File Restore Not Working

[scrut1ny]

File Restore Not Working

[firebirdjsb]

Have you tried replacing the new config folder with previous config folder in C:\ProgramData\Malwarebytes\MBAMService\

Did that restore your previous settings?

yes no new changes allowed list and everything still gets reset nothing rests transferred

[firebirdjsb]

Export Malwarebytes Settings - Malwarebytes Forum

ill try again by backing up the file folder and then resetting premium then restoring the folder to see if it works
its also from 2018 and ive noticed the hash and and file information change everytime we spoof ill do more testing while you search

EDIT: ive tested the folder all files and the folder outside they all get regenerated and manually copying files over does not work change from read only does nothing aswell ive even tried the whole MBAMServices folder replacement it does not allow for it to export or import

[firebirdjsb]

So, we just don't create new GUID but changes that date... will that work? If that works than settings will not be disturbed

try and make those edits and get back to me what it does . atleast from my end and the testing ive already done its all access denied ive even tried some tricks to leverage permissions maybe you guys will have more luck?

[AmmarSAA]

Currently, there is no supported way to backup files when manually uninstalling Malwarebytes. Thus, this issue cannot be further processed unless any update from Malwarebytes resolves it.

[AmmarSAA]

Have you tried replacing the new config folder with previous config folder in C:\ProgramData\Malwarebytes\MBAMService\

Did that restore your previous settings?

[AmmarSAA]

1. Export Malwarebytes Settings - Malwarebytes Forum
2. Export Malwarebytes Settings - Malwarebytes Forum
3. Export Malwarebytes Settings - Malwarebytes Forum
4. Export Malwarebytes Settings - Malwarebytes Forum

Conclusion: No export/import option available till now, officially.

[AmmarSAA]

Just a random thought:
Have you tried copy pasting the exclusion lists/array from previous file to new one?

[firebirdjsb]

Just a random thought: Have you tried copy pasting the exclusion lists/array from previous file to new one?

ive tried replacing data from the old file to the new one and even keep the hash the same asoon as it notices theres a change it regenerates new file

[firebirdjsb]

" Just create a backup copy of the Malwarebytes folder under C:\ProgramData and once you've reinstalled/corrected the issue with the context menu entry, exit Malwarebytes completely via the tray menu and then restore your backup copy of the folder and the files within and then launch Malwarebytes again and it should then recover all of your custom exclusions and scheduler settings. Just bear in mind that this will NOT work for deploying settings across separate installations/devices as the settings for each installation are keyed to that particular device via unique machine identifiers so you can't copy the settings from one installation of Malwarebytes on one system to another system; they can only be used on that same device."

because of the exploits nature i do not think we will be able to save export lists as it leverages the same system

EDIT: ill change the batch to no longer include the file copy and backup as it wont be needed

[AmmarSAA]

What about changing install date from registry: Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Malwarebytes and Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1 and then restarting PC...

[firebirdjsb]

What about changing install date from registry: Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Malwarebytes and then restarting PC...

it wont matter or atleast it should not matter regardless of what changes once the GUID is changed because of the exploit.

mbam thinks its a new machine because the GUID is changed which then it will generate a new hash and new key for its files <--- this is pritty much why it gives you a new trial.

if there are changes or any attempts to backup or delete once the service is started again it re-replaces all the changed files with a new key and clears everything i seen it happen live

[AmmarSAA]

So, we just don't create new GUID but changes that date... will that work? If that works than settings will not be disturbed