likwyd

255.255.255.255 is temporarily excluded, again. Due to dropbox and svchost. Please let us know when this issue is resolved. Thanks.

Just wanted to update anyone following this thread. I have been able to get computers back online and scanning for threats via manual and schedule. Nothing has been the same, consistent workflow for every computer but for the majority, the following worked for me. Keep in mind, I have tried everything suggested (and then some) in this and other threads before, just not in this order: Run the clean tool with the /cloud switch, per @KDawg (it can take a while waiting but you do eventually get a pop-up to reboot the computer). Check Installed Programs in Control Panel for any left over products that didn't get uninstalled (uninstall if there are; it actually works). Check processes to make sure the Endpoint Tray.exe isn't running (kill it if it is). Check Program Files and Program Data for anything named Malwarebytes%. Delete folder to trash/shift+delete. No permission errors. Install full package, per @KDawg (this only seems to install the agent and package msi). Download and Run mb3-setup-common-3.1.8.1830.exe (linked by @KDawg) Previously, I had tried Revo Uninstaller to get rid of previous installation but 24hrs after reinstalling Malwarebytes, endpoints showed as offline again.

I looked at the log on one of my computers having this issue. It looks like it is constantly trying to uninstall the SelfProtectionUser.cpp and remove the ControlWatchdogDriver.cpp which is failing every time.

I have also noticed this on a few workstations.

I did this and had 4/15 able to restart services and connect. So far 1 out of those 4 have successfully scanned for threats (if that's true). The other 11 that gave side by side errors while trying to restart services, I am currently working on re-installing the whole malwarebytes package. So far, the first two have succeeded. **This is only possible because of Revo Uninstaller** Without this, I would not be able to uninstall anything. Anything that has shown up as online in the dashboard I have started a manual threat scan and I will update tomorrow if/when scheduled scans do their thing or not.

Yeah, this is taking too long now. Definitely not cool! Can we get some updates?

No not all of them. And at the time those tasks were made, they could have been "online" or "offline" because they have all been in and out. Yesterday, at one point, I was down to only 1 "online". Now I'm at a 50/50. I did run the clean tools as Admin yesterday but, at this point, I'm not touching anything because I can't be sure results are real or not. I will wait until Malwarebytes figures it out and pushes the absolute resolution.

Yes, I have 13 tasks of command.service.restart. 12 Pending, 1 success.

Thanks, KDawg.

Thing is, it did delete a lot of the files (comparing to backup), just not all of them. Question is, why not?

KDawg, thanks for your response. I followed your instructions and the log reflects errors uninstalling everything completely. Malwarebytes EndPoint Agent and .NET system prerequisites installer is still listed in Programs. Log file attached. I have not tried to reinstall anything. Waiting on your reply first. mb-clean-results.txt Program Files still has both Malwarebytes and Malwarebytes Endpoint Agent folders with contents.

I just restored to before the kernel power issue. Also, I tried to recover unins000.dat and unins000.msg from Veeam backup. Access denied.

Not quite yet. This morning I now have 30/39 "offline", including my workstation. I also had a Power Kernel issue last night that caused a reboot. While checking Event Viewer for why, I noticed that Malwarebytes Endpoint Agent had a side by side issue. I cannot get the service to start because apparently its side-by-side configuration is incorrect.

I currently have 15/38 endpoints showing as offline. This seems to randomly happen on occasion and a reinstall has previously worked, but not this time. I flushed the DNS on a few, as suggested in the FAQ but, it did not help. I tried using the deployment tool to uninstall and reinstall. The tool showed that everything was a success but, still, they listed as offline. So I remote in to one of the endpoints to try a manual re-install. Attached are the results of an error upon uninstalling the Endpoint Agent. The endpoints in question are all running Windows 7 64 bit. The endpoints online are also the same except for one (1) 32 bit machine and one (1) mac. No proxy and no outgoing limitations on firewall. Is anyone else having this problem? Malwarebytes_Endpoint_Agent_and_.NET_system_prerequisites_installer_20171003101108.log