+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Whitehat • Blue Team • Defensive Security (https://hackforums.net/forumdisplay.php?fid=448)
+---- Forum: Malware, Rat, and Virus Removal (https://hackforums.net/forumdisplay.php?fid=110)
+---- Thread: Real-time protection not enabling (/showthread.php?tid=3621722)
Real-time protection not enabling - cpt_cornflakes - Jul 14, 2013
I have Microsoft Security Essentials on my Windows 7 machine. My AV will scan my computer, but every time i try to turn on real-time protection, it turns right back off. I've reinstalling and rebooting. I am completely stuck here. Any help would be appreciated
* - Spacе - Jul 14, 2013
Do you have any other virus softwares installed?
* - im abcd - Jul 15, 2013
Two plausible reasons for this occurring might be either you have another AV installed like Space suggested or you are infected. So, if you have the scenario 1, then uninstall the other AV or at least disable all its protection module.
If you do not have another AV installed, then lets move forward with the following scans:
Scan with Malwarebytes Anti Malware and
Eset Online Scanner. Post the logs of both in your next reply.
Regards,
Abcd.
* - Corso - Jul 15, 2013
A lot of infections have been popping up recently, some directly effect MSE installations. Try running the Malwarebytes and E-Set Online Scanner recommended by ABCD... However I recommend you also run Rogue Killer (RK). Post back with all the results please !
* - cpt_cornflakes - Jul 16, 2013
I have no other AV's installed.
Malwarebytes results: http://pastebin.com/tukPGQLa
E-Set results: http://pastebin.com/bywXcUVX
Anything in the RATing folder are viruses of my own, and obviously metasploit.
Note: I did not take any action in removing because I wouldn't want it to remove false positives such as my RATing software.
* - Annointed - Jul 16, 2013
(Jul 16, 2013 08:01 PM)cpt_cornflakes Wrote: I have no other AV's installed.
Malwarebytes results: http://pastebin.com/tukPGQLa
E-Set results: http://pastebin.com/bywXcUVX
Anything in the RATing folder are viruses of my own, and obviously metasploit.
Note: I did not take any action in removing because I wouldn't want it to remove false positives such as my RATing software.
I really recommend you to move your RAT's and False Positives onto a USB or something for now and delete them off your PC and then remove the rest of the infections. Seems like you have a trojan.
* - cpt_cornflakes - Jul 16, 2013
(Jul 16, 2013 08:20 PM)Annointed Wrote: I really recommend you to move your RAT's and False Positives onto a USB or something for now and delete them off your PC and then remove the rest of the infections. Seems like you have a trojan.
I did this and after the reboot required by Malwarebytes, it turned on and stayed on for a minute or so, and then it went right back off to where it won't enable again.
* - im abcd - Jul 17, 2013
With your own RATS installed on your PC, it will be kind of hard to determine which is the true infection. But like one of the users said, you do seem to be infected by a trojan . Have you ran through Rogue Killer like Corso had suggested? Also I would like you to do a little test. Run through
RKILL and then try to on the real time protection. Also post the RKILL log in your next post.
Regards,
Abcd.
* - Corso - Jul 17, 2013
So after running through the scans, I'd highly recommend going through this:
Please download Windows Repair (AIO - Portable) and go to the 2nd from last tab labeled Start Repairs. Once on this tab, please select the button Start. The warning that pops up can be followed or not, however sometimes running those at this time can be non beneficial or further worsen the issues.
Inside of here, please check all of the following items:
- Reset Registry Permissions
- Reset File Permissions
- Ignore drop down list, just select the parent.
- Register System Files
- Repair WMI
- Repair Windows Firewall
- Repair Internet Explorer
- Repair MDAC/MS Jet
- Repair Hosts File
- Remove Policies Set By Infections
- Repair Missing Start Menu Icons
- Repair Icons
- Repair Winsock & DNS Cache
- Remove Temp Files
- Repair Proxy Settings
- Unhide Non System Files
- Ignore drop down list, just select the parent.
- Repair Windows Updates
- Repair CD/DVD Missing/Not Working
- Repair Volume Shadow Copy Service
- Repair Windows Sidebar/Gadgets
- Repair MSI (Windows Installer)
- Repair Windows Snipping Tool
- Repair File Associations
- Ignore drop down list, just select the parent.
- Repair Windows Safe Mode
- Repair Print Spooler
- Restore Important Windows Services
- Set Windows Services To Default At Start
* - cpt_cornflakes - Jul 17, 2013
Good news! After running Rkill, real time protection worked! And after that, I ran through RogueKiller and got rid of some extra suspicions. Thank you so much for everything!
* - im abcd - Jul 18, 2013
(Jul 17, 2013 06:55 PM)cpt_cornflakes Wrote: Good news! After running Rkill, real time protection worked! And after that, I ran through RogueKiller and got rid of some extra suspicions. Thank you so much for everything!
Glad you got it fixed. Pm me anytime if you ever need help. :)
* - Corso - Jul 18, 2013
cpt_cornflakes Wrote:Good news! After running Rkill, real time protection worked! And after that, I ran through RogueKiller and got rid of some extra suspicions. Thank you so much for everything!
Just to clarify that RKill does not delete anything. Glad RK seems to have gotten it though... Even more excited to hear you've got it resolved! Have a good one.
* - Totionna - Jul 18, 2013
Just try re installing, it might help haha