Forced Restarts and Protection Module

[Teppo]

The Problem:

Forced logout+shutdowns. Always preceeded by a Special Logon of one of the domain administrators (of which I am one) in the Security section of the Event Log.

Now, I'm quite happy tracking down the root of the problem myself but I did notice something curious. I installed the free version of Anti-Malware to run a scan (all clean) but the Protection module seems to protect me from these forced log-out+shutdown cycles. Evidenced by being logged out and shutdown as soon as I turned it off.

So what does the Protection module actually do? I'm interested to know how it's actually protecting the system.

Thanks in advance for any input

[Mixene]

Hello mate,

It does just that, protects you from such malicious activity usually generated by hidden malware. Also blocks IPs from bad peers and works alongside any other similar proactive software you may have running (I've tested it with all the major security suites, and so long as you add each other to the exceptions/ignore list, it keeps you even more secure). During the trial period, I couldn't tell what the pro version did either, however after it consistently blocked malware code on a hijacked news portal I regularly I visited, I knew it protected me, so I went ahead and purchased right away. I love it

It sounds like you have User Rights issues on your OS as well. What OS are you running?

[Mixene]

If you're on Windows 7, you may find the following guide helpful. It will harden your system security. I followed the full guide myself and currently running MBAM PRO, KAS PURE/2012, and Zemana AntiLogger

http://blogs.technet.com/b/securitycontent/archive/2011/04/28/threats-and-countermeasures-guide-security-settings-in-windows-server-2008-r2-and-windows-7-updated.aspx

[Teppo]

If you're on Windows 7, you may find the following guide helpful. It will harden your system security. I followed the full guide myself and currently running MBAM PRO, KAS PURE/2012, and Zemana AntiLogger

http://blogs.technet.com/b/securitycontent/archive/2011/04/28/threats-and-countermeasures-guide-security-settings-in-windows-server-2008-r2-and-windows-7-updated.aspx

Yep, I'm running Windows 7 here - I'll be sure to look through that site for some pointers.

Thankfully the server that the commands seem to be originating from is getting replaced tomorrow

[Firefox]

As a business you are not allowed to install or use the product in any capacity and is a violation of the EULA to do so. You would need to have a corporate licence.

As your statement seems to indicate that this is a business please contact corporate support and they will assist you with this.

Please send an email to corporate-support@malwarebytes.org

Also make sure you have malwarebytes.org and salesforce.com in your Safe Sender list in email.

In order to assist you better please provide the following information when contacting them.

Cleverbridge Order Reference Number:

Organization name:

Approved Contact name:

If you no longer have access to the order number you can contact Cleverbridge to obtain information about your order.

Cleverbridge customer service

Thank you for your understanding.

[Teppo]

As a business you are not allowed to install or use the product in any capacity and is a violation of the EULA to do so. You would need to have a corporate licence.

As your statement seems to indicate that this is a business please contact corporate support and they will assist you with this.

Please send an email to corporate-support@malwarebytes.org

Also make sure you have malwarebytes.org and salesforce.com in your Safe Sender list in email.

In order to assist you better please provide the following information when contacting them.

Cleverbridge Order Reference Number:

Organization name:

Approved Contact name:

If you no longer have access to the order number you can contact Cleverbridge to obtain information about your order.

Cleverbridge customer service

Thank you for your understanding.

Duly noted. I hadn't even considered it as it's my go-to anti-malware program at home and this was intended merely as a diagnostic. To see if I could further narrow-down the cause in order to institute a permanent fix.

You are of course, absolutely right and I'll be removing the software directly.

[Firefox]

Duly noted. I hadn't even considered it as it's my go-to anti-malware program at home and this was intended merely as a diagnostic. To see if I could further narrow-down the cause in order to institute a permanent fix.

You are of course, absolutely right and I'll be removing the software directly.

Thanks for understanding, however you could contact corporate support for a fix with your issue and proper licencing.