Details
-
Bug
-
Resolution: Fixed
-
Major
Description
Reproduction steps:
- Download Malwarebytes Anti-Malware here: http://dl3.comss.ru/download/mbam-setup-1.75.0.1300.exe.
- Install it, uncheck all three checkboxes at the end of the installation and click "Finish".
- Download Microsoft Visual Basic 6 Runtime from Rapps.
- Install it also, by the following way:
1) Launch VB6.0-KB290887-X86.exe directly from Rapps after downloading;
2) Click "Yes" and select the directory for extracting vbrun60sp6.exe;
3) Go to the directory with extracted vbrun60sp6.exe;
4) Extract vbrun60sp6.exe via any archiver (I did it via 7-Zip 18.05);
5) Go to the directory with extracted files from vbrun60sp6.exe;
6) Right click on vbrun60.inf and then "Install". - Reboot the system to save the registry settings.
- Launch Malwarebytes.
- Go to the 2nd "Security Module" tab in the main window.
- Click "Start trial period" button between description (at the top) and banner ad (at the bottom). It will try to start Malwarebytes Anti-Malware Pro trial period with real-time protection. After this, will appear an error that the entry point _PfDeleteLog@0 not found in iphlpapi.dll.
In mbam.log I see the following lines when this error appears:
(dll/ntdll/ldr/ldrutils.c:2350) Image mbam.exe has no exports, but were trying to get procedure _OPENSSL_isservice. BaseAddress asked 0x00400000, got entry BA 0x00400000 |
err:(dll/win32/msafd/misc/dllmain.c:1975) Async Connect UNIMPLEMENTED! |
err:(dll/win32/msafd/misc/dllmain.c:1975) Async Connect UNIMPLEMENTED! |
(dll/ntdll/ldr/ldrutils.c:1335) LDR: LdrpMapDll Relocating Image Name mbamnet.dll (10000000-1021F000 -> 00150000) |
(dll/ntdll/ldr/ldrutils.c:1374) Overlapping DLL: C:\Program Files\Malwarebytes' Anti-Malware\mbam.dll |
err:(dll/win32/advapi32/service/scm.c:2946) RStartServiceW() failed (Error 1056) |
(dll/ntdll/ldr/ldrpe.c:1036) Failed to snap IPHLPAPI.DLL!_PfDeleteLog@0 |
err:(win32ss/user/user32/windows/messagebox.c:1048) MessageBox: L"The procedure entry point _PfDeleteLog@0 could not be located in the dynamic link library IPHLPAPI.DLL.\r\n" |
Also the main program's service named "MBAMService" can't start correctly, which is visible on mbam-service.png screenshot. Although MBAMScheduler works correctly.
Tested with 0.4.12-dev-408-g431f9bf, in VirtualBox 5.1.38, also with 7-Zip 18.05, AC'97 VBox driver, Mesa3D, Samba for ReactOS 1.3 and GA installed.
Attachments
Issue Links
- relates to
-
CORE-8462 Failed to snap _PfAddFiltersToInterface@24
- Resolved