Jump to content

Malware for teams blocks network connectivity

s2main
 Share

Recommended Posts

s2main

s2main

Posted
Posted

Hi, i have deployed malwarebytes teams on all computers (pc & laptops) of company with Web/Ramsomware/Maleware/Exploit options activated. On 2 computers (laptop only), network (wifi or cable) is blocked. No ping, no connection with internet, no dns resolution. Only action i have found to resolve this failure is to disable Web check, but i don't understand why (for me web manage url through proxy), it's very trubling . Any suggestions are welcome. Thank's.

PS: I have disabled windows proxy automatic config lookup

Link to post
Share on other sites
  • Staff
Malwarebytes

Malwarebytes

Posted
  • Staff
Posted

***This is an automated reply***

Hi,

Thanks for posting in the Malwarebytes for Windows Help forum.

If you are having technical issues with our Windows product, please do the following:

Malwarebytes Support Tool - Advanced Options

This feature is designed for the following reasons:

  • For use when you are on the forums and need to provide logs for assistance
  • For use when you don't need or want to create a ticket with Malwarebytes
  • For use when you want to perform local troubleshooting on your own

How to use the Advanced Options:

Spoiler
  1. Download Malwarebytes Support Tool
  2. Double-click mb-support-X.X.X.XXXX.exe to run the program
    • You may be prompted by User Account Control (UAC) to allow changes to be made to your computer. Click Yes to consent.
  3. Place a checkmark next to Accept License Agreement and click Next
  4. Navigate to the Advanced tab
  5. The Advanced menu page contains four categories:
    • Gather Logs: Collects troubleshooting information from the computer. As part of this process, Farbar Recovery Scan Tool (FRST) is run to perform a complete diagnosis. The information is saved to a file on the Desktop named mbst-grab-results.zip and can be added as an email attachment or uploaded to a forum post to assist with troubleshooting the issue at hand.
    • Clean: Performs an automated uninstallation of all Malwarebytes products installed to the computer and prompts to install the latest version of Malwarebytes for Windows afterwards. The Premium license key is backed up and reinstated. All user configurations and other data are removed. This process requires a reboot.
    •  Repair System: Includes various system-related repairs in case a Windows service is not functioning correctly that Malwarebytes for Windows is dependent on. It is not recommended to use any Repair System options unless instructed by a Malwarebytes Support agent.
    • Anonymously help the community by providing usage and threat statistics: Unchecking this option will prevent Malwarebytes Support Tool from sending anonymous telemetry data on usage of the program.
  6. To provide logs for review click the Gather Logs button
  7. Upon completion, click OK
  8. A file named mbst-grab-results.zip will be saved to your Desktop
  9. Please attach the file in your next reply.
  10. To uninstall all Malwarebytes Products, click the Clean button.
  11. Click the Yes button to proceed. 
  12. Save all your work and click OK when you are ready to reboot.
  13. After the reboot, you will have the option to re-install the latest version of Malwarebytes for Windows.
  14. Select Yes to install Malwarebytes.
  15. Malwarebytes for Windows will open once the installation completes successfully.

Screenshots:

Spoiler
 
 
 
 
Spoiler

 

 

01.png

02.png

03.png

04.png

05.png

06.png

 

 

If you are having licensing issues, please do the following: 

Spoiler

For any of these issues:

  • Renewals
  • Refunds (including double billing)
  • Cancellations
  • Update Billing Info
  • Multiple Transactions
  • Consumer Purchases
  • Transaction Receipt

Please contact our support team at https://support.malwarebytes.com/hc/en-us/requests/new to get help

If you need help looking up your license details, please head here: Find my premium license key

 

 

Thanks in advance for your patience.

-The Malwarebytes Forum Team

Link to post
Share on other sites
Porthos

Porthos

Posted
Posted
7 minutes ago, s2main said:

Only action i have found to resolve this failure is to disable Web check, but i don't understand why (for me web manage url through proxy), it's very trubling . Any suggestions are welcome. Thank's.

We are going to need logs from those 2 computers.

To begin, Please do the following so that we may take a closer look at your installation for troubleshooting:

NOTE: The tools and the information obtained is safe and not harmful to your privacy or your computer, please allow the programs to run if blocked by your system.

 

  • Download the Malwarebytes Support Tool
  • In your Downloads folder, open the mb-support-x.x.x.xxx.exe file
  • In the User Account Control pop-up window, click Yes to continue the installation
  • Run the MBST Support Tool
  • In the left navigation pane of the Malwarebytes Support Tool, click Advanced
  • In the Advanced Options, click Gather Logs. A status diagram displays the tool is Getting logs from your machine
  • A zip file named mbst-grab-results.zip will be saved to your desktop, please upload that file on your next reply

Thanks

Link to post
Share on other sites
s2main

s2main

Posted
  • Author
Posted

No problem for waiting, no real urgency, but a real time desactivated is not satisfactory.

As says above in y first message , i turn off Web protection (which desactivate real time protection ??)

I think Web protection take in place a proxy (windows or MW) which blocks connection ...

Frédéric

 

image.png.20d054635b85a74ab7b9f8be62253555.png

Link to post
Share on other sites
  • Root Admin
AdvancedSetup

AdvancedSetup

Posted
  • Root Admin
Posted

Excellent @s2main just wanted to confirm. The real-time protection is still on with Web Protection off. That one blocks known bad domains and IP addresses.

So the question is why is it blocking. I'm not seeing a block in the logs.

 

Please try the following clean removal and reinstall on one of the systems and let me know if that corrects the issue.

 

 

Can you please do the following?

  • Download the Malwarebytes Support Tool
  • In your Downloads folder, open the mb-support-x.x.x.xxx.exe file
  • In the User Account Control pop-up window, click Yes to continue the installation
  • Run the MBST Support Tool
  • In the left navigation pane of the Malwarebytes Support Tool, click Advanced
  • In the Advanced Options, click the CLEAN button and follow the onscreen instructions to reinstall Malwarebytes
  • NOTE: Please have patience as it can take a while to remove and reinstall. The computer will restart to complete

After the restart please do the following

  • Run the MBST Support Tool
  • In the left navigation pane of the Malwarebytes Support Tool, click Advanced
  • In the Advanced Options, click Gather Logs. A status diagram displays the tool is Getting logs from your machine
  • A zip file named mbst-grab-results.zip will be saved to your desktop, please upload that file on your next reply

Thank you

 

Link to post
Share on other sites
s2main

s2main

Posted
  • Author
Posted

OK, thank's for confirmation realtime protection stays ENABLED when Web Protection is disabled.
Next step, retrieve a laptop and try to work in same remote condition with Web P. activated.


Just 2 question.

1. Is WebP. activates Windows Proxy ? or others modules. Customers work in remote to office through a vpn ssl ....
2. Is MW can runs/compatible with another corporate application (forticlient v6.4) which manages vpn ssl and is also antivirus ?


Best regards

 

Link to post
Share on other sites
  • Root Admin
AdvancedSetup

AdvancedSetup

Posted
  • Root Admin
Posted

We don't run a proxy ourselves with Malwarebytes Premium. We do offer another product Privacy VPN but that should not have any relationship with your current issue.

Yes, if a home user was on a generic VPN it's possible one of their IP connections might get blocked but it should show in the logs.

I am not aware of any known issues with FortiClient but it's possible there is some type of conflict.

You can review the following article on setting up exclusions if needed.

https://support.malwarebytes.com/hc/en-us/articles/360038522974-Malwarebytes-for-Windows-antivirus-exclusions-list

 

If you do need to disable the Web Blocker then you could run the following which might help some while we investigate what is going on.

 

 

Please consider installing the following Content Blockers for your Web browsers if you haven't done so already.

Malwarebytes Browser Guard

uBlock Origin

 

I'll check on you tomorrow.

Thanks @s2main

 

 

Link to post
Share on other sites
s2main

s2main

Posted
  • Author
Posted

Thank's for answer. Just another question very simple i think, regularly i have an error message during update process which displays there is a connection failure to MB update servers.
My firewall blocks any @ip out of country, not to but from. What's @ip or url i must insert in FW in white list to grant any access ?

 

 

Link to post
Share on other sites
  • Root Admin
AdvancedSetup

AdvancedSetup

Posted
  • Root Admin
Posted

Network Access Requirements

Allow the following addresses through your firewall or other security software. You must allow or exclude all addresses on port 443, outbound.

 

 

Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
 Share
Go to topic listing

  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.