Failing to install anti-malware

[jdschaefer]

We've recently purchased Malwarebytes Endpoint Security and have noticed issues during the client push install for a few of the machines.  Some client machines are only installing the anti-exploit and receiving the message, "installation failed. Malwarebytes Anti-malware installation failed".

I've tried to push with WMI on and off, disabled the windows firewall as well as uninstall/reinstall with no luck.  I have also verified that no other anti-virus or anti-malware software is running on the machine.

[djacobson]

May I have you check if there is a recent MSIxXXXX.LOG log in C:\Windows\Temp? Organize it by date modified to get the newest one from the install attempts. Also complete and FRST log and post it too.

Frst Log
Please follow the steps below to run frst.

1.) Please download frst and frst64 from the link below and save it to your desktop:

FRST 32-bit version: https://downloads.malwarebytes.com/file/FRST
FRST 64-bit version: https://downloads.malwarebytes.com/file/FRST64

Note: You need to download the version compatible with your system. If you are not sure which version applies to your system, download both of them and try to run them. Only one of them will run on your computer; that will be the right version. Some traditional Anti-Viruses may false positive the download or running frst, I can assure you it is safe. If this happens, please temporarily disable the AV.

2.) Double-click the purple frst or frst64 icon to run the program. Click Yes when the disclaimer appears.
3.) Click the Scan button
4.) When the scan has finished, it will make 2 log files in the same directory the tool is located, frst.txt and Addition.txt.

 

[jdschaefer]

Hi Dyllon,

I've attached the logs you requested.  Thank you for your help!

 

Addition.txt

FRST.txt

MSI65bce.LOG

[djacobson]

Hi @jdschaefer, there looks to be some sort of infection preexisting on this machine. This activity is very likely preventing your install. I'd like you to use a tool we call Chameleon - https://www.malwarebytes.com/chameleon/

Follow the instructions in the included CHM help file of the download. This will run an obfuscated Anti-Malware process in an attempt to kill and bypass an infection and run a scan to remove the object(s). Let me know what you find.

[jdschaefer]

Hi Dyllon,

 

I ran Chameleon and it installed Malwarebytes Home edition.  The scan found some malware and I removed all items and rebooted the computer.  I ran a scan again and it came back clean.  I tried installing Endpoint again and it once again failed.  I've attached the Malwarebytes scan log, and the three logs you asked for last time.  Thank you for your help.

mbamlog.txt

Addition.txt

FRST.txt

MSI1a7f3.LOG

[djacobson]

Can I have you change the PUP settings on the consumer mbam and scan again? Follow that up with a rootkit scan. There are still some infection items here.