Jump to content

Malwarebytes EP not available as Security Providers on Windows Security


Recommended Posts

  • Staff

Malwarebytes by default will not register as primary unless Defender is stopped.  Your display above shows that Defender is still running.

You can check security registration and status with Windows command.

 
wmic /Node:localhost /Namespace:\\root\SecurityCenter2 Path AntiVirusProduct Get * /Format:List

displayName=Windows Defender
instanceGuid={D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
pathToSignedProductExe=windowsdefender://
pathToSignedReportingExe=%ProgramFiles%\Windows Defender\MsMpeng.exe
productState=397568
timestamp=Tue, 27 Apr 2021 11:09:24 GMT

displayName=Malwarebytes
instanceGuid={23007AD3-69FE-687C-2629-D584AFFAF72B}
pathToSignedProductExe=C:\Program Files\Malwarebytes\Anti-Malware\MBAMWsc.exe
pathToSignedReportingExe=C:\Program Files\Malwarebytes\Anti-Malware\MBAMWsc.exe
productState=397312
timestamp=Mon, 04 Jan 2021 01:28:55 GMT
 
 
If Defender is stopped, Malwarebytes should become visible in security centre.  Note: Defender will very persistently try to start/restart itself, unless you use GPO to stop it.
 
You can use the Malwarebytes policy setting to force behavior - Always Register Malwarebytes in the Windows Action Center
 
Link to post
Share on other sites
  • Staff

Additionally, you have posted this topic in Incident Response.
As Incident Response does not have a real-time protection component, I think it does not register as a provider at all.
 

Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Recently Browsing   0 members

    No registered users viewing this page.

Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.