[SOLVED] Running as a guest user

[pal1000]

In this context mbae.exe process appears to be waiting for protection services to start, but this never happens. After about 5-7 minutes it gives up and throws an eror message (screenshot attached).

Malwarebytes Anti-Malware doesn't have this issue because the protection services are started by the system prior any user loggon. Or at least, this is how it appears. The cause may be related to WMI.

It is not permitted for guest accounts.

It is possible to get it running by creating a shortcut set to run MBAE as admin.

Executing shortcut fast enough will get MBAE running. At some point MBAE will display its GUI without this being requested. This happens after those 5-7 minutes, when the autostart mbae.exe process gets terminated remaining only the one created by shortcut.

If it is not launched fast enough, it may be necessary to execute the shortcut at least 2 times to get it working.

Altering the registry entry that autostarts MBAE to point to the shortcut may also help.

Malwarebytes Anti-Exploit.zip

[pbust]

This is a known limitation. The MBAE process (and protection) starts as SYSTEM and is protecting all your apps even when running under the Guest account. However the GUI fails to open as it cannot communicate with the service.

 

For the upcoming MBAE 1.06 we've added a notification so that users logging in to the guest account will be able to see that they are protected even if the GUI is not open.