Web Protection not working

[strukt]

On 1/30/2017 at 4:27 PM, dcollins said:

Hi everyone! If possible, can you please grab some information for us so we can look at what's going on?

1. Open up Malwarebytes 3
2. Go to Settings -> Application
3. Turn on Event Log Data
4. Restart the computer
5. Open up Malwarebytes
6. Verify that Web Protection is not turned on
7. Attempt to turn on Web Protection
8. Wait 2-3 minutes
9. Zip up the folder C:\ProgramData\Malwarebytes\MBAMService\logs by right clicking the folder and choosing Send To -> Compressed (Zipped) folder
   Note that the ProgramData folder may be hidden. You may need to turn on Showing Hidden Files, or type the path manually

I experienced OP's exact issue across 4 workstations of mine between 3.0.4-5. I upgraded all to 3.0.6 and the issue lessened but can still reproduced. I run Kaspersky AV on all and set Malwarebytes executables I see running as Trusted Applications: https://db.tt/Nb8zJUivU5. Kaspersky is the only other security software running. All are Windows 10, latest feature patch.

@DCollins I followed your steps on two of them:

• On PC #1 post-reboot I received a popup dialog stating that the anti-rootkit driver could not be installed (did not take a screenshot), and the dialog was Yes/No asking if I wanted to reboot to retry. I had never seen this popup dialog before and selected Yes to reboot a second time. Post-reboot #2 when I completed your step #7, the slider successfully switched to On instead of getting stuck in Starting... as usually happens.
• On PC #2 post-reboot I did not receive the same popup dialog as on PC #1. When I completed your step #7, the slider successfully switched to On instead of getting stuck in Starting... as usually happens.

 

Thus a proper log capture of the issue is rather elusive, at least for me. I'll keep trying and hopefully post later with a full set for your review. I figure the successful logs are of no help, but do clarify if you want those too and/or if I should perhaps just leave Event Log Data = enabled for the next few days/weeks.

[Firefox]

9 minutes ago, strukt said:

I run Kaspersky AV on all and set Malwarebytes executables I see running as Trusted Applications

That is only part of the files that need to be excluded or trusted... below is a list that needs to be exclude, perhaps that may help.

I would like you to add these files to your Anti-Virus exclusions list

 C:\Program Files\Malwarebytes\Anti-Malware\assistant.exe
 C:\Program Files\Malwarebytes\Anti-Malware\mbam.exe
 C:\Program Files\Malwarebytes\Anti-Malware\MbamPt.exe
 C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
 C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
 C:\Program Files\Malwarebytes\Anti-Malware\MBAMWsc.exe

[strukt]

3 minutes ago, Firefox said:

That is only part of the files that need to be excluded or trusted... below is a list that needs to be exclude, perhaps that may help.

I would like you to add these files to your Anti-Virus exclusions list

 C:\Program Files\Malwarebytes\Anti-Malware\assistant.exe
 C:\Program Files\Malwarebytes\Anti-Malware\mbam.exe
 C:\Program Files\Malwarebytes\Anti-Malware\MbamPt.exe
 C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
 C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
 C:\Program Files\Malwarebytes\Anti-Malware\MBAMWsc.exe

Will do. Also related is Kaspersky allows me to specify which activity to essentially whitelist. These will be my settings going forward for all six of the Malwarebytes executables: