MB 3.0 Web Protection Issue: Is the Issue Specific to one OS?

[capair45]

I am running MB 3.06 Premium on two computers.  One is a desktop with Windows 10x64 bit.  The other is a laptop with Windows 8.1x64 bit.  Only my laptop is having the issue with "Web Protection Off / Starting...".

I have attempted the suggestions noted in the Sticky "Web Protection Off" on the laptop without success.

Is this issue specific to Windows 8.1 and is there anything else I can try rather than reverting to an earlier version?

 

[Aura]

Hi capair45

This is a known issue with Malwarebytes 3.0, and you can try some of the suggestions listed in the thread below. Also, it doesn't seems to be "OS specific" as users with multiple versions of Windows reported the issue.

https://forums.malwarebytes.com/topic/195576-real-time-protection-layer-turning-off-try-this/

 

[Firefox]

If you have already tried the steps mentioned by @Aura above then follow the steps in the topic below and post the requested logs so they can be reviewed.

 

[capair45]

Addition.txt

FRST.txt

MBAMSERVICE.zip

mb-checkResult.txt

[capair45]

Anything show up in the logs?

[Firefox]

Thanks for the logs, however they will have to be reviewed by someone on staff like @dcollins, @AdvancedSetup or @bdubrow

Once they review them, they may be able to provide some insight to your issue

Thanks for being patient

Edit: I did notice you are running Kaspersky on your system, have you tried excluding MB3 to see if that helps

I would like you to add these files to your Anti-Virus exclusions list

 C:\Program Files\Malwarebytes\Anti-Malware\assistant.exe
 C:\Program Files\Malwarebytes\Anti-Malware\mbam.exe
 C:\Program Files\Malwarebytes\Anti-Malware\MbamPt.exe
 C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
 C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
 C:\Program Files\Malwarebytes\Anti-Malware\MBAMWsc.exe

Edited February 9, 2017 by Firefox

[dcollins]

Thanks for the logs. After you turned off self-protection, did you try turning web protection back on? It normally will not try to restart on it's own if it failed.

[AdvancedSetup]

The mb-check.txt log file is corrupted and not in normal text format. Can you please run that one again and post back the new one. Go ahead and delete the current log for it.

Thanks

 

 

[capair45]

Firefox:  I have C\Program Files\Malwarebytes folder (including all files within the folder) excluded in Kaspersky

dcollins:  Not sure if I tried turning web protection back on or not.  Just now, in trying to run that fix, it seems I am unable to select either self-protection option Off.  Other options on that page are selectable off/on.

 

AdvancedSetup:  See attached file.

MB-CheckResult.txt

[AdvancedSetup]

Thank you. Interesting... Notepad will open it up but there is an unexpected character in the log. UltraEdit sees and knows the difference but notepad does not.

Here is what it looks like from UltraEdit

 

 

 

 

[capair45]

Thanks for looking at it.  I have no clue as to what is or should be displayed.  Can't explain it.  To be honest, I'm not too worried about the Web Protection issue.  I'm sure it will get sorted out at some point.  Hoping that it may have been something particular to my 8.1 machine as my 10 machine is fine.

 

If something else comes to mind, I'll be checking in from time to time.

[AdvancedSetup]

Hi @capair45

The Event Logs are showing some issues with the computer that need to be corrected if you want the computer to work well. Explorer is crashing which can cause issues with other applications without a reboot of the computer.

There are some other errors as show below that need to be looked at please. If you need help with this please let me know.

 

 

Application errors:
==================
Error: (02/08/2017 10:32:51 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: Explorer.EXE, version: 6.3.9600.18460, time stamp: 0x57c1b8c1
Faulting module name: ntdll.dll, version: 6.3.9600.18438, time stamp: 0x57ae642e
Exception code: 0xc0000374
Fault offset: 0x00000000000f1b70
Faulting process id: 0x25f0
Faulting application start time: 0x01d2822072c327f9
Faulting application path: C:\Windows\Explorer.EXE
Faulting module path: C:\Windows\SYSTEM32\ntdll.dll
Report Id: d9f53b0b-ee13-11e6-827b-a088696a5896
Faulting package full name:
Faulting package-relative application ID:

Error: (01/26/2017 06:42:00 PM) (Source: MsiInstaller) (EventID: 10005) (User: NT AUTHORITY)
Description: Product: Dell Update - SupportAssist Update Plugin -- This program only supports Windows 10 Operating System.

Error: (01/19/2017 04:40:17 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: CAMService.exe, version: 1.0.0.1, time stamp: 0x54077d08
Faulting module name: ntdll.dll, version: 6.3.9600.18438, time stamp: 0x57ae642e
Exception code: 0xc0000005
Fault offset: 0x000000000003dd8e
Faulting process id: 0x6bc
Faulting application start time: 0x01d2729c9346b68a
Faulting application path: C:\Program Files\Intel\CAM\bin\CAMService.exe
Faulting module path: C:\Windows\SYSTEM32\ntdll.dll
Report Id: ddbcbcba-de8f-11e6-8279-a088696a5896
Faulting package full name:
Faulting package-relative application ID:

Error: (01/19/2017 10:47:28 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: The program LiveComm.exe version 17.5.9600.20911 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.

Process ID: 13f8

Start Time: 01d2726a9dcffa34

Termination Time: 4294967295

Application Path: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20911_x64__8wekyb3d8bbwe\LiveComm.exe

Report Id: 91b54bb6-de5e-11e6-8278-a088696a5896

Faulting package full name: microsoft.windowscommunicationsapps_17.5.9600.20911_x64__8wekyb3d8bbwe

Faulting package-relative application ID: ppleae38af2e007f4358a809ac99a64a67c1

System errors:
=============
Error: (01/21/2017 06:40:09 AM) (Source: Service Control Manager) (EventID: 7022) (User: )
Description: The Dell SupportAssist Agent service hung on starting.

Error: (01/21/2017 06:33:27 AM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: The Superfetch service terminated with the following error:
The service has not been started.

Error: (01/21/2017 06:26:18 AM) (Source: Service Control Manager) (EventID: 7011) (User: )
Description: A timeout (30000 milliseconds) was reached while waiting for a transaction response from the DellDataVault service.

Error: (01/21/2017 06:23:41 AM) (Source: DCOM) (EventID: 10010) (User: LAPTOP)
Description: The server {4545DEA0-2DFC-4906-A728-6D986BA399A9} did not register with DCOM within the required timeout.

 

 

[capair45]

Sure!  I'd appreciate any help you can provide.  I haven't used Internet Explorer that I recall.  The laptop is new in December 2016 and is used rarely.

 

Thank you for the offer!

[AdvancedSetup]

Yes, nothing too drastic. Please send me a reminder on Sunday or Monday and I'll look up some fixes.

 

[capair45]

Will do!

[capair45]

I have installed the 3.0.6.1469 CU3 update on my 8.1 machine and it seems to have resolved all the issues I was having.  MB seems to be functioning normally again. 

[AdvancedSetup]

Great, that's good new @capair45

I'll leave this open for a while, let me know if things continue work well or not in a few days

 

[capair45]

Unfortunately, after 4-days of normal operations, the Web Protection issue has returned.

[AdvancedSetup]

Okay, let me send you a private message with some information.

 

[AdvancedSetup]

This issue is now resolved so I'll go ahead and close this topic now.