Jump to content

Real Time Protection layers turned off

Recommended Posts

Hello and Welcome

Let's try this first.... (Malwarebytes clean removal tool will backup your license information and then re-enter the license to the new install)

  1. Please follow the steps in this pinned topic to uninstall your current version of MBAM and reinstall the latest build - Malwarebytes mb-clean tool (NOTE: After uninstalling with the mb-clean tool you will be asked to reboot. Once you reboot it will ask you if you want to re-install Malwarebytes, you can select YES (it will download the latest version) or you can download the latest version manually (currently v3.2.2.2029 CU 1.0.212) to re-install from HERE)
  2. If that does not correct the issue, then please read the following and attach to your next reply the requested logs - Diagnostic Logs (after you run all the tools requested, all the logs will be combined into one log file named: mb-check-results.zip located on your Desktop (which will include the FRST logs inside the zip file))
  3. NOTE: More info about the latest Malwarebytes 3.2.2 HERE; MB 3 User Guide ONLINE; MB 3 User Guide PDF; MB 3 FAQ: Malwarebytes 3.0 - Frequently Asked Questions

Please let us know how it goes.

Thank You,


Link to post
Share on other sites

This is what I found in the mb-clean up log: 2017-10-13 10:57:31.790   mb-clean:  @ Malwarebytes. All rights reserved.
2017-10-13 10:57:37.806   Malwarebytes self-protection module is not installed.
2017-10-13 10:57:37.806   Launching process:"C:\Program Files\Malwarebytes\Anti-Malware\unins000.exe" /LOG /VERYSILENT /SUPPRESSMSGBOXES /NORESTART /log="C:\Users\Fran\AppData\Local\Temp\Mbam3x.log"
2017-10-13 10:58:20.832   >>>>>> Starting 2nd phase cleanup for Malwarebytes version <<<<<<
2017-10-13 10:58:20.832   Trying to stop service: ESProtectionDriver
2017-10-13 10:58:20.863   Service: ESProtectionDriver was stopped successfully
2017-10-13 10:58:20.880   Trying to delete file or folder: C:\WINDOWS\system32\drivers\mbae64.sys
2017-10-13 10:58:20.881   Trying to delete REG key: HKLM\SYSTEM\CurrentControlSet\Services\ESProtectionDriver
2017-10-13 10:58:20.882   HKLM\SYSTEM\CurrentControlSet\Services\MBAMChameleon does not exist.
2017-10-13 10:58:20.883   HKLM\SYSTEM\CurrentControlSet\Services\MBAMFarflt does not exist.
2017-10-13 10:58:20.884   HKLM\SYSTEM\CurrentControlSet\Services\MBAMProtection does not exist.
2017-10-13 10:58:20.885   HKLM\SYSTEM\CurrentControlSet\Services\MBAMService does not exist.
2017-10-13 10:58:20.885   Trying to delete REG key: HKLM\SYSTEM\CurrentControlSet\Services\MBAMSwissArmy
2017-10-13 10:58:20.885   Trying to delete REG key: HKLM\SYSTEM\CurrentControlSet\Services\MBAMWebProtection


Somehow the self-protection module got deleted. Don't know how but it doesn't matter because now it's working again. Thanks! I'll keep an eye on it now... Is there a way to log the workings?

Link to post
Share on other sites

5 hours ago, Firefox said:

So I am assuming you performed step #1 from my instructions above?  That performed an uninstall and re-install of MB3.  This fixes a lot of issues such as the one you were having.

Yes and I also followed the instruction on the pinned post with the downloads. 

Link to post
Share on other sites

Since last week the computer has been working ok. Had to temporarily uninstall the software to install another software. that decided not to install with MW on the system and it's a well- known Antivirus software. Question: Why don't software company learn to play nice with each other?  

Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.