Jump to content

REGITDept

Honorary Members
  • Posts

    201
  • Joined

  • Last visited

Posts posted by REGITDept

  1. Hi REGITDept.

     

    If you still have the old ClientSetup.msi, you can run that first via Active Directory with the /x /q command to uninstall the previous version from the endpoint. Then run the new ClientSetup.msi installer.

     

    If you don't have the old ClientSetup.msi, you can lookup the GUID in the registry and use the following command to uninstall silently before deployment of the new installer:

    msiexec /x {GUID} /q

     

    The GUID can be found in the registry in the following locations. Simply search for the string "malwarebytes" within those locations.

    HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall

    HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall

    Hi pbust,

     

    We are not in an Active Directory environment. Also, the push also failed with fresh clients without MBAE install yet.

     

    Thanks.

  2. What does the Programs and Features look like in a machine that still has the 1.05 version?

     

    Does it have only 1 entry for "Malwarebytes Managed Client" or are there individual entries for MBAM and MBAE?

     

    Please post a screenshot if possible.

     

    Thanks!

    Hi pbust,

     

    It looks exactly like the screenshot I posted previously. I believed it is displaying the Management Console version instead of the actual MBAE version. Yes there is only one entry "Malwarebytes Mananged Client". We only use Managed MBAE so there will be no MBAM at all.

     

    Thanks.

  3. Attached is the screenshot from my computer. It is currently on the newest version of MBAE (1.07). I installed by manually uninstalling the old MBAE (1.05), and executing the executable that was created using the Management Console. Installing by physically being there, or remote connection works fine, just doesn't work when pushing through the Management Console.

     

    Thanks.

    post-189994-0-28561700-1437006150_thumb.

  4. Dear Malwarebytes,

     

    We are unable to push client update (MBAE) to 1.07.2.1011 via the Management Console. After several minutes it would say "Installation failed. Access is denied. Failed to create remote service." (Please see attached screenshot). The first time we used push client, it worked just fine for the MBAE 1.05 version, there were some hiccups but overall it works. Now we try to update those client to the newest version and it would not work. We tried everything we knew, and follow the guides to the dot but with no luck.

     

    P.S: We are running a Windows 7 environment.

     

    Thanks.

    post-189994-0-34062800-1436993937_thumb.

  5. Those two are for Anti-Malware.  Getting people to read guides in the first place is difficult.  Most who install MBAM will also install MBAE, so putting in where it applies and where it doesn't ends up making people stop reading the guide.  If you're just installing MBAE, you're good.

    Thank you for your reply. Based on the "Malwarebytes Management Console 1.5 Administrators Guide", page 6 and 7 does not say whether it is for MBAM or MBAE, just in general Managed Client. Please correct me if I'm wrong.

  6. Dear Malwarebytes,

     

    We are currently using the managed MBAE version 1.05.2.1017. We suspected that there are false positives when our clients print PDF files. The latest incident was printed from Adobe Acrobat 9 Standard to HP 600 printer.

     

    Here are an example of the alerts we received:

     

    Malwarebytes Management Server Notification

    --------------------------------------------

     

    Alert Time: 7/13/2015 10:55:57 AM

    Server Hostname: XXX

    Server Domain/Workgroup: XXX

    Server IP: XXX

    Notification Catalog: Client

    Description:

    Exploit threat detected, see details below:

     

    7/13/2015 10:53:58 AM  XXX XXX     Exploit payload file blocked         BLOCK                C:\Users\XXX\AppData\Local\Temp\Z@S7107.tmp

    7/13/2015 10:54:09 AM  XXX XXX    Exploit payload file blocked         BLOCK                C:\Users\XXX\AppData\Local\Temp\Z@S9C99.tmp

    7/13/2015 10:54:15 AM  XXX XXX Exploit payload file blocked         BLOCK                C:\Users\XXX\AppData\Local\Temp\Z@SB3E1.tmp

    7/13/2015 10:54:32 AM  XXX XXX     Exploit payload file blocked         BLOCK                C:\Users\XXX\AppData\Local\Temp\Z@SF597.tmp

     

    Total count: 4.

     

    --------------------------------------------

    Comment: This email was generated by Malwarebytes Management Server. Please do not reply to this message.

     

    We replaced client's info with XXX due to privacy. Attached you will find the MBAE files. Please have a fix for us ASAP.

     

    Thank you.

    Malwarebytes Anti-Exploit.zip

Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.