Dublin70 Posted December 20, 2017 ID:1193166 Share Posted December 20, 2017 Don't know how else to title this post - I am running the latest version of MW3 on win 7 and have the constant recurring problem of protection not being enabled. So I manually enable. Then suddenly last week, protection cured itself somehow. For a week it loaded on start up and all fine and dandy. A couple of days ago, Avira AV advised me to run a full system scan as it has noted registry intrusion as I was on the net. So I did just that (with no infection to registry in scan results) and now the protections are disabled on start up again and I have to manually start them. Do you suppose the Avira program is conflicting with MW3? I am thinking of uninstalling it as I have always wondered if it didn't work with Malwarebytes. Any thoughts would be appreciated. Thanks. Link to post Share on other sites More sharing options...
Porthos Posted December 20, 2017 ID:1193174 Share Posted December 20, 2017 (edited) 43 minutes ago, Dublin70 said: Any thoughts would be appreciated. 43 minutes ago, Dublin70 said: I am thinking of uninstalling it as I have always wondered if it didn't work with Malwarebytes. @Dublin70 I hate to suggest an uninstall of an AV without trying to find a solution but I see you have had some issues with Avira before. Let's try and get some logs first so the team can review them and see if they can tell what may be causing your issues.... FIRST: Create and obtain Farbar Recovery Scan Tool (FRST) logs Download FRST and save it to your desktop. Tell any program that blocks it to ignore or allow. It IS SAFE. It contains no info that can identify or harm you. NOTE: You need to run the version compatible with your system. You can check here if you're not sure if your computer is 32-bit or 64-bit Double-click to run FRST and when the tool opens click "Yes" to the disclaimer Press the "Scan" button This will produce two files in the same location (directory) as FRST: FRST.txt and Addition.txtNOTE: These two files will be collected by the MB-Check Tool and added to the zip file for you NEXT: Create and obtain an mb-check log Download MB-Check and save to your desktop Double-click to run MB-Check and within a few second the command window will open, then click "OK" This will produce one log file on your desktop: mb-check-results.zip Attach this file to your forum post by clicking on the "Drag files here to attach, or choose files..." or simply drag the file to the attachment area Edited December 20, 2017 by Porthos Link to post Share on other sites More sharing options...
Dublin70 Posted December 20, 2017 Author ID:1193275 Share Posted December 20, 2017 Here are logs. Thanks. mb-check-results.zip Link to post Share on other sites More sharing options...
Porthos Posted December 20, 2017 ID:1193278 Share Posted December 20, 2017 10 minutes ago, Dublin70 said: Here are logs. Thanks. Quote HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\appCompatFlags\Layers C:\Program Files\Malwarebytes\Anti-Malware\mbam.exe REG_SZ ELEVATECREATEPROCESS To start with Go to the folder C:\Program Files\Malwarebytes\Anti-Malware\ Find the file mbam.exe and right click on it and choose Properties In the window that pops up click on Compatibility Tab Remove any changes there that don't match my picture below and click OK Also, you need to run all of the tools from the ADMIN account. Please get a new set of logs after you fix the below. Link to post Share on other sites More sharing options...
Dublin70 Posted December 20, 2017 Author ID:1193291 Share Posted December 20, 2017 New logs as admin. Also compatibility mode - nothing checked as in your pict. Thanks again. mb-check-results.zip Link to post Share on other sites More sharing options...
Porthos Posted December 20, 2017 ID:1193297 Share Posted December 20, 2017 22 minutes ago, Dublin70 said: New logs as admin. I know in your previous topics/posts you said you have done all the Avira exclusions for MB. Please recheck your exclusions. Also ad Avira folders to the MB exclusion list. C:\Program Files\Malwarebytes\Anti-Malware\assistant.exe C:\Program Files\Malwarebytes\Anti-Malware\malwarebytes_assistant.exe C:\Program Files\Malwarebytes\Anti-Malware\mbam.exe C:\Program Files\Malwarebytes\Anti-Malware\MbamPt.exe C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe C:\Program Files\Malwarebytes\Anti-Malware\MBAMWsc.exe C:\Windows\system32\Drivers\farflt.sys C:\Windows\System32\drivers\mbae64.sys C:\Windows\System32\drivers\mbam.sys C:\Windows\System32\drivers\MBAMChameleon.sys C:\Windows\System32\drivers\MBAMSwissArmy.sys C:\Windows\System32\drivers\mwac.sys Also please exclude the following folders too: (The complete folder) C:\Program Files\Malwarebytes\Anti-Malware C:\ProgramData\Malwarebytes\MBAMService Link to post Share on other sites More sharing options...
Dublin70 Posted December 20, 2017 Author ID:1193312 Share Posted December 20, 2017 ok. will do. thanks. Link to post Share on other sites More sharing options...
Porthos Posted December 20, 2017 ID:1193313 Share Posted December 20, 2017 I also suggest installing the following. Link to post Share on other sites More sharing options...
Dublin70 Posted December 21, 2017 Author ID:1193443 Share Posted December 21, 2017 A couple of things: Tried to d.l. the application update but the link said - this file type may not be supported.?? Also, entered all the MWB exclusions but when I tried the Avira and the Windows exclusions, the files just wanted to open in both cases. I tried right clicking but that didn't work. Don't know what to do now. Thanks. Link to post Share on other sites More sharing options...
Porthos Posted December 21, 2017 ID:1193445 Share Posted December 21, 2017 9 minutes ago, Dublin70 said: . the application update but the link said - this file type may not be supported.?? Link to post Share on other sites More sharing options...
Dublin70 Posted December 21, 2017 Author ID:1193477 Share Posted December 21, 2017 Downloaded and installed. Thanks. Link to post Share on other sites More sharing options...
Dublin70 Posted December 21, 2017 Author ID:1193504 Share Posted December 21, 2017 So far - so good. Did all of suggested cures and have rebooted a couple of times. All comes up fine but I'll let you know. Thanks for your help. Link to post Share on other sites More sharing options...
Dublin70 Posted December 24, 2017 Author ID:1194312 Share Posted December 24, 2017 All working fine until a day ago. Avira had an issue with registry being "attacked" (my word) - since then I find the orange alert about disabled protection when I boot up. I think I will uninstall it and put Avast on. Also, keep in mind that I could not exclude the Avira and Windows folders as mentioned a couple of posts back. Perhaps those exclusions would make it all work but files just want to open when I click on them to copy/paste into MW3 exclusion area. Thanks. Link to post Share on other sites More sharing options...
KenW Posted December 24, 2017 ID:1194315 Share Posted December 24, 2017 You don't copy/past. You just select files or folders from the list. Link to post Share on other sites More sharing options...
Dublin70 Posted December 25, 2017 Author ID:1194390 Share Posted December 25, 2017 When I select the file - as in Windows - it just wants to open the file. EDIT: I see - select "folder". Guess I didn't see that when attempting to enter the exclusions. Link to post Share on other sites More sharing options...
Dublin70 Posted December 25, 2017 Author ID:1194398 Share Posted December 25, 2017 I added the Windows and Avira to the exclusions but still no deal. After rebooting, orange alert still comes up and I have to manually start protection. Think I'll take Avira off if I don't hear back from anybody. Thanks. Link to post Share on other sites More sharing options...
Dublin70 Posted December 25, 2017 Author ID:1194435 Share Posted December 25, 2017 I decided to uninstall Avira as I thought maybe it was causing a conflict with MW3. Sooo, I disabled Avira, and installed Avast. In the process of installing Avast, the following blocks came up -- FRAUD onclickads.net and Malware popcash.net. Would this have happened because Avira was disabled or is Avast trying to load stuff onto my pc? As I said both were blocked but I am confused as to what's going on. Any thoughts? Thanks. Link to post Share on other sites More sharing options...
dcollins Posted December 25, 2017 ID:1194441 Share Posted December 25, 2017 (edited) @Dublin70 were you able to add all the drivers successfully? Sometimes you have to use the c:\windows\sysnative\drivers path if the application you're using doesn't disable redirections As for the blocks, we'd need to see logs to understand where it came from. Edited December 25, 2017 by dcollins Link to post Share on other sites More sharing options...
Dublin70 Posted December 25, 2017 Author ID:1194518 Share Posted December 25, 2017 I believe so. I'll check tho. Will send logs tomorrow. After uninstalling Avira, MW3 seems to load correctly. Again. things seem to work right after different fixes are applied and then a couple of days later, the orange alert comes up. I do think it was the Avira conflict so we'll see. Thanks very much. Link to post Share on other sites More sharing options...
Dublin70 Posted December 26, 2017 Author ID:1194603 Share Posted December 26, 2017 (edited) Here are the logs for the two blocks: fraud.txt mal.txt Edited December 26, 2017 by Dublin70 failed download - redone ok Link to post Share on other sites More sharing options...
Dublin70 Posted December 29, 2017 Author ID:1195305 Share Posted December 29, 2017 Could someone look at these logs as requested. I got a whole bunch of the same ones blocked again in the last couple of days. What is the source of this bad stuff. I noticed that they appeared when I was installing Avast. I sure hope they're not carrying this stuff in their software. Thanks. Link to post Share on other sites More sharing options...
dcollins Posted December 29, 2017 ID:1195330 Share Posted December 29, 2017 It's hard to say where the connections are coming from since there's no process identifier on them. Can you upload a new set of mb-check-results logs as it will contain a bit more information about the blocks Link to post Share on other sites More sharing options...
Dublin70 Posted December 29, 2017 Author ID:1195403 Share Posted December 29, 2017 New logs mb-check-results.zip Link to post Share on other sites More sharing options...
Dublin70 Posted January 2, 2018 Author ID:1196022 Share Posted January 2, 2018 Hi - hate to bug you busy folks but I keep getting blocks for the same two attempts on my desktop. Fortunately, they are being blocked but I'm not sure what to do about them. I wrote on the Avast forum about them and a response was: "where did you d.l. from"? I d.l. from the Avast site so don't know what that info will do to aid in this. Thanks. Link to post Share on other sites More sharing options...
Porthos Posted January 2, 2018 ID:1196031 Share Posted January 2, 2018 32 minutes ago, Dublin70 said: I'm not sure what to do about them. Blocks fro MB or Avast? Link to post Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now