 6919 "Threat detected: ThreatName=PUP.Optional.Outbyte, ObjectPath=C:\PROGRAMDATA\OUTBYTE\PC Repair, OriginalObjectPath=C:\PROGRAMDATA\OUTBYTE\PC Repair" 12/03/25 " 16:44:02.970" 62434734 2088 1aa4 INFO CleanControllerImpl mb::cleanctlrimpl::linker::Linker::Init "Linker.cpp" 93 "Initializing linker" 12/03/25 " 16:44:03.058" 62434828 2088 1aa4 INFO CleanControllerImpl mb::cleanctlrimpl::linker::Linker::FindLinkedTraces "Linker.cpp" 218 "Finding linked traces" 12/03/25 " 16:44:05.251" 62437015 2088 1aa4 INFO BrowserSDK mb::browsersdk::chromium::ChromiumUtils::GetAppPathsAndVersion "ChromiumUtils.cpp" 113 "Unable to find chrome.exe installation path" 12/03/25 " 16:44:05.336" 62437109 2088 1aa4 INFO CleanControllerImpl mb::cleanctlrimpl::whitelist::WhiteListManager::LogWhiteListStatus "WhiteListManager.cpp" 310 "White list status: Folder 'C:\PROGRAMDATA\OUTBYTE\PC Repair' => None:Unknown" 12/03/25 " 16:44:05.338" 62437109 2088 1aa4 INFO CleanControllerImpl mb::cleanctlrimpl::utility::DefaultFolderDepthFirstTraversal::Traverse "DefaultFolderDepthFirstTraversal.cpp" 37 "Traversing through dir 'C:\ProgramData\Outbyte\PC Repair'" 12/03/25 " 16:44:05.448" 62437218 2088 1aa4 INFO Actions ActionsManager::GetDetectedThreatsV2 "ActionsManager.cpp" 501 "Getting detected threats from actions" 12/03/25 " 16:44:05.458" 62437234 2088 1aa4 INFO CleanControllerImpl PreCleanEngine::AddLinkedTraces "PreCleanEngine.cpp" 972 "Getting linked traces" 12/03/25 " 16:44:05.458" 62437234 2088 1aa4 INFO CleanControllerImpl LinkingEngine::Init "LinkingEngine.cpp" 94 "Start of LinkingEngine initialization" 12/03/25 " 16:44:05.458" 62437234 2088 1aa4 INFO CleanControllerImpl LinkingEngine::InitHotspots "LinkingEngine.cpp" 287 "Start of InitHotspots" 12/03/25 " 16:44:05.459" 62437234 2088 1aa4 INFO CleanControllerImpl LinkingEngine::InitHotKeys "LinkingEngine.cpp" 145 "Start of InitHotKeys" 12/03/25 " 16:44:05.459" 62437234 2088 2e04 INFO CleanControllerImpl LinkingEngine::TraverseHotspots "LinkingEngine.cpp" 313 "Start of TraverseHotspots" 12/03/25 " 16:44:05.474" 62437250 2088 1aa4 INFO CleanControllerImpl LinkingEngine::InitHotValues "LinkingEngine.cpp" 231 "Start of InitHotValues" 12/03/25 " 16:44:05.479" 62437250 2088 1aa4 INFO CleanControllerImpl LinkingEngine::EnumerateProcesses "LinkingEngine.cpp" 448 "Start of EnumerateProcesses" 12/03/25 " 16:44:06.333" 62438109 2088 1aa4 INFO CleanControllerImpl LinkingEngine::InitMaps "LinkingEngine.cpp" 468 "Start of InitMaps" 12/03/25 " 16:44:08.764" 62440530 2088 1c78 WARNING MBAMSwissArmy SearchForCert "fileverify.cpp" 2517 "Parser returns c000000d" 12/03/25 " 16:44:19.778" 62451546 2088 2e04 INFO CleanControllerImpl LinkingEngine::TraverseHotspots::::operator () "LinkingEngine.cpp" 315 "End of TraverseHotspots" 12/03/25 " 16:44:19.779" 62451546 2088 2e04 INFO CleanControllerImpl LinkingEngine::InitTasksDataStructures "LinkingEngine.cpp" 919 "Start of InitTasksDataStructures" 12/03/25 " 16:44:23.950" 914471567 2f04 0009 ERROR Malwarebytes "GetStringFromEndpointAsync" """MbamUI.Core.OSFacilities""" 254 "System.Net.Http.HttpRequestException: Response status code does not indicate success: 504 (Gateway Time-out). at System.Net.Http.HttpResponseMessage.EnsureSuccessStatusCode() at MbamUI.Core.OSFacilities.GetStringFromEndpointAsync(String endpointUrl)" 12/03/25 " 16:44:23.951" 914481044 2f04 0004 WARNING Malwarebytes "Execute" """MbamUI.Services.IrisService""" 87 "Failed to get raw Iris JSON from endpoint, using cached control statement chain" 12/03/25 " 16:44:23.952" 914492296 2f04 0004 ERROR Malwarebytes "GetCachedControlStatementChain" """MbamUI.Services.IrisService""" 276 "No cached Iris data" 12/03/25 " 16:44:23.952" 914496716 2f04 0004 ERROR Malwarebytes "Execute" """MbamUI.Services.IrisService""" 91 "Unable to get any control statement chain, can't run Iris" 12/03/25 " 16:44:28.349" 62460125 2088 2380 INFO DDSScanner DDSScanner::Scan "DDSScanner.cpp" 804 "=> Settings for Malware.Heuristic.2108: C:\WINDOWS\SYSTEM32\DRIVERS\ATIKMPAG.SYS" 12/03/25 " 16:44:28.350" 62460125 2088 2380 INFO DDSScanner DDSScanner::Scan "DDSScanner.cpp" 807 "MS=1 IM=0 IS=1 Status=5 IO=0 DG=0 MMI=0 MH1KMI=0 MHN1KMI=0" 12/03/25 " 16:44:28.350" 62460125 2088 2380 INFO DDSScanner DDSScanner::Scan "DDSScanner.cpp" 823 "TN: Malware.Heuristic.2108" 12/03/25 " 16:44:28.350" 62460125 2088 2380 INFO DDSScanner DDSScanner::Scan "DDSScanner.cpp" 839 "CM: 0" 12/03/25 " 16:44:28.351" 62460125 2088 2380 INFO ObjectScanner ObjectScanner::ScanFile_DDS "ObjectScanner.cpp" 1495 "DDSIG threat detections on this file are filtered out by WhitePolyDDSIG rule Malware.Heuristic.2108, therefore turning this detection silent. FilePath=, Threatname=." 12/03/25 " 16:44:28.351" 62460125 2088 2380 INFO ScanControllerImpl mb::scancontrollerimpl::Scanner::ClassificationResultCallback "Scanner.cpp" 5640 "=> Settings for Malware.Heuristic.2108:C:\WINDOWS\SYSTEM32\DRIVERS\ATIKMPAG.SYS" 12/03/25 " 16:44:28.352" 62460125 2088 2380 INFO ScanControllerImpl mb::scancontrollerimpl::Scanner::ClassificationResultCallback "Scanner.cpp" 5641 "=> IS=1,IM=0,IT=0,IAM=0,STN=0,AD=0" 12/03/25 " 16:44:28.974" 62460750 2088 1aa4 INFO CleanControllerImpl LinkingEngine::InitMaps "LinkingEngine.cpp" 494 "End of InitMaps" 12/03/25 " 16:44:28.974" 62460750 2088 1aa4 INFO CleanControllerImpl LinkingEngine::InitFileToRunKeysValuesMap "LinkingEngine.cpp" 591 "Start of InitFileToRunKeysValuesMap" 12/03/25 " 16:44:29.123" 62460890 2088 1aa4 WARNING CleanControllerImpl mb::common::io::NtFileSystemUtils::QueryFileObjectAttributes "NtFileSystemUtils.cpp" 301 "Error getting attributes for 'SECURITY.DLL', error = 'Nie można odnaleźć określonego pliku. ' (0xc0000034)" 12/03/25 " 16:44:29.390" 62461156 2088 1aa4 INFO CleanControllerImpl LinkingEngine::InitFileToAutoRunValuesMap "LinkingEngine.cpp" 656 "Start of InitFileToAutoRunValuesMap" 12/03/25 " 16:44:29.428" 62461203 2088 1aa4 INFO CleanControllerImpl LinkingEngine::InitFileToCLRProfilerValuesMap "LinkingEngine.cpp" 751 "Start of InitFileToCLRProfilerValuesMap" 12/03/25 " 16:44:29.429" 62461203 2088 1aa4 INFO CleanControllerImpl LinkingEngine::InitHKCRSubKeys "LinkingEngine.cpp" 797 "Start of InitHKCRSubKeys" 12/03/25 " 16:44:29.590" 62461359 2088 1aa4 INFO CleanControllerImpl LinkingEngine::InitSSODLKeyValues "LinkingEngine.cpp" 824 "Start of InitSSODLKeyValues" 12/03/25 " 16:44:29.595" 62461359 2088 1aa4 INFO CleanControllerImpl LinkingEngine::InitBHOSubKeys "LinkingEngine.cpp" 852 "Start of InitBHOSubKeys" 12/03/25 " 16:44:29.602" 62461375 2088 1aa4 INFO CleanControllerImpl LinkingEngine::InitTypeLibraryInterfaces "LinkingEngine.cpp" 880 "Start of InitTypeLibraryInterfaces" 12/03/25 " 16:44:36.760" 62468531 2088 2e04 INFO CleanControllerImpl LinkingEngine::InitTasksDataStructures::::operator () "LinkingEngine.cpp" 920 "End of InitTasksDataStructures" 12/03/25 " 16:44:36.760" 62468531 2088 2e04 INFO CleanControllerImpl LinkingEngine::Init::::operator () "LinkingEngine.cpp" 109 "Second LinkingEngine init thread done" 12/03/25 " 16:44:39.101" 62470875 2088 1aa4 INFO CleanControllerImpl LinkingEngine::Init "LinkingEngine.cpp" 130 "End of LinkingEngine initialization" 12/03/25 " 16:44:39.125" 62470890 2088 1aa4 INFO ScanControllerImpl mb::scancontrollerimpl::Scanner::ProcessClassificationResultPostWhitelistCheck "Scanner.cpp" 6735 "Detected file is whitelisted, FilePath=C:\WINDOWS\SYSTEM32\DRIVERS\ATIKMPAG.SYS. Ignoring this detection." 12/03/25 " 16:44:45.901" 62477671 2088 1c78 WARNING RegistryUtilities mb::common::system::RegistryUtilities::GetValueStringInternal "RegistryUtilities.cpp" 1174 "Using GetValueString for registry value type (7), Key=SYSTEM\CURRENTCONTROLSET\CONTROL\LSA, Value=Security Packages" 12/03/25 " 16:44:45.903" 62477671 2088 1c78 WARNING RegistryUtilities mb::common::system::RegistryUtilities::GetValueStringInternal "RegistryUtilities.cpp" 1174 "Using GetValueString for registry value type (7), Key=SYSTEM\CURRENTCONTROLSET\CONTROL\LSA, Value=Notification Packages" 12/03/25 " 16:44:45.904" 62477671 2088 1c78 WARNING RegistryUtilities mb::common::system::RegistryUtilities::GetValueStringInternal "RegistryUtilities.cpp" 1174 "Using GetValueString for registry value type (7), Key=SYSTEM\CURRENTCONTROLSET\CONTROL\LSA, Value=Authentication Packages" 12/03/25 " 16:45:04.728" 62496500 2088 1aa4 INFO ScanControllerImpl mb::scancontrollerimpl::Scanner::ProcessClassificationResultPostWhitelistCheck "Scanner.cpp" 6919 "Threat detected: ThreatName=PUP.Optional.Outbyte, ObjectPath=C:\PROGRAMDATA\Outbyte\PC Repair, OriginalObjectPath=C:\PROGRAMDATA\Outbyte\PC Repair" 12/03/25 " 16:45:04.729" 62496500 2088 1aa4 INFO CleanControllerImpl mb::cleanctlrimpl::linker::Linker::FindLinkedTraces "Linker.cpp" 218 "Finding linked traces" 12/03/25 " 16:45:06.800" 62498578 2088 1aa4 INFO CleanControllerImpl PreCleanEngine::GetCleanItemsAndProcessedPathsPreCleanNotStarted "PreCleanEngine.cpp" 504 "Ignoring clean item because it is a duplicate, C:\PROGRAMDATA\Outbyte\PC Repair and C:\ProgramData\Outbyte\PC Repair" 12/03/25 " 16:45:21.864" 62513640 2088 1c78 INFO BrowserSDK mb::browsersdk::chromium::ChromiumUtils::GetAppPathsAndVersion "ChromiumUtils.cpp" 113 "Unable to find chrome.exe installation path" 12/03/25 " 16:45:21.865" 62513640 2088 1c78 INFO BrowserSDK mb::browsersdk::chromium::ChromiumSDK::ScanSystem "ChromiumSDK.cpp" 127 "Chrome is not installed" 12/03/25 " 16:45:23.735" 62515500 2088 1390 INFO DDSScanner DDSScanner::Scan "DDSScanner.cpp" 804 "=> Settings for Malware.Heuristic.2108: C:\WINDOWS\SYSTEM32\DRIVERS\ATIKMPAG.SYS" 12/03/25 " 16:45:23.735" 62515500 2088 1390 INFO DDSScanner DDSScanner::Scan "DDSScanner.cpp" 807 "MS=1 IM=0 IS=1 Status=5 IO=0 DG=0 MMI=0 MH1KMI=0 MHN1KMI=0" 12/03/25 " 16:45:23.735" 62515500 2088 1390 INFO DDSScanner DDSScanner::Scan "DDSScanner.cpp" 823 "TN: Malware.Heuristic.2108" 12/03/25 " 16:45:23.735" 62515500 2088 1390 INFO DDSScanner DDSScanner::Scan "DDSScanner.cpp" 839 "CM: 0" 12/03/25 " 16:45:23.736" 62515515 2088 1390 INFO ObjectScanner ObjectScanner::ScanFile_DDS "ObjectScanner.cpp" 1495 "DDSIG threat detections on this file are filtered out by WhitePolyDDSIG rule Malware.Heuristic.2108, therefore turning this detection silent. FilePath=, Threatname=." 12/03/25 " 16:45:23.736" 62515515 2088 1390 INFO ScanControllerImpl mb::scancontrollerimpl::Scanner::ClassificationResultCallback "Scanner.cpp" 5640 "=> Settings for Malware.Heuristic.2108:C:\WINDOWS\SYSTEM32\DRIVERS\ATIKMPAG.SYS" 12/03/25 " 16:45:23.736" 62515515 2088 1390 INFO ScanControllerImpl mb::scancontrollerimpl::Scanner::ClassificationResultCallback "Scanner.cpp" 5641 "=> IS=1,IM=0,IT=0,IAM=0,STN=0,AD=0" 12/03/25 " 16:45:23.742" 62515515 2088 1aa4 INFO ScanControllerImpl mb::scancontrollerimpl::Scanner::ProcessClassificationResultPostWhitelistCheck "Scanner.cpp" 6735 "Detected file is whitelisted, FilePath=C:\WINDOWS\SYSTEM32\DRIVERS\ATIKMPAG.SYS. Ignoring this detection." 12/03/25 " 16:45:41.286" 62533065 2088 2fe8 WARNING MBAMChameleon SearchForCert "fileverify.cpp" 2517 "Parser returns c000000d" 12/03/25 " 16:45:41.291" 62533070 2088 2fe8 INFO MBAMChameleon ProcessNotify "ProcProt.c" 422 "Trusted process starting: Process (00000000000033D4) Name avail: 1 FO FFFFA28248784BF0, \??\C:\Users\grzeg\AppData\LocalLow\IGDump\X86_00\ig.exe" 12/03/25 " 16:45:41.805" 62533584 2088 2fe8 INFO MBAMChameleon InitializeDualPath "IG2ProtUtils.c" 380 "Dual path succesfully initialized. Usr Path:""C:\Users\grzeg\AppData\LocalLow\IGDump\X86_00\ig.exe"", Krn Path:""\Device\HarddiskVolume3\Users\grzeg\AppData\LocalLow\IGDump\X86_00\ig.exe""" 12/03/25 " 16:45:41.805" 62533584 2088 2fe8 INFO MBAMChameleon AddProcessToIsolationList "DispatchIOCTL.c" 892 "New process added to isolation list. PID:00000000000033D4, Path:C:\Users\grzeg\AppData\LocalLow\IGDump\X86_00\ig.exe" 12/03/25 " 16:45:41.805" 62533584 2088 2fe8 INFO MBAMChameleon IG2PFS_AddExclusionPath "IG2ProtFs.c" 351 "Received path to add to FS Exclusions list: ""C:\Users\grzeg\AppData\LocalLow\IGDump\X86_00""." 12/03/25 " 16:45:41.805" 62533584 2088 2fe8 INFO MBAMChameleon InitializeDualPath "IG2ProtUtils.c" 380 "Dual path succesfully initialized. Usr Path:""C:\Users\grzeg\AppData\LocalLow\IGDump\X86_00"", Krn Path:""\DEVICE\HARDDISKVOLUME3\USERS\GRZEG\APPDATA\LOCALLOW\IGDUMP\X86_00""" 12/03/25 " 16:45:41.805" 62533584 2088 2fe8 INFO MBAMChameleon IG2PFS_AddExclusionPath "IG2ProtFs.c" 382 "New path added to File System list: C:\Users\grzeg\AppData\LocalLow\IGDump\X86_00" 12/03/25 " 16:45:41.805" 62533584 2088 2fe8 INFO MBAMChameleon IG2PFS_AddExclusionPath "IG2ProtFs.c" 351 "Received path to add to FS Exclusions list: ""C:\Users\grzeg\AppData\LocalLow\IGDump\X86_00\*.bin""." 12/03/25 " 16:45:41.805" 62533584 2088 2fe8 INFO MBAMChameleon InitializeDualPath "IG2ProtUtils.c" 380 "Dual path succesfully initialized. Usr Path:""C:\Users\grzeg\AppData\LocalLow\IGDump\X86_00\*.bin"", Krn Path:""\DEVICE\HARDDISKVOLUME3\USERS\GRZEG\APPDATA\LOCALLOW\IGDUMP\X86_00\*.BIN""" 12/03/25 " 16:45:41.805" 62533584 2088 2fe8 INFO MBAMChameleon IG2PFS_AddExclusionPath "IG2ProtFs.c" 382 "New path added to File System list: C:\Users\grzeg\AppData\LocalLow\IGDump\X86_00\*.bin" 12/03/25 " 16:45:41.805" 62533584 2088 2fe8 INFO MBAMChameleon IG2PFS_AddExclusionPath "IG2ProtFs.c" 351 "Received path to add to FS Exclusions list: ""C:\Users\grzeg\AppData\LocalLow\IGDump\X86_00\*.txt""." 12/03/25 " 16:45:41.805" 62533584 2088 2fe8 INFO MBAMChameleon InitializeDualPath "IG2ProtUtils.c" 380 "Dual path succesfully initialized. Usr Path:""C:\Users\grzeg\AppData\LocalLow\IGDump\X86_00\*.txt"", Krn Path:""\DEVICE\HARDDISKVOLUME3\USERS\GRZEG\APPDATA\LOCALLOW\IGDUMP\X86_00\*.TXT""" 12/03/25 " 16:45:41.805" 62533584 2088 2fe8 INFO MBAMChameleon IG2PFS_AddExclusionPath "IG2ProtFs.c" 382 "New path added to File System list: C:\Users\grzeg\AppData\LocalLow\IGDump\X86_00\*.txt" 12/03/25 " 16:45:41.805" 62533584 2088 2fe8 INFO MBAMChameleon IG2PFS_AddExclusionPath "IG2ProtFs.c" 351 "Received path to add to FS Exclusions list: ""C:\Users\grzeg\AppData\LocalLow\IGDump\X86_00\*.ext""." 12/03/25 " 16:45:41.805" 62533584 2088 2fe8 INFO MBAMChameleon InitializeDualPath "IG2ProtUtils.c" 380 "Dual path succesfully initialized. Usr Path:""C:\Users\grzeg\AppData\LocalLow\IGDump\X86_00\*.ext"", Krn Path:""\DEVICE\HARDDISKVOLUME3\USERS\GRZEG\APPDATA\LOCALLOW\IGDUMP\X86_00\*.EXT""" 12/03/25 " 16:45:41.805" 62533584 2088 2fe8 INFO MBAMChameleon IG2PFS_AddExclusionPath "IG2ProtFs.c" 382 "New path added to File System list: C:\Users\grzeg\AppData\LocalLow\IGDump\X86_00\*.ext" 12/03/25 " 16:45:42.042" 62533821 2088 2fe8 INFO MBAMChameleon AddNewPIDAndPathFilter "IG2ProtNet.c" 1586 "Added! New ALE Resource Assignment Filter by PID(00000000000033D4) and Path(""\Device\HarddiskVolume3\Users\grzeg\AppData\LocalLow\IGDump\X86_00\ig.exe"") filter for callout 2d21ccdb-0383-4ba4-81ed-7a7d58971107" 12/03/25 " 16:45:42.083" 62533862 2088 2fe8 INFO MBAMChameleon AddNewPIDAndPathFilter "IG2ProtNet.c" 1586 "Added! New ALE Resource Assignment Filter by PID(00000000000033D4) and Path(""\Device\HarddiskVolume3\Users\grzeg\AppData\LocalLow\IGDump\X86_00\ig.exe"") filter for callout 797d6309-4a5e-4fcc-b57b-6627959006aa" 12/03/25 " 16:45:43.342" 62535109 2088 2f28 WARNING ArwSDK kernelLogger::LogK "ArwLib.Globals.cpp" 241 "tid: 3ac - [MBAMFarFlt] [fileverify.cpp:SearchForCert-2517] Parser returns c000000d." 12/03/25 " 16:45:43.342" 62535109 2088 2f28 WARNING ArwSDK kernelLogger::LogK "ArwLib.Globals.cpp" 241 "tid: 3ac - [MBAMFarFlt] [fileverify.cpp:SearchForCert-2517] Parser returns c000000d." 12/03/25 " 16:45:45.132" 62536911 033c 0ea4 INFO MBAMChameleon IgProcessCreateNotifyRoutineExUnload "IG2ProtProcs.c" 506 "New process([0000000000001640]""\??\C:\Windows\system32\wbem\wmiprvse.exe"") attempted to launch." 12/03/25 " 16:45:45.132" 62536911 033c 0ea4 INFO MBAMChameleon IgProcessCreateNotifyRoutineExUnload "IG2ProtProcs.c" 518 "Process([000000000000033C]""\Device\HarddiskVolume3\Windows\System32\svchost.exe"") attempting to launch new process [0000000000001640]""\??\C:\Windows\system32\wbem\wmiprvse.exe""." 12/03/25 " 16:45:45.133" 62536912 033c 0ea4 INFO MBAMChameleon IgProcessCreateNotifyRoutineExUnload "IG2ProtProcs.c" 570 "Permited!! Process(000000000000033C) has launched new process with pid 0000000000001640" 12/03/25 " 16:45:48.222" 62540001 033c 0ea4 INFO MBAMChameleon IgProcessCreateNotifyRoutineExUnload "IG2ProtProcs.c" 506 "New process([0000000000002ADC]""\??\C:\Windows\System32\mousocoreworker.exe"") attempted to launch." 12/03/25 " 16:45:48.222" 62540001 033c 0ea4 INFO MBAMChameleon IgProcessCreateNotifyRoutineExUnload "IG2ProtProcs.c" 518 "Process([000000000000033C]""\Device\HarddiskVolume3\Windows\System32\svchost.exe"") attempting to launch new process [0000000000002ADC]""\??\C:\Windows\System32\mousocoreworker.exe""." 12/03/25 " 16:45:48.222" 62540001 033c 0ea4 INFO MBAMChameleon IgProcessCreateNotifyRoutineExUnload "IG2ProtProcs.c" 570 "Permited!! Process(000000000000033C) has launched new process with pid 0000000000002ADC" 12/03/25 " 16:45:51.132" 62542906 2088 2fe8 WARNING DDSIG LaunchIGProcessAndWait "IGSDK.cpp" 250 "[idx=0] TerminateProcess TIMEOUT - [PID = 13268]" 12/03/25 " 16:45:49.104" 62540883 33d4 2f98 WARNING MBAMChameleon cbIG2PFsPreCreate "IG2ProtFs.c" 1002 "FILE SYSTEM OPERATION BLOCKED! Path (\Device\HarddiskVolume3\Windows\Temp\MBI4C4B.tmp), DesiredAccess (0x00120089), Options (0x02000060), Process (00000000000033D4)(\Device\HarddiskVolume3\Users\grzeg\AppData\LocalLow\IGDump\X86_00\ig.exe)" 12/03/25 " 16:45:49.104" 62540883 33d4 2f98 WARNING MBAMChameleon IgRegistryNotifyRoutine "IG2ProtReg.c" 261 "REGISTRY OPERATION BLOCKED!! Due to rule for a process(00000000000033D4):(\Device\HarddiskVolume3\Users\grzeg\AppData\LocalLow\IGDump\X86_00\ig.exe)." 12/03/25 " 16:45:49.104" 62540883 33d4 2f98 WARNING MBAMChameleon IgRegistryNotifyRoutine "IG2ProtReg.c" 261 "REGISTRY OPERATION BLOCKED!! Due to rule for a process(00000000000033D4):(\Device\HarddiskVolume3\Users\grzeg\AppData\LocalLow\IGDump\X86_00\ig.exe)." 12/03/25 " 16:45:49.469" 62541248 33d4 2174 INFO MBAMChameleon cbIG2PFsPreCreate "IG2ProtFs.c" 963 "FS Create operation from 00000000000033D4 is excluded!! Matched path: \Device\HarddiskVolume3\Users\grzeg\AppData\LocalLow\IGDump\X86_00\sec_dump_data02FB1000_0027C000_cont_0.bin." 12/03/25 " 16:45:49.495" 62541274 33d4 2174 INFO MBAMChameleon cbIG2PFsPreCreate "IG2ProtFs.c" 963 "FS Create operation from 00000000000033D4 is excluded!! Matched path: \Device\HarddiskVolume3\Users\grzeg\AppData\LocalLow\IGDump\X86_00\all_memory_dump_cont_0.bin." 12/03/25 " 16:45:50.616" 62542395 03d8 30cc INFO MBAMChameleon IgProcessCreateNotifyRoutineExUnload "IG2ProtProcs.c" 506 "New process([000000000000250C]""\??\C:\Windows\system32\svchost.exe"") attempted to launch." 12/03/25 " 16:45:50.616" 62542395 03d8 30cc INFO MBAMChameleon IgProcessCreateNotifyRoutineExUnload "IG2ProtProcs.c" 518 "Process([00000000000003D8]""\Device\HarddiskVolume3\Windows\System32\services.exe"") attempting to launch new process [000000000000250C]""\??\C:\Windows\system32\svchost.exe""." 12/03/25 " 16:45:50.616" 62542395 03d8 30cc INFO MBAMChameleon IgProcessCreateNotifyRoutineExUnload "IG2ProtProcs.c" 570 "Permited!! Process(00000000000003D8) has launched new process with pid 000000000000250C" 12/03/25 " 16:45:51.194" 62542973 0004 0f74 INFO MBAMChameleon PurgeAddedFilters "IG2ProtNet.c" 1929 "Filter(0x74762) purged succesfully from Engine Filter." 12/03/25 " 16:45:51.194" 62542973 0004 0f74 INFO MBAMChameleon PurgeAddedFilters "IG2ProtNet.c" 1929 "Filter(0x74761) purged succesfully from Engine Filter." 12/03/25 " 16:45:51.194" 62542973 33d4 2f98 INFO MBAMChameleon ProcessNotify "ProcProt.c" 519 "Trusted process terminating. 00000000000033D4 (\Device\HarddiskVolume3\Users\grzeg\AppData\LocalLow\IGDump\X86_00\ig.exe)" 12/03/25 " 16:45:52.778" 62544546 2088 1384 INFO CleanControllerImpl mb::cleanctlrimpl::whitelist::HubbleWhiteLister::AreFilesWhiteListed "HubbleWhiteLister.cpp" 537 "Response body from Hubble request: {""results"":[{""reclassify"":true,""sha256"":""39993fbd8b608e3510cc7d7ab643c906886346b9171bbe3079aa97210148bc94"",""md5"":""70458f093d7a21795b24ac7a422907db"",""send_file"":false,""trust_expires_at"":600,""classification"":""DO_NOT_DETECT"",""trust_always"":false,""reason"":""default""}]} " 12/03/25 " 16:45:52.778" 62544546 2088 1384 INFO CleanControllerImpl mb::cleanctlrimpl::whitelist::WhiteListManager::LogWhiteListStatus "WhiteListManager.cpp" 310 "White list status: File 'C:\PROGRAMDATA\DIGITAL-ELITEBOARD\INSTALLER\PETKA\PTKUNL.EXE' 70458F093D7A21795B24AC7A422907DB (shuriken) => Hubble:WhiteListed" 12/03/25 " 16:46:06.587" 62558353 2088 1390 WARNING MBAMSwissArmy HandleIoctlReadFile "ioctl.c" 265 "File (C:\PAGEFILE.SYS) is too large for input/output. (11811160064) bytes" 12/03/25 " 16:46:06.641" 62558407 2088 1390 WARNING MBAMSwissArmy HandleIoctlReadFile "ioctl.c" 265 "File (C:\PAGEFILE.SYS) is too large for input/output. (11811160064) bytes" 12/03/25 " 16:46:15.787" 62567562 2088 1384 INFO CleanControllerImpl mb::cleanctlrimpl::whitelist::HubbleWhiteLister::AreFilesWhiteListed "HubbleWhiteLister.cpp" 537 "Response body from Hubble request: {""results"":[{""reclassify"":true,""sha256"":""1601b900e00b0a22ac7b54cd32d080497092131efe11770bd8c9634cbbfffb76"",""md5"":""e88f4e73bb6aeedc4f1afea4e38ace00"",""send_file"":false,""trust_expires_at"":600,""classification"":""DO_NOT_DETECT"",""trust_always"":false,""reason"":""default""}]} " 12/03/25 " 16:46:15.788" 62567562 2088 1384 INFO CleanControllerImpl mb::cleanctlrimpl::whitelist::WhiteListManager::LogWhiteListStatus "WhiteListManager.cpp" 310 "White list status: File 'C:\USERS\GRZEG\APPDATA\LOCAL\SUUNTOLINK\APP-4.1.11\SQUIRREL.EXE' E88F4E73BB6AEEDC4F1AFEA4E38ACE00 (shuriken) => Hubble:WhiteListed" 12/03/25 " 16:46:24.800" 2122973818 2f04 001a ERROR Malwarebytes "GetStringFromEndpointAsync" """MbamUI.Core.OSFacilities""" 254 "System.Net.Http.HttpRequestException: Response status code does not indicate success: 504 (Gateway Time-out). at System.Net.Http.HttpResponseMessage.EnsureSuccessStatusCode() at MbamUI.Core.OSFacilities.GetStringFromEndpointAsync(String endpointUrl)" 12/03/25 " 16:46:24.801" 2122982558 2f04 0008 WARNING Malwarebytes "Execute" """MbamUI.Services.IrisService""" 87 "Failed to get raw Iris JSON from endpoint, using cached control statement chain" 12/03/25 " 16:46:24.802" 2122989613 2f04 0008 ERROR Malwarebytes "GetCachedControlStatementChain" """MbamUI.Services.IrisService""" 276 "No cached Iris data" 12/03/25 " 16:46:24.802" 2122994362 2f04 0008 ERROR Malwarebytes "Execute" """MbamUI.Services.IrisService""" 91 "Unable to get any control statement chain, can't run Iris" 12/03/25 " 16:46:59.101" 62610875 2088 1384 INFO CleanControllerImpl mb::cleanctlrimpl::thread::SimpleThreadPool::GrowThreadPool "SimpleThreadPool.cpp" 222 "FileSignatureVerifier: Growing thread pool" 12/03/25 " 16:46:59.190" 62610968 2088 1384 INFO CleanControllerImpl mb::cleanctlrimpl::whitelist::WhiteListManager::LogWhiteListStatus "WhiteListManager.cpp" 310 "White list status: File 'C:\WINDOWS\TEMP\DBBECFF2D05D11F08A6D002454B58C9A.TMP' 96891EA1A5D1A5CC24C58DFB8EEA750A (shuriken) => Signature:WhiteListed" 12/03/25 " 16:47:09.501" 62621265 2088 1384 INFO CleanControllerImpl mb::cleanctlrimpl::whitelist::WhiteListManager::LogWhiteListStatus "WhiteListManager.cpp" 310 "White list status: File 'C:\USERS\GRZEG\DOWNLOADS\MBSETUP.EXE' 7DBF1467039B58CCC1115EA9E4683335 (shuriken) => Signature:WhiteListed" 12/03/25 " 16:47:25.492" 62637265 2088 1384 INFO CleanControllerImpl mb::cleanctlrimpl::whitelist::WhiteListManager::LogWhiteListStatus "WhiteListManager.cpp" 310 "White list status: File 'C:\WINDOWS\TEMP\DBDD6A5CD05D11F0ADD9002454B58C9A.TMP' 43DC0BEE6E91D28D0E2D2A40664DC5EE (shuriken) => Signature:WhiteListed" 12/03/25 " 16:47:35.359" 62647125 2088 1e54 INFO ServiceControllerImpl ServiceControllerImplementation::PowerIdleNotificationImpl "ServiceControllerImplementation.cpp" 3843 "Notifying controllers of power idle change. System is idle." 12/03/25 " 16:47:59.026" 62670796 2088 1384 WARNING CleanControllerImpl mb::cleanctlrimpl::whitelist::RulesWhiteLister::IsObjectWhiteListedEx "RulesWhiteLister.cpp" 387 "Unexpected MBStatus 9 while attempting to white list 'C:\ProgramData\Malwarebytes\MBAMService\tmp\712416b4d05f11f0b474002454b58c9a'" 12/03/25 " 16:47:59.077" 62670843 2088 1384 WARNING HttpConnection mb::common::net::HttpConnection::SendRequest "HttpConnection.cpp" 464 "Stale connection" 12/03/25 " 16:47:59.078" 62670843 2088 1384 WARNING HttpConnection mb::common::net::HttpConnection::LogExceptionDetails "HttpConnection.cpp" 1902 "Exception details: text=No message received" 12/03/25 " 16:48:00.062" 62671828 2088 1384 INFO CleanControllerImpl mb::cleanctlrimpl::whitelist::HubbleWhiteLister::AreFilesWhiteListed "HubbleWhiteLister.cpp" 537 "Response body from Hubble request: {""results"":[{""reclassify"":false,""sha256"":""25ea433bdc5acbf075fff60a5ba554b337a84bf9e60471aab246fda7472ac291"",""md5"":""2882bcb2dd015d77040c45898ff62fee"",""send_file"":false,""trust_expires_at"":600,""classification"":""DO_NOT_DETECT"",""trust_always"":false,""reason"":""default""}]} " 12/03/25 " 16:48:00.062" 62671828 2088 1384 INFO CleanControllerImpl mb::cleanctlrimpl::whitelist::WhiteListManager::LogWhiteListStatus "WhiteListManager.cpp" 310 "White list status: File 'C:\ProgramData\Malwarebytes\MBAMService\tmp\712416b4d05f11f0b474002454b58c9a' 2882BCB2DD015D77040C45898FF62FEE (shuriken) => Hubble:WhiteListed" 12/03/25 " 16:48:04.122" 62675890 2088 1384 INFO CleanControllerImpl mb::cleanctlrimpl::whitelist::HubbleWhiteLister::AreFilesWhiteListed "HubbleWhiteLister.cpp" 537 "Response body from Hubble request: {""results"":[{""reclassify"":true,""sha256"":""53029880cfd7d10a39c30ec2437a13060f878b00fadbb6801c9a28bc705c866a"",""md5"":""12cacc464a346f1144e7695141c0a4b7"",""send_file"":false,""trust_expires_at"":600,""classification"":""DO_NOT_DETECT"",""trust_always"":false,""reason"":""default""}]} " 12/03/25 " 16:48:04.122" 62675890 2088 1384 INFO CleanControllerImpl mb::cleanctlrimpl::whitelist::WhiteListManager::LogWhiteListStatus "WhiteListManager.cpp" 310 "White list status: File 'C:\PROGRAM FILES (X86)\FOOBAR2000\FOOBAR2000.EXE' 12CACC464A346F1144E7695141C0A4B7 (shuriken) => Hubble:WhiteListed" 12/03/25 " 16:48:17.881" 62689656 2088 1384 WARNING CleanControllerImpl mb::cleanctlrimpl::whitelist::RulesWhiteLister::IsObjectWhiteListedEx "RulesWhiteLister.cpp" 387 "Unexpected MBStatus 9 while attempting to white list 'C:\ProgramData\Malwarebytes\MBAMService\tmp\7c77ae5ed05f11f08131002454b58c9a'" 12/03/25 " 16:48:18.020" 62689796 2088 1384 INFO CleanControllerImpl mb::cleanctlrimpl::whitelist::HubbleWhiteLister::AreFilesWhiteListed "HubbleWhiteLister.cpp" 537 "Response body from Hubble request: {""results"":[{""reclassify"":true,""sha256"":""532a0bf7b391bb9b7e8890c2ba7aad64b58e42943ad39a49ec97cd76945cbecc"",""md5"":""5c2c5f962a8bbfd863074f0b61874c82"",""send_file"":false,""trust_expires_at"":600,""classification"":""DO_NOT_DETECT"",""trust_always"":false,""reason"":""default""}]} " 12/03/25 " 16:48:18.020" 62689796 2088 1384 INFO CleanControllerImpl mb::cleanctlrimpl::whitelist::WhiteListManager::LogWhiteListStatus "WhiteListManager.cpp" 310 "White list status: File 'C:\ProgramData\Malwarebytes\MBAMService\tmp\7c77ae5ed05f11f08131002454b58c9a' 5C2C5F962A8BBFD863074F0B61874C82 (shuriken) => Hubble:WhiteListed" 12/03/25 " 16:48:18.165" 62689937 2088 1384 WARNING CleanControllerImpl mb::cleanctlrimpl::whitelist::RulesWhiteLister::IsObjectWhiteListedEx "RulesWhiteLister.cpp" 387 "Unexpected MBStatus 9 while attempting to white list 'C:\ProgramData\Malwarebytes\MBAMService\tmp\7c9ee3a2d05f11f0bdab002454b58c9a'" 12/03/25 " 16:48:18.299" 62690078 2088 1384 INFO CleanControllerImpl mb::cleanctlrimpl::whitelist::HubbleWhiteLister::AreFilesWhiteListed "HubbleWhiteLister.cpp" 537 "Response body from Hubble request: {""results"":[{""reclassify"":true,""sha256"":""fd35861b46d617cd010555d813807f71fab202cf855a5d5de20b3c33cc0b617b"",""md5"":""ac84cc8f2c73a301e2d8856393b4c47c"",""send_file"":false,""trust_expires_at"":600,""classification"":""DO_NOT_DETECT"",""trust_always"":false,""reason"":""default""}]} " 12/03/25 " 16:48:18.299" 62690078 2088 1384 INFO CleanControllerImpl mb::cleanctlrimpl::whitelist::WhiteListManager::LogWhiteListStatus "WhiteListManager.cpp" 310 "White list status: File 'C:\ProgramData\Malwarebytes\MBAMService\tmp\7c9ee3a2d05f11f0bdab002454b58c9a' AC84CC8F2C73A301E2D8856393B4C47C (shuriken) => Hubble:WhiteListed" 12/03/25 " 16:48:18.772" 62690546 2088 1384 WARNING CleanControllerImpl mb::cleanctlrimpl::whitelist::RulesWhiteLister::IsObjectWhiteListedEx "RulesWhiteLister.cpp" 387 "Unexpected MBStatus 9 while attempting to white list 'C:\ProgramData\Malwarebytes\MBAMService\tmp\7cdf942ed05f11f0aea8002454b58c9a'" 12/03/25 " 16:48:18.925" 62690703 2088 1384 INFO CleanControllerImpl mb::cleanctlrimpl::whitelist::HubbleWhiteLister::AreFilesWhiteListed "HubbleWhiteLister.cpp" 537 "Response body from Hubble request: {""results"":[{""reclassify"":true,""sha256"":""1fd03cb0f6eb0d650ae4c3275c2aeab5323da460e6afdcf7d66f1693b03ae2f8"",""md5"":""da0adc98e3cc759dbbaacdefddc90c53"",""send_file"":false,""trust_expires_at"":600,""classification"":""DO_NOT_DETECT"",""trust_always"":false,""reason"":""default""}]} " 12/03/25 " 16:48:18.926" 62690703 2088 1384 INFO CleanControllerImpl mb::cleanctlrimpl::whitelist::WhiteListManager::LogWhiteListStatus "WhiteListManager.cpp" 310 "White list status: File 'C:\ProgramData\Malwarebytes\MBAMService\tmp\7cdf942ed05f11f0aea8002454b58c9a' DA0ADC98E3CC759DBBAACDEFDDC90C53 (shuriken) => Hubble:WhiteListed" 12/03/25 " 16:48:18.937" 62690703 2088 1384 WARNING CleanControllerImpl mb::cleanctlrimpl::whitelist::RulesWhiteLister::IsObjectWhiteListedEx "RulesWhiteLister.cpp" 387 "Unexpected MBStatus 9 while attempting to white list 'C:\ProgramData\Malwarebytes\MBAMService\tmp\7d1cc268d05f11f0893a002454b58c9a'" 12/03/25 " 16:48:19.128" 62690906 2088 1384 INFO CleanControllerImpl mb::cleanctlrimpl::whitelist::HubbleWhiteLister::AreFilesWhiteListed "HubbleWhiteLister.cpp" 537 "Response body from Hubble request: {""results"":[{""reclassify"":true,""sha256"":""513542cb8bdc4f6562d0278f52cc33241c66917a6741d89c85793d4478e61f55"",""md5"":""d584710aee2aa21ff6acf2888d6dd9de"",""send_file"":false,""trust_expires_at"":600,""classification"":""DO_NOT_DETECT"",""trust_always"":false,""reason"":""default""}]} " 12/03/25 " 16:48:19.128" 62690906 2088 1384 INFO CleanControllerImpl mb::cleanctlrimpl::whitelist::WhiteListManager::LogWhiteListStatus "WhiteListManager.cpp" 310 "White list status: File 'C:\ProgramData\Malwarebytes\MBAMService\tmp\7d1cc268d05f11f0893a002454b58c9a' D584710AEE2AA21FF6ACF2888D6DD9DE (shuriken) => Hubble:WhiteListed" 12/03/25 " 16:48:19.294" 62691062 2088 1384 WARNING CleanControllerImpl mb::cleanctlrimpl::whitelist::RulesWhiteLister::IsObjectWhiteListedEx "RulesWhiteLister.cpp" 387 "Unexpected MBStatus 9 while attempting to white list 'C:\ProgramData\Malwarebytes\MBAMService\tmp\7d4864ead05f11f081a0002454b58c9a'" 12/03/25 " 16:48:19.441" 62691218 2088 1384 INFO CleanControllerImpl mb::cleanctlrimpl::whitelist::HubbleWhiteLister::AreFilesWhiteListed "HubbleWhiteLister.cpp" 537 "Response body from Hubble request: {""results"":[{""reclassify"":false,""sha256"":""6b43ad9240040a261df2f86422cc3dbdb116089ad4ae829824dec3caeadb3951"",""md5"":""595ec1c0f0c5fc2f72d5d0568df606f6"",""send_file"":false,""trust_expires_at"":600,""classification"":""DO_NOT_DETECT"",""trust_always"":false,""reason"":""default""}]} " 12/03/25 " 16:48:19.441" 62691218 2088 1384 INFO CleanControllerImpl mb::cleanctlrimpl::whitelist::WhiteListManager::LogWhiteListStatus "WhiteListManager.cpp" 310 "White list status: File 'C:\ProgramData\Malwarebytes\MBAMService\tmp\7d4864ead05f11f081a0002454b58c9a' 595EC1C0F0C5FC2F72D5D0568DF606F6 (shuriken) => Hubble:WhiteListed" 12/03/25 " 16:48:19.703" 62691468 2088 1384 WARNING CleanControllerImpl mb::cleanctlrimpl::whitelist::RulesWhiteLister::IsObjectWhiteListedEx "RulesWhiteLister.cpp" 387 "Unexpected MBStatus 9 while attempting to white list 'C:\ProgramData\Malwarebytes\MBAMService\tmp\7d7f9ffad05f11f09dd7002454b58c9a'" 12/03/25 " 16:48:19.842" 62691609 2088 1384 INFO CleanControllerImpl mb::cleanctlrimpl::whitelist::HubbleWhiteLister::AreFilesWhiteListed "HubbleWhiteLister.cpp" 537 "Response body from Hubble request: {""results"":[{""reclassify"":false,""sha256"":""255c14eccfcbb8fc74b06644047d782b9de247e1ed6cfacfda0e77dd39167132"",""md5"":""e2d5e9ef75b6329dfa2037bc5ebd9a92"",""send_file"":false,""trust_expires_at"":600,""classification"":""DO_NOT_DETECT"",""trust_always"":false,""reason"":""default""}]} " 12/03/25 " 16:48:19.842" 62691609 2088 1384 INFO CleanControllerImpl mb::cleanctlrimpl::whitelist::WhiteListManager::LogWhiteListStatus "WhiteListManager.cpp" 310 "White list status: File 'C:\ProgramData\Malwarebytes\MBAMService\tmp\7d7f9ffad05f11f09dd7002454b58c9a' E2D5E9EF75B6329DFA2037BC5EBD9A92 (shuriken) => Hubble:WhiteListed" 12/03/25 " 16:48:20.389" 62692156 2088 1384 WARNING CleanControllerImpl mb::cleanctlrimpl::whitelist::RulesWhiteLister::IsObjectWhiteListedEx "RulesWhiteLister.cpp" 387 "Unexpected MBStatus 9 while attempting to white list 'C:\ProgramData\Malwarebytes\MBAMService\tmp\7dce32aad05f11f089e3002454b58c9a'" 12/03/25 " 16:48:20.527" 62692296 2088 1384 INFO CleanControllerImpl mb::cleanctlrimpl::whitelist::HubbleWhiteLister::AreFilesWhiteListed "HubbleWhiteLister.cpp" 537 "Response body from Hubble request: {""results"":[{""reclassify"":true,""sha256"":""812dd547b6001ed97b40787401af6d86dbdb6eed7635e84ce47fe35cfcabb3a8"",""md5"":""8cb8d609311b2b5c1c7f230fb6ce7f08"",""send_file"":false,""trust_expires_at"":600,""classification"":""DO_NOT_DETECT"",""trust_always"":false,""reason"":""default""}]} " 12/03/25 " 16:48:20.527" 62692296 2088 1384 INFO CleanControllerImpl mb::cleanctlrimpl::whitelist::WhiteListManager::LogWhiteListStatus "WhiteListManager.cpp" 310 "White list status: File 'C:\ProgramData\Malwarebytes\MBAMService\tmp\7dce32aad05f11f089e3002454b58c9a' 8CB8D609311B2B5C1C7F230FB6CE7F08 (shuriken) => Hubble:WhiteListed" 12/03/25 " 16:48:25.593" 62697359 2088 1384 INFO CleanControllerImpl mb::cleanctlrimpl::whitelist::HubbleWhiteLister::AreFilesWhiteListed "HubbleWhiteLister.cpp" 537 "Response body from Hubble request: {""results"":[{""reclassify"":true,""sha256"":""319d18550a9f484189120c8f4707486b0814042f48fbdb53e01fd6767343a294"",""md5"":""e78f6c54a53e198ea66711b476b616c4"",""send_file"":false,""trust_expires_at"":600,""classification"":""DO_NOT_DETECT"",""trust_always"":false,""reason"":""default""}]} " 12/03/25 " 16:48:25.593" 62697359 2088 1384 INFO CleanControllerImpl mb::cleanctlrimpl::whitelist::WhiteListManager::LogWhiteListStatus "WhiteListManager.cpp" 310 "White list status: File 'C:\PROGRAM FILES (X86)\FOOBAR2000\FOOBAR2000 SHELL ASSOCIATIONS UPDATER.EXE' E78F6C54A53E198EA66711B476B616C4 (shuriken) => Hubble:WhiteListed" 12/03/25 " 16:48:31.076" 62702843 2088 1384 INFO CleanControllerImpl mb::cleanctlrimpl::whitelist::HubbleWhiteLister::AreFilesWhiteListed "HubbleWhiteLister.cpp" 537 "Response body from Hubble request: {""results"":[{""reclassify"":true,""sha256"":""e028eefe61bbd025986bf34cfbfde7d16fed01c1e01d25f8c75b4c75cfeaa55d"",""md5"":""5320d9ef6e05caf0db00f854a9119978"",""send_file"":false,""trust_expires_at"":600,""classification"":""DO_NOT_DETECT"",""trust_always"":false,""reason"":""default""}]} " 12/03/25 " 16:48:31.076" 62702843 2088 1384 INFO CleanControllerImpl mb::cleanctlrimpl::whitelist::WhiteListManager::LogWhiteListStatus "WhiteListManager.cpp" 310 "White list status: File 'C:\PROGRAM FILES (X86)\DIGITAL-ELITEBOARD\PETKA\PROGRAM\ETSTART.EXE' 5320D9EF6E05CAF0DB00F854A9119978 (shuriken) => Hubble:WhiteListed" 12/03/25 " 16:48:31.082" 62702859 2088 1c78 INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl::ScanEnded "UpdateControllerImplHelper.cpp" 7112 "Scan thread id: 7288" 12/03/25 " 16:48:31.083" 62702859 2088 1c78 INFO CleanControllerImpl mb::cleanctlrimpl::linker::Linker::Shutdown "Linker.cpp" 155 "Shutting down linker, waiting for it to complete" 12/03/25 " 16:48:31.083" 62702859 2088 1c78 INFO CleanControllerImpl mb::cleanctlrimpl::linker::Linker::UnInit "Linker.cpp" 142 "Un-initializing linker" 12/03/25 " 16:48:31.083" 62702859 2088 1c78 INFO CleanControllerImpl mb::cleanctlrimpl::linker::Linker::Shutdown "Linker.cpp" 155 "Shutting down linker, waiting for it to complete" 12/03/25 " 16:48:31.084" 62702859 2088 1960 INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl::ScanEnded::::operator () "UpdateControllerImplHelper.cpp" 7118 "waiting for scan thread to end" 12/03/25 " 16:48:31.172" 62702937 2088 1c78 INFO ScanControllerImpl mb::scancontrollerimpl::Scanner::SendScanCompletedCCNotification "Scanner.cpp" 11818 "Sending scan completed notification to clean controller." 12/03/25 " 16:48:31.172" 62702937 2088 1c78 INFO ScanControllerImpl mb::scancontrollerimpl::Scanner::PerformScan "Scanner.cpp" 1506 "Scan completed." 12/03/25 " 16:48:31.174" 62702953 2088 1960 INFO UpdateControllerImpl mb::updatecontrollerimpl::CUpdateControllerImpl::ScanEnded::::operator () "UpdateControllerImplHelper.cpp" 7127 "Scan thread ended" 12/03/25 " 16:48:48.646" 62720421 2088 1e54 INFO ServiceControllerImpl ServiceControllerImplementation::PowerIdleNotificationImpl "ServiceControllerImplementation.cpp" 3843 "Notifying controllers of power idle change. System is not idle." 12/03/25 " 16:54:40.225" 63072004 1518 2c18 WARNING MBAMChameleon SearchForCert "fileverify.cpp" 2517 "Parser returns c000000d" 12/03/25 " 16:54:42.413" 63074192 1518 2c18 WARNING MBAMChameleon SearchForCert "fileverify.cpp" 2517 "Parser returns c000000d" 12/03/25 " 16:55:54.206" 63145984 2088 2ff8 INFO AEControllerImpl mb::aecontrollerimpl::AEControllerImplHelper::DoAppInjectedNotification "AEControllerImplHelper.cpp" 2879 "App Injected (Mozilla Firefox (and add-ons))" 12/03/25 " 16:56:20.702" 63172481 3190 191c WARNING MBAMChameleon SearchForCert "fileverify.cpp" 2517 "Parser returns c000000d" 12/03/25 " 16:56:44.232" 63196000 2088 1e34 INFO MachineID mb::common::system::MachineId::GetDiskSerialNumberInternal2 "MachineId.cpp" 2343 "Calling CreateFileW with path (\\?\C:)." 12/03/25 " 16:56:44.257" 63196031 2088 1e34 INFO MachineID mb::common::system::MachineId::GetDiskSerialNumberInternal2 "MachineId.cpp" 2343 "Calling CreateFileW with path (\\?\C:)." 12/03/25 " 16:56:56.813" 63208592 1518 2c18 WARNING MBAMChameleon SearchForCert "fileverify.cpp" 2517 "Parser returns c000000d" 12/03/25 " 17:00:52.193" 63443968 2088 098c INFO AEControllerImpl mb::aecontrollerimpl::AEControllerImplHelper::DoAppInjectedNotification "AEControllerImplHelper.cpp" 2879 "App Injected (Mozilla Firefox (and add-ons))" 12/03/25 " 17:00:54.412" 63446184 0594 24fc WARNING MBAMProtection IsFileMarkedForDeletion "filter.c" 238 "FltQueryInformationFile failed with status 0xc0000002"