Doomcaster

Malware Protection: Off

11 posts in this topic

ID: 1   Posted (edited)

Hi, all. I'm new to the forums (having created my account a week or so ago after experiencing my first issue with MWB). MWB notified me that I wasn't protected and showed the Malware Protection to be off. Turning it on caused it to display "Starting..." but would never turn on. I found someone else on a different forum who had the same issue and was using a program called  'OneDrive' (as I was also) and said he had paused syncing as he didn't need the program running (which I had also done). By re-enabling the sync on OneDrive the issue with MWB went away. I did this also, and it also corrected my problem.

Now it's been about 5 or 6 days since then and today I see the same notification telling me I'm not protected, and, yep, Malware Protection is set to Off again... OneDrive has stayed synced this whole time and toggling the sync off and on does nothing to correct the issue. I've tried reboots and shut downs but still the issue persists.

Reaching out here to get some expert advice on my particular situation. I see many threads that are similar but they all state the issue is with Web, Exploit, or Ransomware protections and not the issue I'm having which is Malware Protection... so sorry if this has already been resolved in another thread.

Just let me know what info you guys need from me and I will provide ASAP. 

 

Thanks!!

 

Edit: Added a screen of my current MWB version - also figured I should mention that I'm running Windows 8.1 OS.

MWB Issue.jpg

Edited by Doomcaster
adding MWB version info

Share this post


Link to post
Share on other sites

@Doomcaster Welcome

Follow the steps in the following topic and post back the logs here in your topic.

 

Share this post


Link to post
Share on other sites

ID: 3   Posted (edited)

Okay, thank your for the response! Here is everything requested:

 

1. Brief description of the issue;

MWB notifies me that I am not protected and the Malware Protection setting is set to "Off". Clicking to turn it on shows it is "Starting..." but it never actually turns on.

2. Any screenshot(s) of error messages(s) or other incorrect behavior;

Screenshots provided.

3. If the system crashed (aka blue screen of death or BSOD), please include the error message;

No system crash or error messages.

4. Details on how you encountered the bug and any steps that can be taken to reproduce it;

MWB notified me that I wasn't protected and showed the Malware Protection to be off. Turning it on caused it to display "Starting..." but would never turn on. I found someone else on a different forum who had the same issue and was using a program called  'OneDrive' (as I was also) and said he had paused syncing as he didn't need the program running (which I had also done). By re-enabling the sync on OneDrive the issue with MWB went away. I did this also, and it also corrected my problem.

Now it's been about 5 or 6 days since then and today I see the same notification telling me I'm not protected, and, yep, Malware Protection is set to Off again... OneDrive has stayed synced this whole time and toggling the sync off and on does nothing to correct the issue. I've tried reboots and shut downs but still the issue persists.

5. Do you get the same result more than once if you follow the same steps? Y/N;

Yes.

6. Obtain and post a copy of the Malwarebytes logs;

Done.

7. Create and obtain Farbar Recovery Scan Tool (FRST) logs;

Done.

8. Create and obtain an mb-check log;

Done.

MWB Issue 2.jpg

MWB Issue 3.jpg

logs.rar

Addition_20-03-2017 18.09.08.txt

FRST_20-03-2017 18.09.08.txt

MB-CheckResult.txt

Edited by Doomcaster
Paragraph Structure / OCD

Share this post


Link to post
Share on other sites

@Doomcaster Lets try these things first.

Add these to Your AV exclusions.

C:\Windows\System32\drivers\mbae64.sys
C:\Windows\System32\drivers\mbam.sys
C:\Windows\System32\drivers\MBAMChameleon.sys
C:\Windows\System32\drivers\MBAMSwissArmy.sys
C:\Windows\System32\drivers\mwac.sys
C:\Windows\system32\Drivers\farflt.sys

C:\Program Files\Malwarebytes\Anti-Malware\MbamPt.exe
C:\Program Files\Malwarebytes\Anti-Malware\mbam.exe
C:\Program Files\Malwarebytes\Anti-Malware\assistant.exe
C:\Program Files\Malwarebytes\Anti-Malware\MBAMWsc.exe
C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe

 

Reboot, If no help then move on to this.

  1. Please follow the steps in this pinned topic to uninstall your current version of MBAM and reinstall the latest build - Malwarebytes mb-clean tool (after uninstalling you can download the latest version to re-install from HERE)
  2. Malwarebytes 3.0.6 CU3 HERE; MB 3 User Guide ONLINE; MB 3 User Guide PDF; MB 3 FAQ: Malwarebytes 3.0 - Frequently Asked Questions


Please let us know how it goes.

 

Share this post


Link to post
Share on other sites

@Porthos

By AV you mean my anti-virus, which for me is Avast, right? Or do you mean Malwarebytes?

Share this post


Link to post
Share on other sites
22 minutes ago, Doomcaster said:

@Porthos

By AV you mean my anti-virus, which for me is Avast, right? Or do you mean Malwarebytes?

Yes

Share this post


Link to post
Share on other sites

@Porthos

Okay, I added the exclusions and rebooted but the Malware Protection still would not turn on. I then deactivated my license and ran the mb cleanup tool and re-installed the latest version of MWB. Re-activated my license and got everything going... Now the Malware Protection is on! However now the Web Protection is having the exact same symptoms that I was having with the Malware Protection earlier. ^_^

I appreciate your helping me with this, Porthos! Now how do I resolve the Web Protection issue?

 

MWB Issue 5.jpg

MWB Issue 6.jpg

Share this post


Link to post
Share on other sites

Alright! Everything is on and protected now. Do I just leave the self protection set to off?

Share this post


Link to post
Share on other sites
25 minutes ago, Doomcaster said:

Alright! Everything is on and protected now. Do I just leave the self protection set to off?

I advise yes till the next version is released..

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!


Register a new account

Sign in

Already have an account? Sign in here.


Sign In Now

  • Recently Browsing   0 members

    No registered users viewing this page.