Malware Protect Off - Inst-Over FIXED

[CraigS]

I saw the Exploit Protection Off Thread and used the Latest Version DnLoad Link there to FIX My "Malware Protection OFF" indication.

I had REPAIRED ESET EIS, Re-Booted, and got an MBAM  DDA Driver won't Load popup - You should Re-Boot. I did and THEN got the Malware Protection OFF>

Not sure IF ESET Repair affected MBAM, but the Install Over approach worked.  FYI

[CraigS]

Since this initial Post I have TWICE had to Re-Install Mbam 3 OVER the existing one.

First was after an ESET EIS Security App REPAIR (which looks like a mini-uninstall/reinstall), can't remember #2, and Yesterday I Uninstalled / RE-Installed Firefox (64)  55.0.3

All involve Malware Protection OFF / won't Load & Re-installs work until I (apparently) do something major with Another App.

Which Analytical Reports should I obtain the NEXT TIME it happens?  Many Thanks!

[CraigS]

58 minutes ago, CraigS said:

Since this initial Post I have TWICE had to Re-Install Mbam 3 OVER the existing one.

First was after an ESET EIS Security App REPAIR (which looks like a mini-uninstall/reinstall), can't remember #2, and Yesterday I Uninstalled / RE-Installed Firefox (64)  55.0.3

All involve Malware Protection OFF / won't Load & Re-installs work until I (apparently) do something major with Another App.

Which Analytical Reports should I obtain the NEXT TIME it happens?  Many Thanks!

Need Help with Quoted Issue above  - AND - My Signature has Disappeared UNLESS I'm Logged-in.

Bottom Right of Post rectangle is X and Dn Arrow that Hi-Light w/Cursor Over it to show Ignore Signature Preferences - Clk again and you see Hide All Signatures. There is No Logic to know What to Clk to make the Signature Return - And - Edit Capability when Returning to your own Post would be nice.

Thanks for any Help provided.

[Firefox]

Hello and Welcome back...

The logs that are required are posted below... As for your Signature not being visible unless your logged in, that is by design, while I am not logged in I do not see any signatures either. As for editing posts, that has been disabled until you reach a certain level, this was due to abuse in the past.

The Logs Required...

Let's try and get some logs first so the team can review them and see if they can tell what may be causing your issues....

1. FIRST: Create and obtain Farbar Recovery Scan Tool (FRST) logs
2. Download FRST and save it to your desktop
   NOTE: You need to run the version compatible with your system. You can check here if you're not sure if your computer is 32-bit or 64-bit
3. Double-click to run FRST and when the tool opens click "Yes" to the disclaimer
4. Press the "Scan" button
5. This will product two files in the same location (directory) as FRST: FRST.txt and Addition.txt
   NOTE: These two files will be collected by the MB-Check Tool and added to the zip file for you
6. NEXT: Create and obtain an mb-check log
7. Download MB-Check and save to your desktop
8. Double-click to run MB-Check and within a few second the command window will open, then click "OK"
9. This will produce one log file on your desktop: mb-check-results.zip
10. Attach this file to your forum post by clicking on the "Drag files here to attach, or choose files..." or simply drag the file to the attachment area
    

Thank You,

Firefox

 

[CraigS]

2 hours ago, Firefox said:

Hello and Welcome back...

The logs that are required are posted below... As for your Signature not being visible unless your logged in, that is by design, while I am not logged in I do not see any signatures either. As for editing posts, that has been disabled until you reach a certain level, this was due to abuse in the past.

The Logs Required...

Let's try and get some logs first so the team can review them and see if they can tell what may be causing your issues....

1. FIRST: Create and obtain Farbar Recovery Scan Tool (FRST) logs
2. Download FRST and save it to your desktop
   NOTE: You need to run the version compatible with your system. You can check here if you're not sure if your computer is 32-bit or 64-bit
3. Double-click to run FRST and when the tool opens click "Yes" to the disclaimer
4. Press the "Scan" button
5. This will product two files in the same location (directory) as FRST: FRST.txt and Addition.txt
   NOTE: These two files will be collected by the MB-Check Tool and added to the zip file for you
6. NEXT: Create and obtain an mb-check log
7. Download MB-Check and save to your desktop
8. Double-click to run MB-Check and within a few second the command window will open, then click "OK"
9. This will produce one log file on your desktop: mb-check-results.zip
10. Attach this file to your forum post by clicking on the "Drag files here to attach, or choose files..." or simply drag the file to the attachment area

 

Thank You,

Firefox

 

Many Thanks, Firefox,  for the Instructions and Sig + Edit explanations.

This Thread is bookmarked for when Mbam 3 throws the next Red Flag, which, as stated,  will most likely be when I Uninstall an App.

Edited September 5, 2017 by CraigS

[CraigS]

23 hours ago, CraigS said:

Many Thanks, Firefox,  for the Instructions and Sig + Edit explanations.

This Thread is bookmarked for when Mbam 3 throws the next Red Flag, which, as stated,  will most likely be when I Uninstall an App.

I RAN MS EasyFix50388.msi Just Now for another issue and Got the Red Flag - Malware Protection Off.

mb check results attached ..... THANKS for any Help!!

mb-check-results.zip

[CraigS]

22 hours ago, CraigS said:

I RAN MS Fix It  (EasyFix50388.msi ) Just Now for another issue and Got the Red Flag - Malware Protection Off.

mb check results attached ..... THANKS for any Help!!

mb-check-results.zip

This is a bump as I'm now half-way down Pg 2 of the Forum & have no way of knowing If This Post is recognized as a New Follow-up + IF/ When my MB-Check Results will be looked at.

Still without Malware Protection after running MS Fix It app.  Thanks!

[Porthos]

@dcollins@nikhils@AdvancedSetup

[CraigS]

On 9/7/2017 at 8:51 AM, Porthos said:

@dcollins@nikhils@AdvancedSetup

Doesn't look like I'll get any Help (Tues 9/5 a.m. Post) so I'll Install Over a 4th time and start a new Thread when MBAM Red Flags again.

 

Aug 17 1st Install Over ........used the Latest Version DnLoad Link there to FIX My "Malware Protection OFF" indication. I had REPAIRED ESET EIS, Re-Booted, and got an MBAM  DDA Driver won't Load popup - You should Re-Boot. I did and THEN got the Malware Protection OFF>

Tuesday  9/5 a.m. ...... 3rd Install -Over  Since this initial (Aug 17) Post I have TWICE had to Re-Install Mbam 3 OVER the existing one. First was after an ESET EIS Security App REPAIR (which looks like a mini-uninstall/reinstall), can't remember #2, and Yesterday I Uninstalled / RE-Installed Firefox (64)  55.0.3

Wed  9/6  10 a.m.  This is a bump as I'm now half-way down Pg 2 of the Forum & have no way of knowing If This Post is recognized as a New Follow-up + IF/ When my MB-Check Results will be looked at. Still without Malware Protection after running MS Fix It app.  Thanks!

 

mb-check-results.zip

[Porthos]

2 minutes ago, CraigS said:

so I'll Install Over a 4th time and start a new Thread when MBAM Red Flags again.

No need for another topic. The appropriate staff members have been notified to your issue.  We're are on the weekend now and not all staff work the weekends.

[CraigS]

24 minutes ago, Porthos said:

No need for another topic. The appropriate staff members have been notified to your issue.  We're are on the weekend now and not all staff work the weekends.

Noted.

On the Re-Install Dashboard\Scan Status\ Updates said CURRENT, yet when I Clk'd it it applied New Updates. FYI

[Porthos]

9 minutes ago, CraigS said:

On the Re-Install Dashboard\Scan Status\ Updates said CURRENT, yet when I Clk'd it it applied New Updates. FYI

By default which you have set MB checks hourly for updates. There are many updates per day.

[Porthos]

Have you added all the below files to Eset's  exclusions?

• C:\Program Files\Malwarebytes\Anti-Malware\assistant.exe
• C:\Program Files\Malwarebytes\Anti-Malware\malwarebytes_assistant.exe
• C:\Program Files\Malwarebytes\Anti-Malware\mbam.exe
• C:\Program Files\Malwarebytes\Anti-Malware\MbamPt.exe
• C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
• C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
• C:\Program Files\Malwarebytes\Anti-Malware\MBAMWsc.exe
• C:\Windows\system32\Drivers\farflt.sys
• C:\Windows\System32\drivers\mbae64.sys
• C:\Windows\System32\drivers\mbam.sys
• C:\Windows\System32\drivers\MBAMChameleon.sys
• C:\Windows\System32\drivers\MBAMSwissArmy.sys
• C:\Windows\System32\drivers\mwac.sys

Also please exclude the following folders too: (The complete folder)

• C:\Program Files\Malwarebytes\Anti-Malware
• C:\ProgramData\Malwarebytes\MBAMService

[CraigS]

On 9/9/2017 at 8:07 AM, Porthos said:

Have you added all the below files to Eset's  exclusions?

• C:\Program Files\Malwarebytes\Anti-Malware\assistant.exe
• C:\Program Files\Malwarebytes\Anti-Malware\malwarebytes_assistant.exe
• C:\Program Files\Malwarebytes\Anti-Malware\mbam.exe
• C:\Program Files\Malwarebytes\Anti-Malware\MbamPt.exe
• C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
• C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
• C:\Program Files\Malwarebytes\Anti-Malware\MBAMWsc.exe
• C:\Windows\system32\Drivers\farflt.sys
• C:\Windows\System32\drivers\mbae64.sys
• C:\Windows\System32\drivers\mbam.sys
• C:\Windows\System32\drivers\MBAMChameleon.sys
• C:\Windows\System32\drivers\MBAMSwissArmy.sys
• C:\Windows\System32\drivers\mwac.sys

Also please exclude the following folders too: (The complete folder)

• C:\Program Files\Malwarebytes\Anti-Malware (Yes)
• C:\ProgramData\Malwarebytes\MBAMService

Have you added all the below files to Eset's  exclusions?  I HAVE NOW.

Only had Prog Files\Mbam\Anti-Malware and 2 of the system 32\drivers above in Red ... had to have done it from a long ago Thread.

I'm assuming Hourly Update Checks are OK and within 60 minutes an Update can occur and - My App doesn't Know it Has  - Until the Next Hourly Check. That makes sense to me as I presumed an Update-Has-Occurred Notification To MY App was independent of Update Checks..

Will Press-On and see what happens. MANY THANKS for the Suggestion.

[CraigS]

On 9/9/2017 at 7:19 AM, CraigS said:

Aug 17 1st Install Over ........used the Latest Version DnLoad Link there to FIX My "Malware Protection OFF" indication. I had REPAIRED ESET EIS, Re-Booted, and got an MBAM  DDA Driver won't Load popup - You should Re-Boot. I did and THEN got the Malware Protection OFF>

Tuesday  9/5 a.m. ...... 3rd Install -Over  Since this initial (Aug 17) Post I have TWICE had to Re-Install Mbam 3 OVER the existing one. First was after an ESET EIS Security App REPAIR (which looks like a mini-uninstall/reinstall), can't remember #2, and Yesterday I Uninstalled / RE-Installed Firefox (64)  55.0.3

10/1/17   RAN WIN 7-64 SP1 WINDOWS UPDATE for SEPT with No Known Issues.

10/2/17 a.m.   Found Malware Protection OFF and Will Not Start.

MB-Check.Zip Attached

From Porthos on 9/9 Post #13: [ Have you added all the below files to Eset's  exclusions?   My Reply: I HAVE NOW. ]

 

mb-check-results.zip

Edited October 2, 2017 by CraigS
Add relevant data

[CraigS]

On 10/2/2017 at 5:27 AM, CraigS said:

10/1/17   RAN WIN 7-64 SP1 WINDOWS UPDATE for SEPT with No Known Issues.

10/2/17 a.m.   Found Malware Protection OFF and Will Not Start.

MB-Check.Zip Attached

From Porthos on 9/9 Post #13: [ Have you added all the below files to Eset's  exclusions?   My Reply: I HAVE NOW. ]

 

mb-check-results.zip

https:    //forums.malwarebytes.com/topic/210890-322-protection-keeps-turning-off-in-windows-81/

From above Thread (had to separate url characters to prevent Thread section loading / copy-paste url right side and add https: to view thread ) I RAN [ FRST64  FIX ] per dcollins suggestion in THAT thread's Post #6 and After a Re-Start per the Debugging section MBAM Loaded with ALL PROTECTION ON. The FIX function produced the      [ Fixlog.txt ] attached IF it matters now.

I did incur on the FIRST RE-Start a pop-up that the DDA Driver wouldn't load, so I had to Re-Start a 2nd time - and All looks OK for Now.

mb-check-results in Quote section above - BUT - I Presume I should back-off and wait for the Next Protection OFF Issue - UNLESS - someone advises otherwise.

Fixlog.txt

[dcollins]

@CraigS you shouldn't run fixlist files posted for others. Those are usually built on a per-machine basis and could have negative impacts if used improperly. Luckily this fixlog doesn't actually do anything, just queries information, but something to keep in mind for the future

[CraigS]

20 hours ago, dcollins said:

@CraigS you shouldn't run fixlist files posted for others. Those are usually built on a per-machine basis and could have negative impacts if used improperly. Luckily this fixlog doesn't actually do anything, just queries information, but something to keep in mind for the future

Thanks, Devin, I'm glad I got lucky this time for presuming those were generic instructions..

I'll be patient next time and just wait for some Sppt as this Malware Protection failure has certainly been consistent for whatever reason(s), and will surely reappear.

[CraigS]

On 9/9/2017 at 7:19 AM, CraigS said:

Aug 17 1st Install Over ........used the Latest Version DnLoad Link there to FIX My "Malware Protection OFF" indication.                                                                            I had REPAIRED ESET EIS, Re-Booted, and got an MBAM  DDA Driver won't Load popup - You should Re-Boot. I did and THEN got the Malware Protection OFF>

Tuesday  9/5 a.m. ...... 3rd Install -Over  Since this initial (Aug 17) Post I have TWICE had to Re-Install Mbam 3 OVER the existing one.                                                 First was after an ESET EIS Security App REPAIR (which looks like a mini-uninstall/reinstall), can't remember #2, and Yesterday I Uninstalled / RE-Installed Firefox (64)  55.0.3

10/1/17   RAN WIN 7-64 SP1 WINDOWS UPDATE for SEPT with No Known Issues.                                                                                                                                   10/2/17 a.m.   Found Malware Protection OFF and Will Not Start.

From Porthos on 9/9 Post #13: [ Have you added all the below files to Eset's  exclusions?   My Reply: I HAVE NOW. ]

========================================================================================================

10/10/17: Found ESET EIS Security App Network Modules In RED / OFF and a Control Panel EIS REPAIR BROKE MBAM 3 - But NOW it's - Real-Time WEB Protection OFF - VS - Prior Malware Protection OFF.

MB-CHK.zip Attached.

 

 

 

mb-check-results.zip

Edited October 10, 2017 by CraigS

[dcollins]

@CraigS can you clarify what problem you're currently having? You mention your issue was resolved, but now you're linking to an older post where you had an issue with Malware protection. 

Also, please limit the formatting of your posts as they are hard to read with so many different colors and bolded words

Edited October 10, 2017 by dcollins

[CraigS]

21 minutes ago, dcollins said:

@CraigS can you clarify what problem you're currently having? You mention your issue was resolved, but now you're linking to an older post where you had an issue with Malware protection. 

Also, please limit the formatting of your posts as they are hard to read with so many different colors and bolded words

Real-Time WEB PROTECTION is OFF / Won't Start AFTER ESET EIS Security App Repair was run.

This ESET Repair breaks Mbam 3 has Happened before but failures have been with Real-time Malware Protection Vs. Web Protection today..

Included data are for a History of my Problems starting Aug 17 that I Thought were solved by Install-over.  Malware Protection Off has followed a Firefox Uninstall / Re-install and the most recent Win 7-64 Update..

Thanks for any Help!

[dcollins]

Can you send me a screenshot of the ESET Security App Repair? I can't find that product anywhere, and I don't see it inside of ESET Internet Security

[CraigS]

49 minutes ago, dcollins said:

Can you send me a screenshot of the ESET Security App Repair? I can't find that product anywhere, and I don't see it inside of ESET Internet Security

10/10/17: Found ESET EIS Security App Network Modules In RED / OFF and a -- Control Panel EIS REPAIR -- BROKE MBAM 3

Control Panel/Programs-Features/ESET Internet Security/Change ..... See Attached

[CraigS]

1 minute ago, CraigS said:

10/10/17: Found ESET EIS Security App Network Modules In RED / OFF and a -- Control Panel EIS REPAIR -- BROKE MBAM 3

Control Panel/Programs-Features/ESET Internet Security/Change ..... See Attached

ESET System Tray Icon turned RED again and said it wanted a Re-Start (as though I hadn't after the Repair).

After 2nd Re-Start MBAM is NOW OK & so is ESET.

Stop or pursue mb-check.zip data as able.

[CraigS]

1 minute ago, CraigS said:

10/10/17: Found ESET EIS Security App Network Modules In RED / OFF and a -- Control Panel EIS REPAIR -- BROKE MBAM 3

Control Panel/Programs-Features/ESET Internet Security/Change ..... See Attached

ESET System Tray Icon turned RED again and said it wanted a Re-Start (as though I hadn't after the Repair).

After 2nd Re-Start MBAM is NOW OK & so is ESET.

Stop or pursue mb-check.zip data as able.