MBMR - "Open File - Security Warning" when running

[rcsec]

Good Morning,

     I'm using the Malwarebytes Malware Remediation Tool 2.5 (mbmr.exe) in a script to scan remote hosts.  The utility is copied to a remote system then a full scan ran (mbmr.exe -full -ark -remove -noreboot -stdout:off) conducted.  Some systems are prompting end users with the "Open File - Security Warning".

 

     What is the cause of this and can it be suppressed?

Thank you,

 

 

[pbust]

Welcome to the forum and thanks for posting rcsec.

 

Can you post (or PM me) the script that you are running on the remote host? Also how is the script being executed? Are you vreifying that it is being executed as admin?

[rcsec]

Thank you for the reply.

 

The script is being executed as Admin via my domain account being a member of the Desktop Admins group, which is a member of the that system's local Administrators group.

 

The script is written to take a list of systems (used with as few at 10 and as many at 200), copy MBMR to the remote host then execute "mbmr.exe" via WMIC.  There is a Master & Slave script; this allowed me to view script progress (& determine if it was locked on one system.)  It is still being tweaked & polished but shared for anyone to use.

Thank you,

Triage-MBMR_Scan-MultipleSystems-Master.txt

Triage-MBMR_Scan-MultipleSystems-Slave.txt

[pbust]

I think you might have the older version of MBMR (i.e. MBAM-RT).

 

I'll PM you the latest to test.

 

Regards,

[rcsec]

Good Afternoon,

      I receive an error message when I attempt to register this product with our company's key.  What needs to be done to correct this?

Thank you

 

Registering product key...

Entitlement is not active, please contact Malwarebytes support

[respinoza]

Hey rcsec, 

 

Are you still receiving the error ? I can assist you if you are.

 

Good Afternoon,

      I receive an error message when I attempt to register this product with our company's key.  What needs to be done to correct this?

Thank you

 

Registering product key...

Entitlement is not active, please contact Malwarebytes support