Pat_inUK Posted December 12, 2016 ID:1079593 Share Posted December 12, 2016 Mystery... One Windows 10 Pro computer running Malwarebytes Anti-malware 2.2.1.1043 Free One Windows 7 Pro computer running Malwarebytes Anti-malware 2.2.1.1043 Premium Both the above running Malwarebytes AntiExploit Free Both upgraded to Malwarebytes 3.0.4.1269. Took a bit of fiddling around and a few reboots to get the Exploit protection working properly, but ultimately successful. Two Windows 7 Pro computers running Malwarebytes Anti-malware 2.2.1.1043 Premium and Anti-exploit Free. The installation was successful but no matter what I do I can't stop the icon saying 'Protection disabled', although the actual program settings show all protections active. In all cases the troublesome module is Exploit protection. On the two computers where the installation was untimately successful, mbae-test.exe produces the desired results. On the two computers where the icon says 'Protection disabled' but the program settings show Exploit protection to be active, mbae-test.exe happily launches Calculator. I have to assume that the icon message is right and the program settings showing that Exploit protection is active, is wrong. What to do? Link to post Share on other sites More sharing options...
Staff Ried Posted December 12, 2016 Staff ID:1079652 Share Posted December 12, 2016 Hello Pat_inUK, I suspect that the service for MBAE is still pointing to the old location of the file. This next scanner will not make any changes to your machine on its own, nor will it divulge any personal information that may compromise your security. Please download Farbar Recovery Scan Tool from here http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/ and save it to your desktop. Note: You need to run the version compatible with your system. **After you click the Download Now 64-bit, or the Download Now 32-bit, another page will open — DO NOT CLICK ANY ADDITIONAL 'download now' buttons, just wait and look toward the bottom of your browser for the option to Run or Save. Click Save. •Double-click to run it. When the tool opens click Yes to the disclaimer. Note: If you are prompted by Windows SmartScreen, click More info followed by Run anyway. •Click the Scan button. •When the scan has finished, it will save 2 logs in the same directory the tool was run from. Please attach the following logs: Addition.txt FRST.txt Link to post Share on other sites More sharing options...
Pat_inUK Posted December 12, 2016 Author ID:1079690 Share Posted December 12, 2016 Oh my, I'm not at all sure about attachments but I'll do my best, and thank you so much for responding. FRST.txt Addition.txt Link to post Share on other sites More sharing options...
Staff Ried Posted December 12, 2016 Staff ID:1079707 Share Posted December 12, 2016 That was perfect, thank you. It is possible for the protection to be active, even when the test fails. I am seeing an issue with the testing portion and I have to wonder if Avast interfered with the installations. Uninstall 3.0.4 on both machines that are having this problem. Reboot, then turn off Avast while you reinstall. Let me know how that worked out for you. Link to post Share on other sites More sharing options...
Pat_inUK Posted December 12, 2016 Author ID:1079716 Share Posted December 12, 2016 Thank you again, As it happens, I did turn off Avast during installations but I'll have another go at the Malwarebytes uninstall/reinstall. Tomorrow, I'm afraid, as it's close on midnight here. Watch this space! Link to post Share on other sites More sharing options...
Staff Ried Posted December 13, 2016 Staff ID:1079740 Share Posted December 13, 2016 It's late where I am as well, so tomorrow will be fine. Link to post Share on other sites More sharing options...
Pat_inUK Posted December 13, 2016 Author ID:1079868 Share Posted December 13, 2016 Batteries recharged after a night's sleep, on one computer I uninstalled Malwarebytes, rebooted, reinstalled. Still a problem with Exploit protection but a couple of reboots later all was well, and has survived through several subsequent reboots. The other computer, my main workhorse absolutely essential one, I couldn't turn Malwarebytes off, I couldn't uninstall it. I came to the conclusion it was because Exploit protection was stuck on Starting.... but getting nowhere. Forced a reboot. Successfully uninstalled Malwarebytes, or so I thought, albeit with a flash of an error message. Rebooted. Aarrgh! C:\Program Files\Malwarebytes\Anti-Malware and all contents still present. Manually deleted the folder. Rebooted. At last! Reinstall was flawless and also survives through several reboots. Goodness knows what caused all of this, Avast was 'Disabled permanently' throughout. But thank you so much for your advice, it worked even if with a few hiccups. Best of all, mbae-test.exe now works as it should on both computers. This makes me very happy Link to post Share on other sites More sharing options...
Staff Ried Posted December 13, 2016 Staff ID:1079881 Share Posted December 13, 2016 I'm glad it's finally working and thank you for your patience and efforts to get it working. What version of Windows is your main machine? Link to post Share on other sites More sharing options...
Pat_inUK Posted December 13, 2016 Author ID:1080013 Share Posted December 13, 2016 Windows 7 Pro 64bit SP1. Partly because I just like Windows 7, partly because I have a lot of venerable software in regular use that wouldn't run on a higher version. Maybe it was something in that software that caused a problem. Link to post Share on other sites More sharing options...
Staff Ried Posted December 13, 2016 Staff ID:1080041 Share Posted December 13, 2016 Thanks. Do let me know if you run into any more problems. Link to post Share on other sites More sharing options...
Pat_inUK Posted December 14, 2016 Author ID:1080434 Share Posted December 14, 2016 I didn't think I would need to ask anything more, but I decided that with Malwarebytes 3, I probably didn't need Avast's browser extension so went to uninstall it. Imagine my surprise when the attached screenshot popped up! What's it all about?! Link to post Share on other sites More sharing options...
Staff Ried Posted December 15, 2016 Staff ID:1080639 Share Posted December 15, 2016 Wow, all these AV's seem to be taking this approach with us in recent weeks. Thanks for the info, I'll report this. Link to post Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now