Malwarebytes Full Scan Starts scanning during an unscheduled time on PVDI's

[j_french]

Hi

We have a policy to scan both the persistent VDI and physical desktops 2 times a week after business hours at 8pm.  However, we had the full scan start in the middle of the day on the PVDI's, even though it was scheduled to start at 8pm. We cant have the scans go during the middle of the business day to interrupt the business process.  The policy has been in place for a log time but all of a sudden the full scan was starting to run at 12pm on all PVDI's instead of the scheduled scan time of 8pm on all PVDI and physical desktops.

According to the logs:

ServiceName

MBAMSwissArmy

ImagePath

C:\Windows\system32\drivers\MBAMSwissArmy.sys

ServiceType

kernel mode driver

StartType

demand start A service was installed in the system.   Service Name: MBAMSwissArmy   Service File Name: C:\Windows\system32\drivers\MBAMSwissArmy.sys  Service Type: kernel mode driver   Service Start Type: demand start

How do we ensure that the scheduled scans run after business hours?

What would make the full scan start in the middle of the day on the PVDI's when it is outside of the maintenance window?

Is there a way to do a policy just for the PVDI and a subset IP address range?

Thanks

Janet

[exile360]

Greetings,

Please make certain that the computer clock is set to the correct time as this is what the software will use to determine when to scan.  Also, make certain that the Recover if missed by/Recover missed tasks option is not enabled for your scheduled scans to prevent them from launching as soon as the device is available for scanning if the most recent scheduled scan was missed.

Other than those items, I'm not certain what else to check to determine why the scans might be kicking off when they are, but that's where I'd start in trying to track it down.

I hope this helps, but if not then you should contact Malwarebytes Business Support by filling out the form on the bottom of this page or taking advantage of the CHAT WITH US option if available at the time.