Jump to content

MalwareBytes client services

Recommended Posts

Performing an audit of the installs on our network of MBAM, and noticing a variation between services that are installed  / not installed, running / not running.

Searching the forums did not shine any light on the different services that Malwarebytes Enterprise relies on, what they do, if they should always be running, if they should always be installed, etc.

The services that I have discovered are: MBAMService, MBAMScheduler, and MEEClientService

Link to post
Share on other sites

Hello PhillyPhotog. 

Server / client communication is controlled by MEEClientService, its process is  C:\Program Files (x86)\Malwarebytes' Managed Client\sccomm.exe. This must be running for the endpoint to be manageable.
MBAMScheduler runs the scheduled updates and scans. These scheduled tasks will not run if this service is not running.
MBAMService runs the realtime web and malicious file blocker. This must be running if you want the real time protection features to work.

If you have Managed Client, Anti-Malware and Anti-Exploit installed on an endpoint, this is what should be running.

MbaeSvc; C:\Program Files\Malwarebytes Anti-Exploit\mbae-svc.exe
MBAMScheduler; C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe
MBAMService; C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
MEEClientService / SCCommService; C:\Program Files\Malwarebytes' Managed Client\SCComm.exe

ESProtectionDriver; C:\Program Files\Malwarebytes Anti-Exploit\mbae.sys
MBAMProtector; C:\Windows\system32\drivers\mbam.sys
MBAMSwissArmy; C:\Windows\system32\drivers\mbamswissarmy.sys

Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.