Jump to content

is RTProtectionDaemon a legit part of Malwarebytes?

LarB
 Share

Recommended Posts

robertleeblairjr

robertleeblairjr

Posted
Posted
On 8/24/2017 at 5:56 PM, ldc said:

RTProtectionDaemon consumed 50% of my physical RAM and rendered my iMac intolerably slow. I'm uninstalling it and removing it from my collection of software for my users until this is fixed. It's great software that is now as terrible as the dreaded MacKeeper as bloatware. Bummer.

Can't blame you. It's not very impressive that a company allows a known bug which cripples the one feature of their program and is the foundation of their subscription model to exist this length of time with no intentions of repairing it for at least another month. It's apparent that lack of proper testing was conducted on the program before the initial release because of it existing on multiple OS versions and hardware platforms. I would suggest that you can disable Real-Time Protection and kill the running RTProtectionDaemon process. You can disable the daemon from launching and residing in memory, even after reboots, by using 'launchctl' in terminal.

Caution: This will render the Real-Time Protection service component of Malwarebytes inoperable. This will be persistent after reboots/shutdowns and updates to the program. To reverse the operation then issue the commands in steps 2 & 3 by replacing 'disable' and 'unload' with 'enable' and 'load' respectively.

0. Disable Real-Time Protection

1. Kill the process 'RTProtectionDaemon'

2. Issue the commands 'sudo launchctl disable /Library/LaunchDaemons/com.malwarebytes.mbam.rtprotection.daemon.plist'

3. Issue the commands 'sudo launchctl unload /Library/LaunchDaemons/com.malwarebytes.mbam.rtprotection.daemon.plist'

4. Check running processes to determine if 'RTProtectionDaemon' process is active

Link to post
Share on other sites
  • Replies 63
  • Created
  • Last Reply

Top Posters In This Topic

Popular Days

Top Posters In This Topic

Popular Days

Posted Images

robertleeblairjr

robertleeblairjr

Posted
Posted
22 minutes ago, robertleeblairjr said:

Can't blame you. It's not very impressive that a company allows a known bug which cripples the one feature of their program and is the foundation of their subscription model to exist this length of time with no intentions of repairing it for at least another month. It's apparent that lack of proper testing was conducted on the program before the initial release because of it existing on multiple OS versions and hardware platforms. I would suggest that you can disable Real-Time Protection and kill the running RTProtectionDaemon process. You can disable the daemon from launching and residing in memory, even after reboots, by using 'launchctl' in terminal.

Caution: This will render the Real-Time Protection service component of Malwarebytes inoperable. This will be persistent after reboots/shutdowns and updates to the program. To reverse the operation then issue the commands in steps 2 & 3 by replacing 'disable' and 'unload' with 'enable' and 'load' respectively.

0. Disable Real-Time Protection

1. Kill the process 'RTProtectionDaemon'

2. Issue the commands 'sudo launchctl disable /Library/LaunchDaemons/com.malwarebytes.mbam.rtprotection.daemon.plist'

3. Issue the commands 'sudo launchctl unload /Library/LaunchDaemons/com.malwarebytes.mbam.rtprotection.daemon.plist'

4. Check running processes to determine if 'RTProtectionDaemon' process is active

Step two has a missing reference in the command. "2. Issue the commands 'sudo launchctl disable system/Library/LaunchDaemons/com.malwarebytes.mbam.rtprotection.daemon.plist'"

Caution: This will render the Real-Time Protection service component of Malwarebytes inoperable. This will be persistent after reboots/shutdowns and updates to the program. To reverse the operation then issue the commands in steps 2 & 3 by replacing 'disable' and 'unload' with 'enable' and 'load' respectively.

Warning: Malwarebytes GUI will become inoperable because of the reliance upon this background service persisting in memory.

Link to post
Share on other sites
  • Staff
treed

treed

Posted
  • Staff
Posted
On 8/26/2017 at 10:31 AM, robertleeblairjr said:

Can't blame you. It's not very impressive that a company allows a known bug which cripples the one feature of their program and is the foundation of their subscription model to exist this length of time with no intentions of repairing it for at least another month.

Robert,

I appreciate that you are disappointed. You're making this exceedingly clear.

However, most people haven't even noticed this problem, much less any issues caused by it. And getting High Sierra compatibility into place is a far higher priority. That will have a far bigger impact if not fixed before the release of High Sierra. If we were to take time off of that to go through the additional processes necessary to release another update, it would put us behind schedule and cause far more significant problems to larger groups of people. If it were not for the critical need to finish work on the High Sierra issue, we would have released the RTProtectionDaemon fix by now.

Please be patient.

Link to post
Share on other sites
robertleeblairjr

robertleeblairjr

Posted
Posted
4 hours ago, treed said:

Robert,

I appreciate that you are disappointed. You're making this exceedingly clear.

However, most people haven't even noticed this problem, much less any issues caused by it. And getting High Sierra compatibility into place is a far higher priority. That will have a far bigger impact if not fixed before the release of High Sierra. If we were to take time off of that to go through the additional processes necessary to release another update, it would put us behind schedule and cause far more significant problems to larger groups of people. If it were not for the critical need to finish work on the High Sierra issue, we would have released the RTProtectionDaemon fix by now.

Please be patient.

I DGAF if you appreciate any complaint I've made. When you get off the tip, then I've got one lined up for you to slob on. You can't confirm nor deny the vast number of people that are "actually" affected by this bug which doesn't target a small number of users. Why? Because statistically, unless you have a large enough and randomly selected sample size to mimic the population, then it's inaccurate to deduce there's a correlation to warrant an immediate repair. However, if it had been properly tested or if there were not enough resources allocated to support initial release bugs, then the release should have been postponed until the release of macOS 10.13. Instead, you condemn the users who are being used as the test bed for this software. In other words, your effective use to me for dealing with this program, thus far, is about the same as Tom.

Link to post
Share on other sites
TimBall

TimBall

Posted
Posted (edited)

I'm probably a bit late to this thread as I see a fix is promised for early Sept.

I'm using a Late 2012, 27" iMac, 3.4 GHz Intel Core i7, with 16GB RAM and OS 10.12.6 (Sierra)

With a slowing mac, I've been running Activity Monitor for about 10 days and noticed "RTProtectionDaemon" hogging top spot in Memory and %CPU all that time.

Memory currently about 6GB and %CPU from 15% to.......100% (occassionaly)

I'm looking forward to the update. I hope it makes a big difference. ;o)

(The numbers in this thread may not be indicative of how many people are suffering issues, as many won't know to use Activity Monitor to identify the problem, and then Googling "RT Protection Daemon" comes up with no helpful results, it has to be written "RTProtectionDaemon" to find it is a Malwarebytes issue.)

Edited by TimBall
Link to post
Share on other sites
  • 3 weeks later...
  • 2 months later...
  • Staff
treed

treed

Posted
  • Staff
Posted
21 hours ago, pkdesign said:

I have the 3.1.1.505 version installed and it still takes up over 50% of my CPU.

From the log files you sent me, it looks like your installation of Malwarebytes for Mac has been damaged somehow, and is not operating correctly. I'd recommend uninstalling and then reinstalling. If that doesn't help, you may have a problem with your system, though what that might be I don't know.

Link to post
Share on other sites
  • 2 weeks later...
ns108

ns108

Posted
Posted

I am still seeing this issue on the latest Mac OSX. 

RTP Protection demon and other Malwarebytes components are also showing that they are missing code signatures (install LittleSnitch and then install Malwarebytes) and these missing signatures prevent auto updating of the malware detection library. The only way to allow it is add an exception to the improperly / unsigned code... This really should be fixed urgently as it looks like Malwarebytes actually contains compromised code (malware...?)... That is not good. It must be resolved.

Also RTP is using a lot of memory.

Link to post
Share on other sites
ns108

ns108

Posted
Posted

Unfortunately it's not fixed. Run LittleSnitch and you will see (it's a great / the best firewall I've ever used by the way so useful anyway). It alerts to a discrepancy between code signatures, even on the version of Malwarebytes from last night. I've tried many times.

Link to post
Share on other sites
  • Staff
treed

treed

Posted
  • Staff
Posted
2 minutes ago, ns108 said:

Unfortunately it's not fixed. Run LittleSnitch and you will see (it's a great / the best firewall I've ever used by the way so useful anyway). It alerts to a discrepancy between code signatures, even on the version of Malwarebytes from last night. I've tried many times.

It has, we've tested and verified with Little Snitch and Apple's own code signature tools. There's nothing wrong with the code signature on the latest several versions of Malwarebytes for Mac.

You need to:

  1. Make absolutely sure you're running the latest version of Malwarebytes for Mac (currently, that's version 3.1.1)
  2. Restart the computer

If that doesn't fix it, something has corrupted your installation of Malwarebytes for Mac, and you should uninstall it and reinstall.

Uninstall directions: https://support.malwarebytes.com/docs/DOC-1928

Link to post
Share on other sites
ns108

ns108

Posted
Posted

Thank you for your incredible proactive support first of all. Really commendable!

I have done what you suggest but will try again. Each time however, the result is the same... so far.

I assume latest version is the one I downloaded from my inside my premium account on your site, correct?

Link to post
Share on other sites
  • 2 months later...
Muckaluck

Muckaluck

Posted
Posted

FWIW I am still finding that turning on real-time protection on the current version of MWB for Mac (3.2.36) is having the same problems as a few months ago. The RTProtectionDaemon ended up having noticeably high processor usage over time (confirmed by Activity Monitor) so I had to turn it off again.

Link to post
Share on other sites
  • 1 month later...
  • 3 weeks later...
alvarnell

alvarnell

Posted
Posted

Yes, Treed monitors this forum and has replied multiple times, probably with all the ideas he has.

Make sure you are running the latest version 3.3.32.1398. 

There is a beta version 3.3.33.xxxx available for testing now if you would be willing to try it. Just check the appropriate box in Settings under "Beta Application Updates" and then select "Check for Updates..." from the Malwarebytes menu.

If you've tried everything without success then open a support ticket. 

Link to post
Share on other sites
  • Staff
treed

treed

Posted
  • Staff
Posted
On 5/28/2018 at 6:05 PM, robfol said:

I am trialling MB on two Macs and on both the RT Protection Daemon is using a lot of CPU time and slowing the machines down. Memory seems OK but not happy with CPU usage. Any thoughts? Cheers Robert

This thread really isn't the right place to get help with this. There have been many changes to the software since this thread started, and there are many different unrelated conversations here. I recommend doing exactly what Al said. Specifically:

  1. Get the latest release version of the software. Currently, in-app updates are being metered, so you may not see the latest version yet, but you can download it from here:
    • https://malwarebytes.com/mac-download
    • Once you have the latest version, in the future, a manual check for updates in-app will always give you the latest version, regardless of metering.
  2. If that doesn't help, turn on Beta Application Updates and install the latest beta, if any.
  3. If that still doesn't help, submit a support ticket. We may need to ask you to collect more information about your computer and the state of the Malwarebytes software, and doing that on a public forum is not the best idea.
Link to post
Share on other sites
  • 2 months later...
TheVallog

TheVallog

Posted
Posted

'Fraid I've suffered from this issue also. The RTProtection Daemon was monopolizing CPU to the point where MS Word in particular had slowed below a crawl on my MacBook Pro. Was tearing my hair out with spectres of expensive hardware issues until combination of Activity Monitor and Google led me to this thread -  and the real culprit. 

Malwarebytes now uninstalled and normal service resumed.  

And I was just on verge of signing up for an annual subscription, too... :(

 

Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
 Share
Go to topic listing

  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.