Jump to content

Protection keeps turning off... V3.1.2


Recommended Posts

  • Replies 703
  • Created
  • Last Reply

Top Posters In This Topic

Popular Days

Top Posters In This Topic

Posted Images

7 minutes ago, John A said:

No, my 64 bit systems are all still bad.  I only just tried the 32 bit and in any case there is no new update

John, go to advance settings, "Enable self-protection module early start". Then reboot and see if your protection module starts up.

It works for me 

Link to post
Share on other sites

1 minute ago, hopefuluser said:

Can now Scan. Cant activate premium version.

I followed advice elsewhere in this thread to delete malwarebytes using https://downloads.malwarebytes.com/file/mb_clean

This worked in that I now have a free version running. I was able to do a full scan and it came up clean

Im now running avira to double check.

BUT I cant activate my license. I had one with an ID and a key. The ID is accepted. The key is not. I have checked it painfully - and am typing it in correctly

Sitting here twiddling thumbs.

Make sure you put the dashes when entering you key and ID.

Link to post
Share on other sites

TEMPORARY FIX UNTIL YOU SEE AN UPDATE HERE

AS FOLLOWS:

dl latest MBAM https://de.malwarebytes.com/mwb-download/thankyou/

optionally these definitions from one day later than the latest MBAM download: https://data-cdn.mbamupdates.com/v1/tools/mbam-rules/data/mbam-r 

cut internet

install

go to: Settings > And turn off automatic updates in the leftwise settings tab

reconnect to internet and check official post linked above.

You will have a working MBAM 3.0 from May 10th/11th 2017. When they have fixed it you can just turn auto updates on again

Edited by Duuude
Link to post
Share on other sites

4 minutes ago, djzeratul said:

I don't particularly have time to spin up a VM with ransomware running to get empirical evidence, but based on that document I posted, it doesn't need definitions to work, so why would it be broken?

 

in a (wary) programmer's lexicon :- assumption = bad.

 

 

Link to post
Share on other sites

6 minutes ago, rocks911 said:

Same issues as everybody.

Of all my apps for security and performance it was Iobit Driver Booster that provided me with a pop-up explaining the threat of a "Massive Ransomware Breakout".

It offered to automatically correct configurations or led me to a web page (the option I chose) to show how to configure incoming port rules to block port 445, as well as updates that might be needed.

I mention this not because Im a big fan of Iobit, Im really not, but it did surprise me that the one app that warned me and offered me help was friggin Iobit Driver Booster!

http://www.iobit.com/en/tips-how-to-prevent-wannacrypt-attacking-80.php?p=db

 

That's good info.  I knew about everything except blocking port 445.

Link to post
Share on other sites

9 minutes ago, rocks911 said:

Same issues as everybody.

Of all my apps for security and performance it was Iobit Driver Booster that provided me with a pop-up explaining the threat of a "Massive Ransomware Breakout".

It offered to automatically correct configurations or led me to a web page (the option I chose) to show how to configure incoming port rules to block port 445, as well as updates that might be needed.

I mention this not because Im a big fan of Iobit, Im really not, but it did surprise me that the one app that warned me and offered me help was friggin Iobit Driver Booster!

http://www.iobit.com/en/tips-how-to-prevent-wannacrypt-attacking-80.php?p=db

 

Malwarebytes actually blocks the Ransomware breakout as well, it just doesn't report on it in the program itself (luckily, if it would prompt us with every outbreak online they are blocking, we would be recieving prompts every day and I would uninstall immediately). It did however tell us about this in their newsletter/mailing they did a couple of days ago.

Blocking port 445 incoming is a good suggestion, but only if you block it on your modem/router, if you block it in windows firewall it can actually break file sharing on your computer as port 445 is the SMB port (SMB = Samba file sharing used for sharing files over the network).
However blocking 445 on your modem alone won't stop the malware, as usually it gets distributes by another omcputer in the network where they for instance opened an infected mail attachement.

So blocking ports shouldn't be the solution, Malwarebytes blocking it will be better.

Edited by RagingRaven
typo
Link to post
Share on other sites

2 minutes ago, Duuude said:

TEMPORARY FIX UNTIL YOU SEE AN UPDATE HERE

AS FOLLOWS:

dl latest MBAM https://de.malwarebytes.com/mwb-download/thankyou/

optionally these definitions from one day later than the latest MBAM download: https://data-cdn.mbamupdates.com/v1/tools/mbam-rules/data/mbam-r 

cut internet

install

go to: Settings > And turn off automatic updates in the leftwise settings tab

reconnect to internet and check official post linked above.

You will have a working MBAM 3.0 from May 10th/11th 2017. When they have fixed it you can just turn auto updates on again

BUMP

Link to post
Share on other sites

Malwarebytes Forums
Hi BernardL,
exile360 has posted a comment on a topic, Database update causing protection and scans to fail
 
 
exile360 said:

Hello again,

While we are still waiting for a fix for this issue, I wanted to provide some information that I hope will help to set your minds at ease at least somewhat.  Even though our Web Protection and Malware Protection components are not functioning due to the database update issue we are experiencing, our advanced signature-less components, Exploit Protection and Anti-Ransomware are still fully functional.  This is critical because these days the vast majority of malware infections get into systems by using exploits.  What that means for all of us who are using Malwarebytes right now is that the most effective component of realtime protection is still active.  Also keep in mind that the ransomware threat that made headlines recently, WanaCrypt0r, uses exploits to infiltrate systems so all of us who have Malwarebytes 3 Premium/Trial are still fully protected from this threat, as well as all the others that use exploits to attempt to load malware onto systems (which again, is most of them these days).

As for the issue at hand, I still haven't heard any news other than our IT, Dev, Research, QA, PM and Support teams are all looking into this issue and trying to get it resolved as fast as we can.  For those who are curious, the cause of protection and scans not functioning is that for some unknown reason Malwarebytes 3 is downloading 0Kb size database files (our malware detection signature files and web block list files).  Since the files are empty, there is no information for those components to read and load so those components stop functioning until proper databases get downloaded from our update servers.  Likewise, the scanner uses these same malware signature files to analyze the files and processes on your computer to check for threats, but since the database files are empty, there is nothing for them to check with.

For now, please keep your Exploit Protection active as it is our most proactive and effective component for preventing modern malware attacks, be they malicious documents attached to emails or malicious scripts served by infected websites.

I will post here again once I have any new information about the problem affecting us, and thank you all again so much for your patience while we deal with this unforeseen issue.

Go to this post


— Malwarebytes Forums
You are receiving this email because you are following the Topic 'Database update causing protection and scans to fail'.
Prefer to stop receiving these emails? Unfollow or Adjust your notification preferences.
Click here to view our privacy policy
Malwarebytes Forums
Link to post
Share on other sites

1 minute ago, BernardL said:
imageproxy.php?img=&key=7f5738b24d726c1e imageproxy.php?img=&key=7f5738b24d726c1e imageproxy.php?img=&key=7f5738b24d726c1e
imageproxy.php?img=&key=7f5738b24d726c1e Malwarebytes Forums imageproxy.php?img=&key=7f5738b24d726c1e
imageproxy.php?img=&key=7f5738b24d726c1e imageproxy.php?img=&key=7f5738b24d726c1e imageproxy.php?img=&key=7f5738b24d726c1e
imageproxy.php?img=&key=7f5738b24d726c1e
Hi BernardL,
exile360 has posted a comment on a topic, Database update causing protection and scans to fail
 
imageproxy.php?img=&key=7f5738b24d726c1e  
exile360 said:

Hello again,

While we are still waiting for a fix for this issue, I wanted to provide some information that I hope will help to set your minds at ease at least somewhat.  Even though our Web Protection and Malware Protection components are not functioning due to the database update issue we are experiencing, our advanced signature-less components, Exploit Protection and Anti-Ransomware are still fully functional.  This is critical because these days the vast majority of malware infections get into systems by using exploits.  What that means for all of us who are using Malwarebytes right now is that the most effective component of realtime protection is still active.  Also keep in mind that the ransomware threat that made headlines recently, WanaCrypt0r, uses exploits to infiltrate systems so all of us who have Malwarebytes 3 Premium/Trial are still fully protected from this threat, as well as all the others that use exploits to attempt to load malware onto systems (which again, is most of them these days).

As for the issue at hand, I still haven't heard any news other than our IT, Dev, Research, QA, PM and Support teams are all looking into this issue and trying to get it resolved as fast as we can.  For those who are curious, the cause of protection and scans not functioning is that for some unknown reason Malwarebytes 3 is downloading 0Kb size database files (our malware detection signature files and web block list files).  Since the files are empty, there is no information for those components to read and load so those components stop functioning until proper databases get downloaded from our update servers.  Likewise, the scanner uses these same malware signature files to analyze the files and processes on your computer to check for threats, but since the database files are empty, there is nothing for them to check with.

For now, please keep your Exploit Protection active as it is our most proactive and effective component for preventing modern malware attacks, be they malicious documents attached to emails or malicious scripts served by infected websites.

I will post here again once I have any new information about the problem affecting us, and thank you all again so much for your patience while we deal with this unforeseen issue.

Go to this post


— Malwarebytes Forums
imageproxy.php?img=&key=7f5738b24d726c1e
imageproxy.php?img=&key=7f5738b24d726c1e imageproxy.php?img=&key=7f5738b24d726c1e imageproxy.php?img=&key=7f5738b24d726c1e
imageproxy.php?img=&key=7f5738b24d726c1e You are receiving this email because you are following the Topic 'Database update causing protection and scans to fail'.
Prefer to stop receiving these emails? Unfollow or Adjust your notification preferences.
imageproxy.php?img=&key=7f5738b24d726c1e Click here to view our privacy policy imageproxy.php?img=&key=7f5738b24d726c1e
imageproxy.php?img=&key=7f5738b24d726c1e Malwarebytes Forums imageproxy.php?img=&key=7f5738b24d726c1e

Swarkman, let your mind be at ease...

Link to post
Share on other sites

1 hour ago, DJCon said:

As before, I have Win 7 64, Malwarebytes 3.0.6 Premium, paid and licenced.  Continuously informed "You're not fully protected", tried switching each to On but still that message "You're not fully protected" and Web protection is Starting...

Tried using defaults, no change.

With all of this ransomware malware scare worldwide, now is the critical time for Malwarebytes to do what it does best, protect us.  Sadly it is failing us when we need it the most.

Aranea said:
1 minute ago, hwolfie said:

Download the latest from MB from this link: https://downloads.malwarebytes.com/file/mbam and install on top of existing MB installation. That fixed the problem.

This fixed the issue for me too, until it auto-updated. Component package ver 1.0.122 seems to work fine, scans and web protection work and malware protection 
isn't randomly being turned off either (just started encountering that issue).
Recommend fresh install of 3.1.2 without updating to package ver 1.0.1909 - has worked so far "

That was in an email amongst nearly 200 that flooded my Inbox as soon as I posted.  I downloaded 3.1.2, opened it and set NO to Update Automatically.

The scan is now at nearly 10 minutes and counting and has identified 225 threats.  Far too many at the best of times.

But thankfully, the scan is working.

Link to post
Share on other sites

Guys, I was reading and a lot of you think that you're infected (I read most of the threads on the issue starting this morning).  You should not be infected if it's the web protection that is off.  If you have an antivirus (you should), run a scan if you're upset or worried.  However, you likely do not have any reason to be. This is an issue with the program and they will fix it.  If you're getting popups, etc...you've opened or visited something and then yes, you could be infected.  Do not click on the popups.  Go find a reputable online scan like from Kaspersky.  If you need any help, a lot of us are here and willing to help.  If Malwarebytes is your only protection, avoid pornography unless it comes from a paid site that you already know and trust.  I wouldn't accept any new Facebook friendships right now (unless you know the person evidently) and be careful as to what email you open.  If the source seems shady, delete.  Don't download anything from your email.  If it's from your bank, the IRS, etc etc...they usually do not send files via email so go directly to their websites ensuring that you have the proper address.

Most of you are not feeling affected, etc but some of you are worried so I hope that this helps.  I do not work for Malware (with my low post count duh lol) but these are just things that you can do as common sense.  These are things that you should be careful of even if MWB is fully functional.  If you need any help, ask away.  I met some great people on here who are eager to help out.

Link to post
Share on other sites

I called the number provided on the web for tech support and told the "tech"  my problem (malewarebytes will not start) and he said he would enter my computer remotely.  i did not feel comfortable with that and just hung up. He called me back and  I told him I didn't feel  comfortable with his suggestions and heno

Link to post
Share on other sites

Me three. I came here and looked around and began to wonder if MBAM's server had been hacked: one cannot help but wonder, since the forum here was hacked a year or two ago, according to haveibeenpwned. Is it possible that there's an exploit in the program itself? I decided to see if killing MBAM in task manager, then restarting it, would help, but every time I clicked on an MBAM task, the CPU activity went up, eventually to 100%. I finally had to do a hard shutdown, and the first thing I did upon rebooting was to use Revo to remove all of MBAM. I think I'll reinstall MBAM-2.2.1.1043

Link to post
Share on other sites

1 minute ago, ParrotSlave said:

Me three. I came here and looked around and began to wonder if MBAM's server had been hacked: one cannot help but wonder, since the forum here was hacked a year or two ago, according to haveibeenpwned. Is it possible that there's an exploit in the program itself? I decided to see if killing MBAM in task manager, then restarting it, would help, but every time I clicked on an MBAM task, the CPU activity went up, eventually to 100%. I finally had to do a hard shutdown, and the first thing I did upon rebooting was to use Revo to remove all of MBAM. I think I'll reinstall MBAM-2.2.1.1043

Not a hack.

Just reinstall the latest from the homepage and turn off autoupdate - it is the DB file that is causing the problem. If you stop it from updating, it will work fine.

Link to post
Share on other sites

Just now, Ice-Rabbit said:

Why does MB not release the LKG as a new update so everybody has a working MBAM? Then they can fix the troubles with the new one....

That would be the most logical solution. That's how we always handled these kinds of problems with releases at my last place of employment. Roll back to last SVN tag and push the files back. However, the issue may be more complicated than this due to how the program handles the files... that, or their release crew isn't around to actually do a rollback, or they determined that a fix would be faster than to roll back.

Link to post
Share on other sites

  • bdubrow locked and pinned this topic
  • bdubrow unpinned this topic
Guest
This topic is now closed to further replies.
 Share

  • Recently Browsing   0 members

    • No registered users viewing this page.

Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.