-
Posts
201 -
Joined
-
Last visited
Content Type
Events
Profiles
Forums
Posts posted by REGITDept
-
-
-
-
Hmm, that shoots my theory out of the sky
That's as far as I can go troubleshooting the Console. I understand you have a ticket with Corporate Support. Please continue with them as they are much more familiar than I am with the Console.
Good luck and let me know if you have other issues with MBAE.
Thank you. I appreciate your help.
-
Hi REGITDept.
If you still have the old ClientSetup.msi, you can run that first via Active Directory with the /x /q command to uninstall the previous version from the endpoint. Then run the new ClientSetup.msi installer.
If you don't have the old ClientSetup.msi, you can lookup the GUID in the registry and use the following command to uninstall silently before deployment of the new installer:
msiexec /x {GUID} /q
The GUID can be found in the registry in the following locations. Simply search for the string "malwarebytes" within those locations.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall
Hi pbust,
We are not in an Active Directory environment. Also, the push also failed with fresh clients without MBAE install yet.
Thanks.
-
I just opened a ticket with support. Thanks.
-
What does the Programs and Features look like in a machine that still has the 1.05 version?
Does it have only 1 entry for "Malwarebytes Managed Client" or are there individual entries for MBAM and MBAE?
Please post a screenshot if possible.
Thanks!
Hi pbust,
It looks exactly like the screenshot I posted previously. I believed it is displaying the Management Console version instead of the actual MBAE version. Yes there is only one entry "Malwarebytes Mananged Client". We only use Managed MBAE so there will be no MBAM at all.
Thanks.
-
Attached is the screenshot from my computer. It is currently on the newest version of MBAE (1.07). I installed by manually uninstalling the old MBAE (1.05), and executing the executable that was created using the Management Console. Installing by physically being there, or remote connection works fine, just doesn't work when pushing through the Management Console.
Thanks.
-
You might need to uninstall MBAE from the machines first before deploying the new one as the installer might be seeing it as already installed.
Yes, we already tried that multiple times. We uninstalled MBAE for the client(s) through the Managed Console, restarted the client, tried to push the client install and is not successful.
-
Yes you're correct REGITDept. Most people install both that's why its unified in the Guide, to simplify reading. But maybe separating it (or clarifying it) makes sense.
Yes, because not all corporations are using both MBAM and MBAE at the same time.
-
Dear Malwarebytes,
We are unable to push client update (MBAE) to 1.07.2.1011 via the Management Console. After several minutes it would say "Installation failed. Access is denied. Failed to create remote service." (Please see attached screenshot). The first time we used push client, it worked just fine for the MBAE 1.05 version, there were some hiccups but overall it works. Now we try to update those client to the newest version and it would not work. We tried everything we knew, and follow the guides to the dot but with no luck.
P.S: We are running a Windows 7 environment.
Thanks.
-
Those two are for Anti-Malware. Getting people to read guides in the first place is difficult. Most who install MBAM will also install MBAE, so putting in where it applies and where it doesn't ends up making people stop reading the guide. If you're just installing MBAE, you're good.
Thank you for your reply. Based on the "Malwarebytes Management Console 1.5 Administrators Guide", page 6 and 7 does not say whether it is for MBAM or MBAE, just in general Managed Client. Please correct me if I'm wrong.
-
Dear Malwarebytes,
Regarding Windows 7 endpoint preparation. Do you actually need to enable File sharing and Printer sharing? We successfully deployed MBAE 1.05 without enabling those two. We are in a corporate environment so we don't want to enable those two unless it is 100% necessary. Please let us know whether it is needed and if so why is it needed.
Thank you.
-
Thank you very much. We will give it a try.
-
Dear Malwarebytes,
We are currently using the managed MBAE version 1.05.2.1017. We suspected that there are false positives when our clients print PDF files. The latest incident was printed from Adobe Acrobat 9 Standard to HP 600 printer.
Here are an example of the alerts we received:
Malwarebytes Management Server Notification
--------------------------------------------
Alert Time: 7/13/2015 10:55:57 AM
Server Hostname: XXX
Server Domain/Workgroup: XXX
Server IP: XXX
Notification Catalog: Client
Description:
Exploit threat detected, see details below:
7/13/2015 10:53:58 AM XXX XXX Exploit payload file blocked BLOCK C:\Users\XXX\AppData\Local\Temp\Z@S7107.tmp
7/13/2015 10:54:09 AM XXX XXX Exploit payload file blocked BLOCK C:\Users\XXX\AppData\Local\Temp\Z@S9C99.tmp
7/13/2015 10:54:15 AM XXX XXX Exploit payload file blocked BLOCK C:\Users\XXX\AppData\Local\Temp\Z@SB3E1.tmp
7/13/2015 10:54:32 AM XXX XXX Exploit payload file blocked BLOCK C:\Users\XXX\AppData\Local\Temp\Z@SF597.tmp
Total count: 4.
--------------------------------------------
Comment: This email was generated by Malwarebytes Management Server. Please do not reply to this message.
We replaced client's info with XXX due to privacy. Attached you will find the MBAE files. Please have a fix for us ASAP.
Thank you.
Possible False Positives When Printing PDF Files
in Malwarebytes Anti-Exploit for Business
Posted
Hi pbust,
We feel that the product need to be fix instead of having us trying to exclude the detection, especially when we are talking about hundred of clients.
Thanks.