Real Time Protection layers turned off

[FranClod3]

Today, after Window update, Malwarebytes won't turn on the Real-Time Protection layers. I have the latest version 3.2.2.2018. I followed the steps as described in the FAQ but nothing worked. Need help. Please advise. Thank you.

[Firefox]

Hello and Welcome

Let's try this first.... (Malwarebytes clean removal tool will backup your license information and then re-enter the license to the new install)

1. Please follow the steps in this pinned topic to uninstall your current version of MBAM and reinstall the latest build - Malwarebytes mb-clean tool (NOTE: After uninstalling with the mb-clean tool you will be asked to reboot. Once you reboot it will ask you if you want to re-install Malwarebytes, you can select YES (it will download the latest version) or you can download the latest version manually (currently v3.2.2.2029 CU 1.0.212) to re-install from HERE)
2. If that does not correct the issue, then please read the following and attach to your next reply the requested logs - Diagnostic Logs (after you run all the tools requested, all the logs will be combined into one log file named: mb-check-results.zip located on your Desktop (which will include the FRST logs inside the zip file))
3. NOTE: More info about the latest Malwarebytes 3.2.2 HERE; MB 3 User Guide ONLINE; MB 3 User Guide PDF; MB 3 FAQ: Malwarebytes 3.0 - Frequently Asked Questions
   

Please let us know how it goes.

Thank You,

Firefox

[Vauxalm]

You are not alone experiencing that. See here : 

 

 

[Vauxalm]

Hi Firefox,

It looks like a general problem appearing after the last Windows upgrade (8.1, upgrade on October 11th in my case). Look at the link I posted just above.

[FranClod3]

This is what I found in the mb-clean up log: 2017-10-13 10:57:31.790   mb-clean:3.1.0.1031  @ Malwarebytes. All rights reserved.
2017-10-13 10:57:37.806   Malwarebytes self-protection module is not installed.
2017-10-13 10:57:37.806   Launching process:"C:\Program Files\Malwarebytes\Anti-Malware\unins000.exe" /LOG /VERYSILENT /SUPPRESSMSGBOXES /NORESTART /log="C:\Users\Fran\AppData\Local\Temp\Mbam3x.log"
2017-10-13 10:58:20.832   >>>>>> Starting 2nd phase cleanup for Malwarebytes version 3.2.2.2018 <<<<<<
2017-10-13 10:58:20.832   Trying to stop service: ESProtectionDriver
2017-10-13 10:58:20.863   Service: ESProtectionDriver was stopped successfully
2017-10-13 10:58:20.880   Trying to delete file or folder: C:\WINDOWS\system32\drivers\mbae64.sys
2017-10-13 10:58:20.881   Trying to delete REG key: HKLM\SYSTEM\CurrentControlSet\Services\ESProtectionDriver
2017-10-13 10:58:20.882   HKLM\SYSTEM\CurrentControlSet\Services\MBAMChameleon does not exist.
2017-10-13 10:58:20.883   HKLM\SYSTEM\CurrentControlSet\Services\MBAMFarflt does not exist.
2017-10-13 10:58:20.884   HKLM\SYSTEM\CurrentControlSet\Services\MBAMProtection does not exist.
2017-10-13 10:58:20.885   HKLM\SYSTEM\CurrentControlSet\Services\MBAMService does not exist.
2017-10-13 10:58:20.885   Trying to delete REG key: HKLM\SYSTEM\CurrentControlSet\Services\MBAMSwissArmy
2017-10-13 10:58:20.885   Trying to delete REG key: HKLM\SYSTEM\CurrentControlSet\Services\MBAMWebProtection

 

Somehow the self-protection module got deleted. Don't know how but it doesn't matter because now it's working again. Thanks! I'll keep an eye on it now... Is there a way to log the workings?

[Firefox]

So I am assuming you performed step #1 from my instructions above?  That performed an uninstall and re-install of MB3.  This fixes a lot of issues such as the one you were having.

[FranClod3]

5 hours ago, Firefox said:

So I am assuming you performed step #1 from my instructions above?  That performed an uninstall and re-install of MB3.  This fixes a lot of issues such as the one you were having.

Yes and I also followed the instruction on the pinned post with the downloads. 

[Firefox]

Great, that would have solved your issue, if it had not I would have asked you to post the logs in step #2

[FranClod3]

I'm waiting with baited breath to see what's following tomorrow. Had not turned off the computer since the last reboot. So don't know if it will come back tomorrow. Friday the 13th is really weird with my computer. Don't know why but it is.

[FranClod3]

Since last week the computer has been working ok. Had to temporarily uninstall the software to install another software. that decided not to install with MW on the system and it's a well- known Antivirus software. Question: Why don't software company learn to play nice with each other?