JDave Posted January 5, 2018 ID:1197101 Share Posted January 5, 2018 Hi, having issues with real time web protection stopping very soon after start up. I have tried a re-install, not fixed. I have run the check utility and have attached the zip (hope it is done correctly). Is anyone able to help with this? Thanks mb-check-results.zip Link to post Share on other sites More sharing options...
Porthos Posted January 5, 2018 ID:1197102 Share Posted January 5, 2018 7 minutes ago, JDave said: I have tried a re-install This time follow the below to reinstall. Let us get a clean install of the current version. 3.3.1 We have another tool called MB-Clean which will automate the whole process for you. Tool can be found at https://downloads.malwarebytes.com/file/mb_clean 1. After downloading the tool run the tool. 2. The tool will automatically clean up the older possibly damaged installation and will ask you for a restart. 3. Restart your system and then the MB-Clean tool will prompt you to re-install the latest product . 4. Click on "Yes" to reinstall MB 3.×. 5. Now you will have the latest product installed. If it does not offer the new install after the reboot you can download and install from here. https://downloads.malwarebytes.org/file/mb3 Please let me know if you are still seeing issues after the latest product install. Link to post Share on other sites More sharing options...
JDave Posted January 5, 2018 Author ID:1197112 Share Posted January 5, 2018 Hi Porthos, thanks for your help with this. Clean tool ran fine and auto installed again. Ran a scan and half way through the scan, real time web protection turned off again. Does this file generated by mb clean help? mb-clean-results.txt Link to post Share on other sites More sharing options...
Porthos Posted January 5, 2018 ID:1197113 Share Posted January 5, 2018 1 minute ago, JDave said: Does this file generated by mb clean help? Let's try and get some logs first so the team can review them and see if they can tell what may be causing your issues.... FIRST: Create and obtain Farbar Recovery Scan Tool (FRST) logs Download FRST and save it to your desktop. Tell any program that blocks it to ignore or allow. It IS SAFE. It contains no info that can identify or harm you. NOTE: You need to run the version compatible with your system. You can check here if you're not sure if your computer is 32-bit or 64-bit Double-click to run FRST and when the tool opens click "Yes" to the disclaimer Press the "Scan" button This will produce two files in the same location (directory) as FRST: FRST.txt and Addition.txtNOTE: These two files will be collected by the MB-Check Tool and added to the zip file for you NEXT: Create and obtain an mb-check log Download MB-Check and save to your desktop Double-click to run MB-Check and within a few second the command window will open, then click "OK" This will produce one log file on your desktop: mb-check-results.zip Attach this file to your forum post by clicking on the "Drag files here to attach, or choose files..." or simply drag the file to the attachment area Link to post Share on other sites More sharing options...
JDave Posted January 5, 2018 Author ID:1197120 Share Posted January 5, 2018 Ran step by step, this was the result: mb-check-results.zip Link to post Share on other sites More sharing options...
Porthos Posted January 5, 2018 ID:1197123 Share Posted January 5, 2018 13 minutes ago, JDave said: Ran a scan and half way through the scan, real time web protection turned off again. Open MB and turn on rootkit scan and run another scan while I look at the logs. Link to post Share on other sites More sharing options...
JDave Posted January 5, 2018 Author ID:1197125 Share Posted January 5, 2018 Thanks for the fast replys. Re-scaned with clean results. My system is rather lean as was a recent re-installation, no other anti virus (other than defender), and only a couple of programs that I believe should be safe and reliable. Link to post Share on other sites More sharing options...
Porthos Posted January 5, 2018 ID:1197127 Share Posted January 5, 2018 Quote C:\Windows\system32\drivers\ksaud.sys [2116728 2017-07-05] (Creative Technology Ltd.) You might want to go to the Creative site and update your sound driver. I belive there are reports of some creative drivers causing issues. Link to post Share on other sites More sharing options...
Porthos Posted January 6, 2018 ID:1197133 Share Posted January 6, 2018 12 minutes ago, JDave said: no other anti virus (other than defender) That is what I use for all my clients and myself. I would like you to add these files to your Anti-Virus exclusions list as mentioned in this FAQ HERE (my list below includes the exe files as well) Add to MB exclusions the following folders. C:\Program Files\Windows Defender C:\Program Files (x86)\Windows Defender C:\ProgramData\Microsoft\Windows Defender (Hidden folder) For Win 10 PRO also add these Folders. C:\Program Files\Windows Defender Advanced Threat Protection C:\ProgramData\Microsoft\Windows Defender Advanced Threat Protection (Hidden folder) For DefenderAdd these to FILE exclusions C:\Windows\System32\drivers\mbae64.sys C:\Windows\System32\drivers\mbam.sys C:\Windows\System32\drivers\MBAMChameleon.sys C:\Windows\System32\drivers\MBAMSwissArmy.sys C:\Windows\System32\drivers\mwac.sys C:\Windows\system32\Drivers\farflt.sys Add to Process exclusions the following files. (copy and paste works best on these) C:\Program Files\Malwarebytes\Anti-Malware\MbamPt.exe C:\Program Files\Malwarebytes\Anti-Malware\mbam.exe C:\Program Files\Malwarebytes\Anti-Malware\assistant.exe C:\Program Files\Malwarebytes\Anti-Malware\MBAMWsc.exe C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe C:\Program Files\Malwarebytes\Anti-Malware\malwarebytes_assistant C:\Program Files\Malwarebytes\Anti-Malware\mbamwow.exe Folders Also the MB folder in Program Files and the one in Program Data (it is hidden by default) C:\Program Files\Malwarebytes C:\ProgramData\Malwarebytes (Enable hidden files to add this one.) Link to post Share on other sites More sharing options...
JDave Posted January 6, 2018 Author ID:1197137 Share Posted January 6, 2018 The creative driver is from 2014 for my external sound card. (I was running the driver supplied through win 10) Tried running the installer got an error and it closed, ran as as admin got further but same error: 'Unable to load CTCabEx.dll' followed by another 'DoIstall fails to launch, C:\\Windows\temp\CRF001\Audio\Register\SETUP.INX. , DoInstall return error code is-2147213312' I think this is due to incompatabillity with win 10. Will try the exclusions etc mentioned above now. Link to post Share on other sites More sharing options...
Porthos Posted January 6, 2018 ID:1197139 Share Posted January 6, 2018 (edited) 8 minutes ago, JDave said: The creative driver is from 2014 for my external sound card. Is this the only sound you have? What model is it? Edited January 6, 2018 by Porthos Link to post Share on other sites More sharing options...
JDave Posted January 6, 2018 Author ID:1197141 Share Posted January 6, 2018 Other than the on board audio that I have never used or even tested (4ish year old PC). Model: Sound Blaster X-Fi HD Still doing the exclussions at the mo. Link to post Share on other sites More sharing options...
Porthos Posted January 6, 2018 ID:1197147 Share Posted January 6, 2018 12 minutes ago, JDave said: Sound Blaster X-Fi HD The windows 8 drivers should work. Be sure to choose the correct SB# for yours. http://support.creative.com/kb/showarticle.aspx?sid=61105&_ga=1.179286439.285814355.1456985269 Link to post Share on other sites More sharing options...
JDave Posted January 6, 2018 Author ID:1197151 Share Posted January 6, 2018 That is the one I was attempting to install. I seem to remember attempting to install it on my first install of 10 (when it first came out) and it did not work then either, and just stuck with what windows update auto installed for it (no bloat software, just drivers). After adding the exclusions I have rebooted and run a scan, web protection still active after about 10 mins (longest yet today). Strange how this just started today.... Link to post Share on other sites More sharing options...
Porthos Posted January 6, 2018 ID:1197157 Share Posted January 6, 2018 5 minutes ago, JDave said: Strange how this just started today.... When did this update install? Cumulative Update KB4056892 Windows 10 v1709 Build 16299.192 Check your update history. Link to post Share on other sites More sharing options...
JDave Posted January 6, 2018 Author ID:1197161 Share Posted January 6, 2018 Yesterday, it must have installed when i shut it down at the end of the day. Good old Microsoft probably at fault then. I suppose MB will have to figure a work around for Microsofts fumble... Still running fine, Thank you so much for your help. Link to post Share on other sites More sharing options...
Porthos Posted January 6, 2018 ID:1197164 Share Posted January 6, 2018 6 minutes ago, JDave said: Still running fine, Thank you so much for your help. Glad I could help, Post again if you need any more help. Anyone else reading this topic and need assistance, Please START your OWN Topic. Link to post Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now