Ransomware Protection Turned Off and Won't Turn On

[Ginny4100]

My Protection Settings won't turn the Ransomware Protection setting on. My account is less than 30 days old. We run on Windows 7.

[nikhils]

Hello @Ginny4100

Can you please follow the forum post below and send us the logs:

 

[Ginny4100]

Malwarebytes
www.malwarebytes.com

-Log Details-
Scan Date: 11/3/17
Scan Time: 11:27 AM
Log File: ecfafc40-c0b3-11e7-8fb0-90e6ba8c00b6.json
Administrator: Yes

-Software Information-
Version: 3.2.2.2029
Components Version: 1.0.212
Update Package Version: 1.0.3166
License: Premium

-System Information-
OS: Windows 7 Service Pack 1
CPU: x86
File System: NTFS
User: Lyle-PC\Lyle

-Scan Summary-
Scan Type: Threat Scan
Result: Completed
Objects Scanned: 292075
Threats Detected: 38
Threats Quarantined: 38
Time Elapsed: 9 min, 37 sec

-Scan Options-
Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Detect
PUM: Detect

-Scan Details-
Process: 0
(No malicious items detected)

Module: 0
(No malicious items detected)

Registry Key: 0
(No malicious items detected)

Registry Value: 0
(No malicious items detected)

Registry Data: 0
(No malicious items detected)

Data Stream: 0
(No malicious items detected)

Folder: 7
PUP.Optional.MindSpark, C:\Users\Lyle\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\13.300.12.6683_0\_metadata, Quarantined, [262], [322621],1.0.3166
PUP.Optional.MindSpark, C:\Users\Lyle\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\13.300.12.6683_0\config, Quarantined, [262], [322621],1.0.3166
PUP.Optional.MindSpark, C:\Users\Lyle\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\13.300.12.6683_0\icons, Quarantined, [262], [322621],1.0.3166
PUP.Optional.MindSpark, C:\Users\Lyle\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\13.300.12.6683_0\libs, Quarantined, [262], [322621],1.0.3166
PUP.Optional.MindSpark, C:\Users\Lyle\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\13.300.12.6683_0\js, Quarantined, [262], [322621],1.0.3166
PUP.Optional.MindSpark, C:\Users\Lyle\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\13.300.12.6683_0, Quarantined, [262], [322621],1.0.3166
PUP.Optional.MindSpark, C:\USERS\LYLE\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\EXTENSIONS\MALLPEJGEAFDAHHFLMLIIAHJDPGBEGPK, Quarantined, [262], [322621],1.0.3166

File: 31
PUP.Optional.MindSpark, C:\Users\Lyle\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\13.300.12.6683_0\config\config.json, Quarantined, [262], [322621],1.0.3166
PUP.Optional.MindSpark, C:\Users\Lyle\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\13.300.12.6683_0\icons\icon128.png, Quarantined, [262], [322621],1.0.3166
PUP.Optional.MindSpark, C:\Users\Lyle\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\13.300.12.6683_0\icons\icon16.png, Quarantined, [262], [322621],1.0.3166
PUP.Optional.MindSpark, C:\Users\Lyle\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\13.300.12.6683_0\icons\icon19disabled.png, Quarantined, [262], [322621],1.0.3166
PUP.Optional.MindSpark, C:\Users\Lyle\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\13.300.12.6683_0\icons\icon19on.png, Quarantined, [262], [322621],1.0.3166
PUP.Optional.MindSpark, C:\Users\Lyle\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\13.300.12.6683_0\icons\icon48.png, Quarantined, [262], [322621],1.0.3166
PUP.Optional.MindSpark, C:\Users\Lyle\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\13.300.12.6683_0\js\ajax.js, Quarantined, [262], [322621],1.0.3166
PUP.Optional.MindSpark, C:\Users\Lyle\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\13.300.12.6683_0\js\background.js, Quarantined, [262], [322621],1.0.3166
PUP.Optional.MindSpark, C:\Users\Lyle\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\13.300.12.6683_0\js\chrome.js, Quarantined, [262], [322621],1.0.3166
PUP.Optional.MindSpark, C:\Users\Lyle\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\13.300.12.6683_0\js\content_script.js, Quarantined, [262], [322621],1.0.3166
PUP.Optional.MindSpark, C:\Users\Lyle\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\13.300.12.6683_0\js\dlp.js, Quarantined, [262], [322621],1.0.3166
PUP.Optional.MindSpark, C:\Users\Lyle\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\13.300.12.6683_0\js\dlpHelper.js, Quarantined, [262], [322621],1.0.3166
PUP.Optional.MindSpark, C:\Users\Lyle\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\13.300.12.6683_0\js\dynamicNewTab.js, Quarantined, [262], [322621],1.0.3166
PUP.Optional.MindSpark, C:\Users\Lyle\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\13.300.12.6683_0\js\extension_detect.js, Quarantined, [262], [322621],1.0.3166
PUP.Optional.MindSpark, C:\Users\Lyle\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\13.300.12.6683_0\js\index.js, Quarantined, [262], [322621],1.0.3166
PUP.Optional.MindSpark, C:\Users\Lyle\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\13.300.12.6683_0\js\logger.js, Quarantined, [262], [322621],1.0.3166
PUP.Optional.MindSpark, C:\Users\Lyle\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\13.300.12.6683_0\js\pageUtils.js, Quarantined, [262], [322621],1.0.3166
PUP.Optional.MindSpark, C:\Users\Lyle\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\13.300.12.6683_0\js\storage.js, Quarantined, [262], [322621],1.0.3166
PUP.Optional.MindSpark, C:\Users\Lyle\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\13.300.12.6683_0\js\TabManager.js, Quarantined, [262], [322621],1.0.3166
PUP.Optional.MindSpark, C:\Users\Lyle\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\13.300.12.6683_0\js\TemplateParser.js, Quarantined, [262], [322621],1.0.3166
PUP.Optional.MindSpark, C:\Users\Lyle\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\13.300.12.6683_0\js\ul.js, Quarantined, [262], [322621],1.0.3166
PUP.Optional.MindSpark, C:\Users\Lyle\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\13.300.12.6683_0\js\urlFragmentActions.js, Quarantined, [262], [322621],1.0.3166
PUP.Optional.MindSpark, C:\Users\Lyle\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\13.300.12.6683_0\js\urlUtils.js, Quarantined, [262], [322621],1.0.3166
PUP.Optional.MindSpark, C:\Users\Lyle\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\13.300.12.6683_0\js\util.js, Quarantined, [262], [322621],1.0.3166
PUP.Optional.MindSpark, C:\Users\Lyle\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\13.300.12.6683_0\js\webtooltabAPI.js, Quarantined, [262], [322621],1.0.3166
PUP.Optional.MindSpark, C:\Users\Lyle\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\13.300.12.6683_0\libs\PartnerId.js, Quarantined, [262], [322621],1.0.3166
PUP.Optional.MindSpark, C:\Users\Lyle\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\13.300.12.6683_0\_metadata\verified_contents.json, Quarantined, [262], [322621],1.0.3166
PUP.Optional.MindSpark, C:\Users\Lyle\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\13.300.12.6683_0\dynamicNewTab.html, Quarantined, [262], [322621],1.0.3166
PUP.Optional.MindSpark, C:\Users\Lyle\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk\13.300.12.6683_0\manifest.json, Quarantined, [262], [322621],1.0.3166
PUP.Optional.MindSpark, C:\USERS\LYLE\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\Secure Preferences, Replaced, [262], [322621],1.0.3166
PUP.Optional.MindSpark, C:\USERS\LYLE\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\Preferences, Replaced, [262], [322621],1.0.3166

Physical Sector: 0
(No malicious items detected)

(end)

[Porthos]

@Ginny4100

That was not the logs we needed. But since there is a new version...

Let us get a clean install of the current version.

We have another tool called MB-Clean which will automate the whole process for you.

 Tool can be found at https://downloads.malwarebytes.com/file/mb_clean

1. After downloading the tool run the tool.

2. The tool will automatically clean up the older possibly damaged installation and will ask you for a restart.

3. Restart your system and then the MB-Clean tool will prompt you to re-install the latest product .

4. Click on "Yes" to reinstall MB 3.×.

5. Now you will have the latest product installed. If it does not offer the new install after the reboot you can download and install from here. 

https://downloads.malwarebytes.org/file/mb3

 

Please let me know if you are still seeing issues after the latest product install.

if that does not fix the issue please do the below.

1. FIRST: Create and obtain Farbar Recovery Scan Tool (FRST) logs
2. Download FRST and save it to your desktop
   NOTE: You need to run the version compatible with your system. You can check here if you're not sure if your computer is 32-bit or 64-bit
3. Double-click to run FRST and when the tool opens click "Yes" to the disclaimer
4. Press the "Scan" button
5. This will product two files in the same location (directory) as FRST: FRST.txt and Addition.txt
   NOTE: These two files will be collected by the MB-Check Tool and added to the zip file for you
6. NEXT: Create and obtain an mb-check log
7. Download MB-Check and save to your desktop
8. Double-click to run MB-Check and within a few second the command window will open, then click "OK"
9. This will produce one log file on your desktop: mb-check-results.zip
10. Attach this file to your forum post by clicking on the "Drag files here to attach, or choose files..." or simply drag the file to the attachment area

 

[Porthos]

OP sent pm

6 minutes ago, Ginny4100 said:

Thank you for the Malwarebytes clean-up info. It seems to have worked at this time. Sorry for the roundabout messaging--I'm so inept I couldn't even figure out how to continue my thread in Forum. Pretty sad, to use the Pres's favorite word. Ginny4100