Remote Desktop and MalwareBytes

[kmdavisjr]

I am running Windows 8.1 Pro.  For some reason, must exit MalwareBytes (running at startup) or I will never be able to connect to the session via rdp.  I am using a VPN client to establish a tunnel to my comapny and then RDP from my client to my work servers.  If I exit MalwareBytes (in system tray) I can establish a connection to the servers at my company with no trouble.  See attachment.

[kmdavisjr]

I am running Windows 8.1 Pro.  For some reason, must exit MalwareBytes (running at startup) or I will never be able to connect to the session via rdp.  I am using a VPN client to establish a tunnel to my comapny and then RDP from my client to my work servers.  If I exit MalwareBytes (in system tray) I can establish a connection to the servers at my company with no trouble.  See attachment.

The screeshot mentioned above is attached.  I could not find where to edit my original post to include it there.

[David H. Lipman]

New members can't edit posts.

 

It seems you have answered your own question.  Disable Malwarebytes before entering into a RDP Session via VPN.

[kmdavisjr]

New members can't edit posts.

 

It seems you have answered your own question.  Disable Malwarebytes before entering into a RDP Session via VPN.

 

Okay, but why is malwarebytes preventing the connection in the first place?  It should not be doing this, and if it does, it needs to at least tell the user that it is preventing the connection.  

[AdvancedSetup]

Don't know why - I do it almost every day and I have no issue. Do you get a popup alert from MBAM?

 

Please read the following and post back the 3 requested logs.
 
Diagnostic Logs
 
Thank you
 

[kmdavisjr]

Don't know why - I do it almost every day and I have no issue. Do you get a popup alert from MBAM? Please read the following and post back the 3 requested logs. Diagnostic Logs Thank you

Nope. RDP just does not work. Will check logs.

[kmdavisjr]

HI,

 

Okay, now that windows 10 is coming out, I would like to try to figure out why two things keep happening:

 

1.  I still have to kill malwarebytes when I establish a vpn and then try to RDP to my server corporate server infrastructure.

2.  Malwarebytes will not auto update.

 

I think I have attached all of the logs requested.

 

 

FRST.txtCheckResults.txtAddition.txt

[kmdavisjr]

Update:  The application just auto updated, but I still have the RDC problem

[gonzo]

Open Malwarebytes and check History > Application Logs > Protection Logs for evidence of a block.  Also, what kind of VPN is it, and what protocol does it use?  You may need to add exclusions for the VPN process (if it is coming in to the protected box) or RDP (if the protected box is a secondary connection).  Also, an exclusion for a specific IP that is making a connection (while making sure that it is as hardened as you can make it to assure protection).

 

I know this is kind of vague, but you have a much better view of your environment than I do.  I have seen various security products block some VPN protocols and allow others, so a bit of experimentation may be needed.

[kmdavisjr]

Thanks for the reply!  I am running the vanilla windows 8.1 Pro L2TP /IPsec vpn with the MS-CHAP v2 protocol.  I can establish the VPN tunnel without any problems but cannot connect to the servers via RDP when MalwareBytes is running. I am using NIS and to provide virus protection and that never has any problems with RDC.  All of my evidence seems to point to something in MalwareBytes.  I will give the application logs a review and post back here if I have any questions, or run into a dead end.   

[PrasantaShee]

Use tools like logmein, R-HUB remote support servers, teamviewer etc. and check if the issue is resolved. 

[AdvancedSetup]

Hello @PrasantaShee and

Please notice that this topic is 2 years old. One should not drag up old topics on a forum. Once a topic is more than a month old it's very rare to reply to it again.

Thanks

Ron