Finding Malwarebyte's "Web Blocking" To be unchecked?

[dwdraw2]

Not to often, but sometimes, when I manually start up Malwarebyte's window, and click on protection status, I notice that "Enable Malicious Website Blocking" will be unchecked? This doesn't happen often, and only after coming off the Web.

I run Avast for my full-time "Internet Security Protection." I also use Hitman Pro, paid version, as my second opinion, but I run that only on manual after being on the Web for extended times, for an brief check.

I don't think Hitman Pro would do any unchecking on Malwarebyte's because it not on auto, but do you think Avast might be doing the unchecking on Malwarebyte's since it runs full-time?

I have run various utility checks: tdsskiller, junk removal tool, Norton Power Eraser, rkill; besides the three mentioned above, and found nothing? Now this unchecking happens far-apart, so far about 5 times.

Anybody have any ideas or the same experience? Today when I discovered it unchecked, it quickly re-checked itself before I could do it?

Thanks for your time.

dwdraw2

[Firefox]

Hello and welcome back....

 

It is quite possible that when you notice that it was unchecked it may have been doing an update.  If I am not mistaken, the web blocker gets disabled when and update is downloaded and installed.

 

Have you notice it happening right after an update?

[dwdraw2]

Thanks for the reply.

 

I don't recall seeing any update screen apearing along side Malwarebyte's window, however; it's possible that the update screen cleared off before Malwarebyte's window fully implemented to it's full window format. I'll try watching that closer to see if that is the case. Being that this does not frequently happen it's possible that it could be updating at those selected times that I opened it.

 

I appreciate your advice and help in this matter.

 

Thanks for your time,

 

dwdraw2

[Firefox]

Your welcome... should it continue to happen let us know and perhaps we can check some logs...

If you like you can attach the last three protection logs from your computer so we can see if it is updating....

Log File Locations

File Protection and IP Protection Logs

* Windows 2000 & Windows XP:

C:\Documents and Settings\All Users\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Logs

* Windows Vista & Win7/8:

C:\ProgramData\Malwarebytes\Malwarebytes' Anti-Malware\Logs

[dwdraw2]

Thanks for the reply.;

 

Unfortunatly, I cleared the log files yesterday-without thinking. But I do have a small sample from today. I will start checking the files more reguarly for any incidents.

 

As soon as I have another incident, I'll send you the logs, but for now, I can send you the small sample that is there now.

 

Here they are:

 

2014/02/27 10:32:07 -0500    BUBBA-PC    (null)    MESSAGE    Executing scheduled update:  Daily
2014/02/27 10:32:11 -0500    BUBBA-PC    (null)    MESSAGE    Starting protection
2014/02/27 10:32:11 -0500    BUBBA-PC    (null)    MESSAGE    Protection started successfully
2014/02/27 10:32:11 -0500    BUBBA-PC    (null)    MESSAGE    Starting IP protection
2014/02/27 10:32:14 -0500    BUBBA-PC    (null)    MESSAGE    IP Protection started successfully
2014/02/27 10:32:21 -0500    BUBBA-PC    Bubba    MESSAGE    Starting database refresh
2014/02/27 10:32:21 -0500    BUBBA-PC    Bubba    MESSAGE    Scheduled update executed successfully:  database updated from version v2014.02.26.10 to version v2014.02.27.05
2014/02/27 10:32:21 -0500    BUBBA-PC    Bubba    MESSAGE    Stopping IP protection
2014/02/27 10:32:22 -0500    BUBBA-PC    Bubba    MESSAGE    IP Protection stopped successfully
2014/02/27 10:32:24 -0500    BUBBA-PC    Bubba    MESSAGE    Database refreshed successfully
2014/02/27 10:32:24 -0500    BUBBA-PC    Bubba    MESSAGE    Starting IP protection
2014/02/27 10:32:27 -0500    BUBBA-PC    Bubba    MESSAGE    IP Protection started successfully
2014/02/27 16:39:18 -0500    BUBBA-PC    (null)    MESSAGE    Starting protection
2014/02/27 16:39:18 -0500    BUBBA-PC    (null)    MESSAGE    Protection started successfully
2014/02/27 16:39:18 -0500    BUBBA-PC    (null)    MESSAGE    Starting IP protection
2014/02/27 16:39:21 -0500    BUBBA-PC    (null)    MESSAGE    IP Protection started successfully

 

Thanks for your time.

 

dwdraw2
 

[AdvancedSetup]

The best thing to do is either have the system scanned for a possible infection or open a ticket with Customer Support

 

 

I would suggest following the advice from the topic here Available Assistance for Possibly Infected Computers and having one of the Experts assist you with looking into your issue.


Thanks

[dwdraw2]

Thanks for your reply, I do appreciate it.

 

I was just going back-over the logs: don't they seem to be shutting dowm to refresh the update? I'm thinking that just might be what's happening as far as the  unchecking of the "IP." I'll keep a vigilant eye on this and watch the logs at the time I catch it.

 

Thanks for your time and advice.

 

dwdraw2

[AdvancedSetup]

Yes, it does shut down the module for a brief moment while it reloads but is typically pretty quick and you don't see it happen in the GUI