Jump to content

Real Time Protection keeps being turned off


Recommended Posts

4 minutes ago, erewhon said:

Could you please help me fix this problem

:welcome:

Let's try and get some logs first so the team can review them and see if they can tell what may be causing your issues.... Please use an Administrator account when doing the following,

  1. FIRST: Create and obtain Farbar Recovery Scan Tool (FRST) logs
  2. Download FRST and save it to your desktop. Tell any program that blocks it to ignore or allow. It IS SAFE. It contains no info that can identify or harm you.
  3. NOTE: You need to run the version compatible with your system. You can check here if you're not sure if your computer is 32-bit or 64-bit
  4. Double-click to run FRST and when the tool opens click "Yes" to the disclaimer
  5. Press the "Scan" button
  6. This will produce two files in the same location (directory) as FRST: FRST.txt and Addition.txt
    NOTE: These two files will be collected by the MB-Check Tool and added to the zip file for you
  7. NEXT: Create and obtain an mb-check log
  8. Download MB-Check and save to your desktop
  9. Double-click to run MB-Check and within a few second the command window will open, then click "OK"
  10. This will produce one log file on your desktop: mb-check-results.zip
  11. Attach this file to your forum post by clicking on the "Drag files here to attach, or choose files..." or simply drag the file to the attachment area
Link to post
Share on other sites

5 hours ago, erewhon said:

David Gargan

I would like you to add these files to your Anti-Virus exclusions list as mentioned in this FAQ HERE (my list below includes the exe files as well) Please restart your computer you do this.

Add these to FILE exclusions

C:\Windows\System32\drivers\mbae64.sys
C:\Windows\System32\drivers\mbam.sys
C:\Windows\System32\drivers\MBAMChameleon.sys
C:\Windows\System32\drivers\MBAMSwissArmy.sys
C:\Windows\System32\drivers\mwac.sys
C:\Windows\system32\Drivers\farflt.sys

Add to Process exclusions the following files. (copy and paste works best on these)

C:\Program Files\Malwarebytes\Anti-Malware\MbamPt.exe
C:\Program Files\Malwarebytes\Anti-Malware\mbam.exe
C:\Program Files\Malwarebytes\Anti-Malware\assistant.exe
C:\Program Files\Malwarebytes\Anti-Malware\MBAMWsc.exe
C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
C:\Program Files\Malwarebytes\Anti-Malware\malwarebytes_assistant
C:\Program Files\Malwarebytes\Anti-Malware\mbamwow.exe

Folders
Also the MB folder in Program Files and the one in Program Data (it is hidden by default)

C:\Program Files\Malwarebytes
C:\ProgramData\Malwarebytes   (Enable hidden files to add this one.)

Next after doing the exclusions.

Let us get a clean install of the current version.

 

We have another tool called MB-Clean which will automate the whole process for you.

 

The clean removal tool will backup your license information and then re-enter the license to the new install.

  Tool can be found at https://downloads.malwarebytes.com/file/mb_clean

 

1. After downloading the tool run the tool.

2. The tool will automatically clean up the older possibly damaged installation and will ask you for a restart.

3. Restart your system and then the MB-Clean tool will prompt you to re-install the latest product.

4. Click on "Yes" to reinstall MB 3.×.

5. Now you will have the latest product installed.

 If it does not offer the new install after the reboot you can download and install from here. 

https://downloads.malwarebytes.org/file/mb3  

 

Please report back after.

Link to post
Share on other sites

Hi @Porthos, I had the same issue as OP,  I ran the clean removal tool and RTP settings are working again.  Prior to Christmas I reinstalled it from scratch, it worked a while and stopped today. Will keep you posted on outcome!

 

Are there instructions on adding file exclusions, I could not find a place to copy paste...remember you're dealing with a non techie here :D

Link to post
Share on other sites

Here are instructions that I put together that will help you exclude the MB3 Files in MSE.

1. Open MSE
2. Click On Settings
3. Click on Excluded processes
4. Click On Browse
MSE-Exclusions-1.jpg.6523a40cafe7bfb06a1dc62415282757.jpg
5. Expand to the file locations and choose the file you want and click OK
MSE-Exclusions-2.jpg.0038018a9618d1c61fe2242566b34221.jpg
6. Repeat for all other EXE files
7. Once you have added all EXE files, and they are listed in Process names: Then click on Add (they will move to the bottom)
MSE-Exclusions-3.jpg.816be780e193917dd525a58db708f7b9.jpg
8. Click on Save Changes
MSE-Exclusions-4.jpg.1d570a78961b2bd8955b6bde0e11bcfa.jpg
9. Click on YES to Allow changes (User Account Control)
10. For the files that end in .SYS use Exclude files and locations
11. Browse to the location for the *.sys files, Click OK
12. Follow the same procedures as with the *.exe files to add all sys files and then click Add followed by Save Changes
MSE-Exclusions-5.jpg.e59977521b70a70bcd915222d3a3d169.jpg

 

Below is an article that shows you what files to exclude:

Malwarebytes KB: How-To: Malwarebytes 3 files to be set as exclusions in other security software.

KB Article HERE

Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.