Malicious Website Protection disabled

[Seba2750x]

I have done the following outlined in this thread:

 

https://forums.malwarebytes.org/index.php?/topic/158722-malicious-website-protection-disabled/

 

• First start by restarting your computer then go to the next step
• On the Dashboard click "Update now" to get the latest database version
• Right click the Malwarebytes tray icon and click "Exit"
• Restart the Malwarebytes application from the programs menu or desktop shortcut.
• In most cases this resolves the issue, however if the issue still persists, reboot the computer again and the issue should be resolved.
• If the above procedures still do not correct the issue for you then please download the MBAM installer and reinstall the program which will fix the issue for you.

I have even used the mbam-clean program to uninstall and reinstall again.

I have tried to click the ENABLE radio button in the 2nd screenshot but it keeps resetting back to DISABLED.

 

Please see attached files for diagnostics from FRST and mbam-check.

 

Please help me Oh Malwarebytes Anti-Malware, you are my only hope.

 

 

Addition.txt

FRST.txt

CheckResults.txt

[daledoc1]

Hi:
 
Your logs show that the computer is infected.

We are not permitted to work on possible malware-related issues here in this section of the forum.

So, for expert assistance, I suggest that you please follow the advice in this pinned topic: Available Assistance For Possibly Infected Computers.
It explains the options for free, expert help >>AND<< the suggested, preliminary steps to expedite the process.
A malware analyst will assist you with looking into your issue.

 

>>As you have already run FRST, you just need to start a new, separate topic in the malware removal section.  Please attach the same logs to that new post and then wait for an expert helper to assist you. S/he will help with cleanup and with getting MBAM up and running.

Thanks,

[Seba2750x]

Woof! Thanks.

 

May I ask, where did you see the infection? (For my own reference and knowledge).

[daledoc1]

Hi:

 

I see that you have started a new topic in the malware removal section here: https://forums.malwarebytes.org/index.php?/topic/164598-help-with-malware/

 

Please wait for an expert helper to assist you there.

The helper will walk you through the scanning and cleanup process, and can explain the scan findings.

(There were a number of suspicious detections on the logs, including a disabled Windows service that is often changed by malware and that is necessary for MBAM's website protection module to work correctly.)

 

Thank you again,

[Seba2750x]

....

(There were a number of suspicious detections on the logs, including a disabled Windows service that is often changed by malware and that is necessary for MBAM's website protection module to work correctly.)

....

 

Ah, that would explain it.

Thank you kindly.

[Seba2750x]

A happy ending!

Running mbar did the trick!

As you said, it is a malware that was suspected of blocking the function and it works now after removal!!!

 

Please see screenshots for before and after.

You can close this post now as the issue is resolved!

Thank you!

[daledoc1]

Hi:

 

Thanks for the follow-up.

 

For the record, absence of symptoms does not necessarily mean you are completely clean, especially with rootkits.

If it were my computer, I would continue to work with MrC until he gives you the "all clear".

 

But it's up to you.

 

Thanks again,

[Seba2750x]

Good point. Will do so!

 

Thanks