Help with McAfee Antivirus

[alchemista]

I'm having the same kind of problem described here, but don't have the option of disabling the Access Protection module to install.

 

This is going to come up more and more as organizations move to a BYOD environment.  I have my personal device, and am able to remote into my orgs environment, as long as I accept an install of their VSE 8.8 managed by ePO.  The ePO settings cannot be changed, because they are managed by the organization.  However, I'm a personal user and want MBAM for my own personal uses (not needed for the organization).

 

The answer to this original issue seems to be to add exclusions to VSE 8.8.  However, in a scenario like mine with BYOD that requires a managed-VSE instance, the personal user cannot do this - preventing an MBAM install.

 

The rule that is preventing MBAM install for me is VSE's rule to prevent Windows file spoofing.  MBAM tries to install a svchost.exe file (why?), which is detected as a spoof attempt.  Is that svchost.exe from MBAM really necessary?

 

This leaves users in a hard spot when they are in a BYOD situation but actually joining temporarily to a remote org imposes extra restrictions.

 

Thanks

[alchemista]

I'm having the same kind of problem described here, but don't have the option of disabling the Access Protection module to install.  This is still a personal use situation, not a business support issue, since I'm in a BYOD environment and am on my personal device primarily used for personal purposes.

 

This is going to come up more and more as organizations move to a BYOD environment.  I have my personal device, and am able to remote into my orgs environment, as long as I accept an install of their VSE 8.8 managed by ePO.  The ePO settings cannot be changed, because they are managed by the organization.  However, I'm a personal user and want MBAM for my own personal uses (not needed for the organization).

 

The answer to this original issue seems to be to add exclusions to VSE 8.8.  However, in a scenario like mine with BYOD that requires a managed-VSE instance, the personal user cannot do this - preventing an MBAM install.

 

The rule that is preventing MBAM install for me is VSE's rule to prevent Windows file spoofing.  MBAM tries to install a svchost.exe file (why?), which is detected as a spoof attempt.  Is that svchost.exe from MBAM really necessary?

 

This leaves users in a hard spot when they are in a BYOD situation but actually joining temporarily to a remote org imposes extra restrictions.

 

Thanks

[KenW]

I would suggest starting a new thread. Starting with a 4 year old post doesn't help because that was a different version of MBM.

 

Just a better idea.

[David H. Lipman]

Besides KenW's advice, ePO and McAfee's Enterprise software is business class, not retail.

 

Thus it may be apropos to start that new post in Malwarebytes Anti-Malware for Business.  This is the retail product sub-forum.

[AdvancedSetup]

Topic split to it's own new topic

[exile360]

Greetings,

I apologize that you did not receive a reply sooner. The file in question is a part of Malwarebytes Chameleon. It is to be used in scenarios where Malwarebytes Anti-Malware cannot run due to being blocked by an active infection as using known Windows system file names (among others) can often work to get security tools like Malwarebytes running when they would normally be prevented from doing so by an active threat.

As for how to bypass the McAfee protection to allow Malwarebytes Anti-Malware to install, the best advice I can offer would be to seek the assistance of you IT staff that handles deployment and management of your enterprise antivirus solution and explain to them that you use Malwarebytes as an additional layer of protection and request that they make an allowance for it in the rules/policy on your system so that you can get it installed alongside McAfee.

I hope that was helpful and again, I apologize that it took so long to get a response.