Jump to content

Real-Time Protection turned off

compaqutor
 Share

Recommended Posts

pmcjr

pmcjr

Posted
Posted

nikhils....I had this problem this morning out of the blue Malware Protection turned off and wouldn't turn on.  I decided to try what you recommended about and it worked for me also.  What would have caused this?  I upgraded to 3.3 a few weeks ago with no problems.

Link to post
Share on other sites
pmcjr

pmcjr

Posted
Posted
1 hour ago, pmcjr said:

nikhils....I had this problem this morning out of the blue Malware Protection turned off and wouldn't turn on.  I decided to try what you recommended about and it worked for me also.  What would have caused this?  I upgraded to 3.3 a few weeks ago with no problems.

nikhils...I should add that Malware Protection was off after I rebooted from a PUP quarantine following my morning scan.  Apparently something in that sequence turned MP off.  Question...is the installer link you posted above kept updated to always be for the most current 3.3 version?

Link to post
Share on other sites
pmcjr

pmcjr

Posted
Posted
2 hours ago, nikhils said:

Hello @pmcjr

The beta build  that  @Porthos sent out has the fix for the Real time protection not starting.

What was happening was there was a bad update due to which the web protection driver was stuck in a race condition and would not start.

The latest beta should have the fix.

Thank you.

nikhils.... I used the installer link you sent out earlier in this posting.  It fixed my Real Time Malware Protection not starting, but it was for component package 1.0.236  and not 1.0.261 that Becky says is the new Beta build.  Since I did not opt in for new Beta builds, I tried  Settings>Application>Install Application Updates, but it said I was up to date with 1.0.236.  I didn't see where anyone posted a specific Beta installer link.

Link to post
Share on other sites
pmcjr

pmcjr

Posted
Posted
1 hour ago, nikhils said:

Hello @pmcjr

This is the setting:

image.png.bfc701302b181768b3f61fa506f76484.png

nikhils....thank you.  I thought  I pretty well knew the Settings, but I never saw or paid attention to this particular setting.  This does explain how to "opt in" to Beta updates.  I didn't know what Becky was talking about.  I take it if you switch this ON, then the Install Application Updates up in the Application Updates setting would apply to Beta updates as well?  Becky did say you could manually do the Beta update via this setting....as I understood it.

Link to post
Share on other sites
amicone

amicone

Posted
Posted (edited)

2017-11-30_15-31-23.png.71c2117310c0a72d5c9f43b1ebbe6fc6.png

Yup this again. I have latest version of MB and Kaspersky on win10. I haven't seen this error in a long time, but it seems to have reappeared again. Current fix? I'm not too keen on turning on beta updates, as beta updates usually reward me with lost productivity, in opposition to stable builds.

mb-check-results.zip

Edited by amicone
Link to post
Share on other sites
Porthos

Porthos

Posted
Posted
4 minutes ago, amicone said:

I have latest version of MB and Kaspersky on win10

I've seen a few reports of Kaspersky's rootkit scanning blocking our protection layers. Could you try the following:

  • Open the Kaspersky Software.
  • Click on Settings.
  • Click on Performance on the left.
  • Uncheck Perform regular rootkit scan
    • It may also be labeled "Search for software that is intended to conceal traces of a malicious program in the system"
  • Reboot

Also, remove the following and instead of using the browse feature, type out these locations manually as there may be an issue where exclusions don't get set for these files when using the browse feature:

  • C:\Windows\sysnative\drivers\mbam.sys
  • C:\Windows\sysnative\drivers\mwac.sys
  • C:\Windows\sysnative\drivers\mbamswissarmy.sys
  • C:\Windows\sysnative\drivers\mbamchameleon.sys
  • C:\Windows\sysnative\drivers\farflt.sys
  • C:\Windows\sysnative\drivers\mbae64.sys
Link to post
Share on other sites
amicone

amicone

Posted
Posted (edited)

Turning off rootkit scan might work, but considering MB seems to automatically turn off its rootkit scan when it is on the same machine as Kaspersky, I'm thinking that would leave me without rootkit protection. Is the idea to turn it off in Kaspersky and then on in MB?

I think I'll start with the exclusions, but there doesn't seem to be enough information there, as exclusions require a few parameters to work correctly:

image.png.c319ab0454425d4ae48e91751346d3fe.png

So that gives me the name of the files to put in as the exclusion, but not the object name, mask, or which protection components should be excluded for each component.

I also looked through the mb-check.zip and determined there was a program component in Kaspersky that cannot auto-update and required a new download. I installed that and rebooted. We'll see how long it holds, a reboot usually corrects the problem, but MB seems to switch off randomly, especially if you are logged in as a limited user.

26 minutes ago, Porthos said:

I've seen a few reports of Kaspersky's rootkit scanning blocking our protection layers. Could you try the following

  • Uncheck Perform regular rootkit scan
    • It may also be labeled "Search for software that is intended to conceal traces of a malicious program in the system"
  • Reboot

Also, remove the following and instead of using the browse feature, type out these locations manually as there may be an issue where exclusions don't get set for these files when using the browse feature:

  • C:\Windows\sysnative\drivers\mbam.sys
  • C:\Windows\sysnative\drivers\mwac.sys
  • C:\Windows\sysnative\drivers\mbamswissarmy.sys
  • C:\Windows\sysnative\drivers\mbamchameleon.sys
  • C:\Windows\sysnative\drivers\farflt.sys
  • C:\Windows\sysnative\drivers\mbae64.sys
 

 

Edited by amicone
Link to post
Share on other sites
incredable1

incredable1

Posted
Posted

I am avid user of Malwarebytes, have been since it's inception.  My subscription is premium. Operating system, Windows 10, Browser, Firefox.

My real time protection is off and will not restart. When scanning, it picks up the same malware all the time, and after deleting them, they are picked up again on the next scan.

I have reinstalled the program several times, to no avail. Problem keeps returning. At this time I need to remove Malwarebytes as it servers no purpose but to upset me.

I note that each user that has this problem on the forum is individually given the same fix solution. Some work, others do not.  So my question is, with a problem of this magnitude, why not have a PROVEN fix created by Malwarebytes, which would end this situation?

Link to post
Share on other sites
Porthos

Porthos

Posted
Posted
19 minutes ago, incredable1 said:

When scanning, it picks up the same malware all the time, and after deleting them, they are picked up again on the next scan.

Follow the instructions in this link to clear your current problem: https://forums.malwarebytes.com/topic/214325-chrome-secure-preferences-detection-always-comes-back/

Be aware there are two posts in that thread, if the first instruction does not help move onto the second....

Let me know if the issue is cleared...
 

Link to post
Share on other sites
incredable1

incredable1

Posted
Posted (edited)

Thank you for your quick response.  Please understand that I have done every thing that has been suggested that has been said to all those that wrote in about this problem. I DID IT ALL. The last reply was all about Chrome..... I said I use Firefox. That is why I mentioned that Malwarebytes engineers should develop a fix so that we can have the problem cured.

Edited by incredable1
Link to post
Share on other sites
Porthos

Porthos

Posted
Posted
35 minutes ago, incredable1 said:

The last reply was all about Chrome..... I said I use Firefox.

Let's try and get some logs first so the team can review them and see if they can tell what may be causing your issues....

  1. FIRST: Create and obtain Farbar Recovery Scan Tool (FRST) logs
  2. Download FRST and save it to your desktop
    NOTE: You need to run the version compatible with your system. You can check here if you're not sure if your computer is 32-bit or 64-bit
  3. Double-click to run FRST and when the tool opens click "Yes" to the disclaimer
  4. Press the "Scan" button
  5. This will product two files in the same location (directory) as FRST: FRST.txt and Addition.txt
    NOTE: These two files will be collected by the MB-Check Tool and added to the zip file for you
  6. NEXT: Create and obtain an mb-check log
  7. Download MB-Check and save to your desktop
  8. Double-click to run MB-Check and within a few second the command window will open, then click "OK"
  9. This will produce one log file on your desktop: mb-check-results.zip
  10. Attach this file to your forum post by clicking on the "Drag files here to attach, or choose files..." or simply drag the file to the attachment area
Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
 Share
Go to topic listing

  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.