IntelliCAD Blocked by Malwarebytes

[cjones_ufv]

Has anyone encountered any issues with Malwarebytes blocking the IntelliCAD application?  We are running this application from the network.  The directory from which IntelliCAD runs has been excluded, yet Malwarebytes is preventing the program from running.  I suspect there may be something associated with the program that is running on the local workstation, but I haven't found anything so far.

[djacobson]

@cjones_ufv Are you using MBMC managed Anti-Malware 1.80.2 or the cloud version, 3.1.8?

[cjones_ufv]

No, we are still using the on-premise version.  As it turns out, the version of IntelliCAD we have is quite old and unsupported.  The likely scenario is that we will be upgrading IntelliCAD, so hopefully this issue goes away.  Thanks.

[djacobson]

Gotcha. You mentioned it runs from the network, is that from a web address or a network share?

[cjones_ufv]

It is running from a network share.

[djacobson]

That's what it is. So the older on-prem has issues around apps running from network shares. This is caused by the web block portion and sometimes the whole realtime engine itself. There's two workarounds for that. First workaround is changing the Access Based Enumeration (ABE) settings on the server hosting the share or application that runs from the share. As a test, you can you see if disabling ABE can help with the issue.

To disable access-based enumeration using the Windows interface:

• In the console tree, under the Namespaces node, right-click the appropriate namespace and then click Properties.
• Click the Advanced tab and then uncheck the "Enable access-based enumeration" for this namespace check box.
• Screenshot attached and you may also follow this link for more info - https://msdn.microsoft.com/en-us/library/dd759150.aspx

Option 2 is to create a new group in AD, assign some of the Computers which have the problem to that group. Add that group to the drive shares, giving the group full access over the share. If this works, assign all Computers needed in AD to the group.

Edited October 26, 2017 by djacobson
fixing picture

[cjones_ufv]

Thanks, Dyllon.  Much appreciated.

Christopher