Jump to content


  • Posts

  • Joined

  • Last visited

Everything posted by CCV

  1. My case was different. The Dashboard showed the same protections off as did right-click on tray icon, and System restart was no help.
  2. Curiously enough it was, last night my time, about the same time as a lot of other people report the same or similar problem. First, Web protection failed - with the orange pop up alert displaying. Quit Malwarebytes and restart doesn't turn web protection back on, neither does system reboot. In fact, after restarting Malwarebytes, not only is Web protection off but so is Exploit and/or Malware protection off. I haven't seen Ransomware protection turned off so far, but the other three have been all off together. I used mb-clean and then reinstalled Malwarebytes and, apart from a temporary problem with Updating, that seems to have fixed it. I didn't think to simply reinstall it over itself, so I can't say if that would word work. I'm attaching two mb-check results, one from when the issue first appeared and the second is after restarting Malwarebytes where Exploit protection (I think) is also off. I notice that protection modules turn off within about 10 seconds of restarting Malwarebytes - the red warning symbol on tray icon - maybe a minute (or seems like) before the orange pop up. If anyone is interested, I ran Procmon (according to instructions received from dcollins in PM) during two restarts of Malwarebytes. I don't know if there might be anything of value in them, but I can upload them as well if you want. mb-check-results1.zip mb-check-results2.zip FRST.txt Addition.txt
  3. Back to machine number two, where web protection has failed 3 days in a row at about the same time: There happened to be a Kaspersky Rootkit Scan running when I went to deal with it. They are scheduled to run daily (at the same time, I think) without any user control. I still have my doubts Kaspersky has anything to do with it - the problem didn't start until some days after installing MB 3. Nonetheless, @dcollins, I decided to apply the Exclusions you listed to see if it might make a difference. I did that before restarting MB tho, which really screwed things up! Very difficult to get MB started at all, and even then both Web Protection and Exploit Protection are displayed as Off. In one instance Exploit Protection came on after a few minutes, but according to MB-Check not only was WebProtection not running, neither was Farlt. Another time, Exploit Protection remained off. (I did remove the exclusions at some stage, to no avail.) In this case, MB-Check shows again, Farlt, not running either. Both times I can see Mwac Controller Config "protectionState" : "error", as well. I don't know what else, but, anyway, all looks good after a system Restart and reapplication of Exclusions.
  4. Machine number three: Mb-checkresult1 is from before restarting Malwarebytes, the other is from after. MB-CheckResult1.txt MB-CheckResult.txt FRST.txt Addition.txt MBAMSERVICE.zip
  5. To be as clear as possible, it wasn't HitmanPro but HitmanPro.Alert and ES Protection driver started as soon I installed it. The .Alert bit refers to some anti-exploit, anti-ransomware functionality which is non-existent in the basic HitmanPro scanner/malware remover. Tho the scanner component is, of necessity, bundled with HitmanPro.Alert. Btw., everything looks ok after a reboot regarding anti-rootkit driver. Also, web protection failed on a third machine now. No idea when, as I left it running overnight because Mandelbulber takes so many hours to complete some pieces. I was curious about that one, because I haven't used a web browser or anything else on it since installing MBAM 3. Assuming you might want to see them, I'll post some logs from it, as soon as I can get my act together...
  6. After exiting MBAM and attempting to restart it, in an effort to get web protection back on, I get the message attached. I did happen to enable rootkit scanning since the first mb-check I posted.... Not ready to reboot right now. Will see what happens when I do.
  7. Gone off again, on the second machine, sometime in the last hour or two. That's two days in a row. Again, using only Mandelbulber at the time - tho accidentally left HitmanPro scan results open too. Also, and, if I recall correctly, the same yesterday, some earlier web browsing on Chrome. According to MB-Check it is only MBAMWebProtection service that is not running this time. I'll see how it goes. If it remains persistent I can try the Kaspersky Exclusions to see if that helps. It should be easy enough to export/import Kaspersky Settings.
  8. Tried every restart I could think of, but ES Protection Driver still not running. This might be interesting tho: As soon as I installed HitmanPro.Alert on that machine, MBAM's ES Protection started working - according to MB-CheckResult. What do you make of that? I've been running HitmanPro.Alert on this machine for years since it was the first thing I found with Anti-Ransomware capability.
  9. According to both the Dashboard and the systray menu Exploit Protection is On. Same according to Settings Protection tab. How else can I tell?
  10. @dcollins On that basis, I am providing logs from another machine. Web Protection failed sometime late yesterday. I didn't do anything about it and it was still off after a full shutdown and start up. Same thing happened on this machine first time around, although, it seems, a system Restart does restart Web Protection. Screenshot is only the same as you've seen before. The orange thing keeps popping back up, until after main UI is opened. Even then, using "Turn on" on that does nothing. Wasn't doing anything on that machine except running a program called Mandelbulber. Had the same thing running on another laptop along with trial of the latest MBAM, but no issue there so far. The Qt component of that program used to crash with monotonous regularity. Curiously stable of late. Sorry, I didn't notice the request for mb-check earlier. It is included here, but was done after Web Protection was restarted by Exit MBAM, etc.. MB-CheckResult.txt FRST.txt Addition.txt MBAMSERVICE.LOG
  11. One observation I can make, after a couple of tests, is that it takes a fraction of a second or about a second for protection modules to fully load after exiting MBAM and restarting it. On this machine it's Web Protection failing to start immediately, whereas on the other it's Exploit Protection. Don't know if it's any help, just saying. I can't see anything in the MBAM Service Logs that seems relevant, to me. Lots of errors to do with anti-ransomware and self protection modules, among other things, in both cases - might explain why it takes so long for the program to get started in the first place. I can post them for comparison, if you want.
  12. That didn't last long. Late yesterday, Web Protection went off again. I had switched off the Scan component for the Program File exclusion, and set it to Passive, but I wouldn't think that would matter. Tbh, anyway, I didn't think Kaspersky was the problem. Seemingly random timing and infrequent occurrence (once a week, or so) makes it difficult for me to imagine any specific cause. Well.. The first and the most recent event happened to be on a Sunday which is when I have a Kaspersky Full System Scan scheduled, but it was hours later when Web Protection went off. And, the other two blips were on two different days of the week. I have no idea, except I think I had to reinstall Kaspersky in the interval. I was able to install a trial version of the latest MBAM on another machine, also running KIS, to see what might happen there... EDIT: It appears a Kaspersky Full System Scan (without Exclusions) has been run on that machine since installing MBAM. No issue to report yet.
  13. Well.. I pasted the path in, because I have difficulty typing. Result is all the same. My Exclusions looks like this now. The reordering of the list is a mystery to me, but everything's still there. Just a thought regarding the Program Files folder especially: I figure it might be worth having it included in Scans, just in case. Setting Status to Inactive apparently accomplishes that, or you can uncheck Scan under Protection components.
  14. I am on a 64-bit system. Some quick reading suggests that "Sysnative" is not an actual folder but an alias for or a pointer to System32 which allows 32-bit applications, such as KIS, to access the 64-bit contents of that folder where they otherwise can't. Probably explains why I couldn't browse for the files, and if I had used C:\Windows\System32\drivers\etc. it wouldn't have worked, in Kaspersky. If that's correct, then I should be able to edit in C:\Windows\Sysnative\drivers\ where applicable ok. Some better assurance it's targeting the right files, I guess.
  15. @dcollins Sorry mate, I already rebooted my machine to see if the problem was still there - as it was the first time I encountered it - and Web Protection is working now. Thanks for the most helpful list of exclusions tho. Seeing that Web Protection is working after a restart anyway (this time), I'll have to wait and see if the exclusions help - a fortnight or so, judging by the frequency I'm experiencing the issue. I'll try it and report back if the issue recurs. "Sysnative" doesn't exist on my system. Most of the files listed are in C:\Windows\System32\drivers. Kaspersky's "Browse" function doesn't see them there, so I had to add each one manually. Does this look right to you?
  16. @Firefox hi again. It's still happening, albeit infrequently and at seemingly random intervals. Five days ago I installed the BETA CU4, which temporarily solved the problem. Since it returned today, I'm taking the opportunity to post Logs I've seen requested elsewhere with regard to this issue. Also a screenshot of what I am seen as described in the OP. MBAMSERVICE.LOG FRST.txt Addition.txt
  17. @dcollins, fwiw, I'm running Kaspersky Internet Security without such an exclusion and haven't had much of a problem with Web Protection module. Two days ago it went off, in which case I installed Malwarebytes 3.0.6 CU4 -- BETA Preview. The release version hadn't made it to me at that stage. Previously, one week before, I Restarted the Malwarebytes Service (under Computer Management). Problem fixed, temporarily anyway. I don't know how, but my comments on the first instance are in a new post. Just saying.
  18. @Firefox Yeah, thank you. I notice the Change Log includes "Fixed numerous crashes, including service crashes". Now, I'm not sure exactly what that means but, since I Restarted the Malwarebytes Service the problem has stopped. That's essentially for 3 days now, iirc, so... Anyway, good to have an alternative if it does return.
  19. Thanks for the tip, and the link, Firefox. Just at present, I don't have an issue to correct tho. Might be worth trying for beta testing purposes, but I can't see it would prove much unless the problem returns. Cheers
  20. No screen shots, but I had the same as others have posted - the orange pop up warning (clicking 'start' on that only made it return immediately) and manually switching on Web Protection only set it to "Starting.." indefinitely. This started yesterday and the problem was still the same after start up this morning. What I did was Restart the Malwarebytes Service via Computer Management/Services and Applications/Services. Worked without a system reboot, and web protection is still on after reboot. Will report back in the event of future developments. Malwarebytes version, Component package version 1.0.75, running on Win 10 Pro x64 - Version 1607 (OS Build 14393.953)
  21. Well.. mbam-clean again and reinstall - no problems at all now. Except one very minor thing: Desktop shortcut wasn't fully removed, but appeared as in attached image. And, now I have two. Normally, I don't use desktop shortcuts for MBAM at all. So, can't comment on whether this is typical or not.
  22. Hi again. Thanks for the help. Just an update on MBAM crashing, as reported previously: It seems pretty stable now. I redid some of the settings mentioned, such as adding a scheduled scan and checking/unchecking self-protection module. Unchecking it produces some slowness or temporary failure to respond, but no crashes to report. I wonder if uninstalling/reinstalling would reproduce the problem... I'd be happy to test it out, tho not sure what that might prove.
  23. Thank you. No worries.
  24. Did not appear on a scan, but is blocked when avast! attempting update. Hopefully sufficient info: https://www.virustotal.com/en/file/6cffbda20caaebe365dcbb9d4d104744cad8eac9d17e7f58e4cb21357c92ccd4/analysis/1451693417/ MBAM_ProtectionLog.txt Instup.zip
  25. Yes, well.. Whatever needs attention, I didn't get any response yet. I'll need to update the logs by now anyway. Update on app crashing:It did it again, a few times Once when checking or unchecking self-protection module. Not sure which as another process interfered and made mbam sluggish to respond. Unchecking, I think... And again when adding or editing a scheduled scan - threat scan once weekly.Setting hyper scan every 3 days didn't seem to be a problem. Same faulting module each time - MSVCR100.dll.IDK. Something screwy. I'll let you know if I can manage to get it to crash again. It also crashed 'silently', a couple of times. I noticed the tray icon disappeared instantly on mouse over, and mbam wasn't running.Don't have any more detail on that, but it seems ok more lately.Scheduled scans running ok too, so far.
Back to top
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.