Details
- 
    
Bug
 - 
    Resolution: Fixed
 - 
    
Major
 
Description
Reproduction steps:
- Download Malwarebytes Anti-Malware here: http://dl3.comss.ru/download/mbam-setup-1.75.0.1300.exe.
 - Install it, uncheck all three checkboxes at the end of the installation and click "Finish".
 - Download Microsoft Visual Basic 6 Runtime from Rapps.
 - Install it also, by the following way:
1) Launch VB6.0-KB290887-X86.exe directly from Rapps after downloading;
2) Click "Yes" and select the directory for extracting vbrun60sp6.exe;
3) Go to the directory with extracted vbrun60sp6.exe;
4) Extract vbrun60sp6.exe via any archiver (I did it via 7-Zip 18.05);
5) Go to the directory with extracted files from vbrun60sp6.exe;
6) Right click on vbrun60.inf and then "Install". - Reboot the system to save the registry settings.
 - Launch Malwarebytes.
 - Go to the 2nd "Security Module" tab in the main window.
 - Click "Start trial period" button between description (at the top) and banner ad (at the bottom). It will try to start Malwarebytes Anti-Malware Pro trial period with real-time protection. After this, will appear an error that the entry point _PfDeleteLog@0 not found in iphlpapi.dll.
 
In mbam.log
 I see the following lines when this error appears:
					(dll/ntdll/ldr/ldrutils.c:2350) Image mbam.exe has no exports, but were trying to get procedure _OPENSSL_isservice. BaseAddress asked 0x00400000, got entry BA 0x00400000  | 
		
					err:(dll/win32/msafd/misc/dllmain.c:1975) Async Connect UNIMPLEMENTED!  | 
		
					err:(dll/win32/msafd/misc/dllmain.c:1975) Async Connect UNIMPLEMENTED!  | 
		
					(dll/ntdll/ldr/ldrutils.c:1335) LDR: LdrpMapDll Relocating Image Name mbamnet.dll (10000000-1021F000 -> 00150000)  | 
		
					(dll/ntdll/ldr/ldrutils.c:1374) Overlapping DLL: C:\Program Files\Malwarebytes' Anti-Malware\mbam.dll  | 
		
					err:(dll/win32/advapi32/service/scm.c:2946) RStartServiceW() failed (Error 1056)  | 
		
					(dll/ntdll/ldr/ldrpe.c:1036) Failed to snap IPHLPAPI.DLL!_PfDeleteLog@0  | 
		
					err:(win32ss/user/user32/windows/messagebox.c:1048) MessageBox: L"The procedure entry point _PfDeleteLog@0 could not be located in the dynamic link library IPHLPAPI.DLL.\r\n"  | 
		
Also the main program's service named "MBAMService" can't start correctly, which is visible on mbam-service.png screenshot. Although MBAMScheduler works correctly.
Tested with 0.4.12-dev-408-g431f9bf, in VirtualBox 5.1.38, also with 7-Zip 18.05, AC'97 VBox driver, Mesa3D, Samba for ReactOS 1.3 and GA installed.
Attachments
Issue Links
- relates to
 - 
                    
CORE-8462 Failed to snap _PfAddFiltersToInterface@24
-         
 - Resolved
 
 -