Jump to content

Malwarebytes

Protection module issues with Remote Desktop Connections?


21 replies to this topic

#1
matt1981m

    New Member

  • Members
  • Pip
  • 9 posts
  • Gender:Male
I think that someone I know has found a problem with the protection module. I apologize in advance for not having the specific error information available at this time. I will get the error codes and will post them later. A friend of mine has purchased the protection module, and has had it installed on his Windows XP Pro machine at home without any problems now for about 6 months. He started using RDC to connect to his home pc about a week or so ago, and started experiencing problems with the Protection module not wanting to run. I had him google the error, and amongst the results was a page in the forum stating that he should use a removal utility you have posted to remove the program, and to reinstall using the latest installer. When he got home, he did that, and everything worked. The next day after connecting again via RDC, the problem occurred again. I checked the pc for viruses for him and it was clean...(sas, mwb, eset, hjt, combofix, all clean as a whistle)

He is testing out Windows 7, and will be putting the Windows XP machine to pasture soon, so he just removed Malwarebytes from that pc, and loaded it on his Laptop that is running Windows 7. It was clean install, and with the program and protection module installed immediately after the OS installation finished. The protection module gave the same errors when he logged in using the RDC.

It seems that if the user is already logged on to the pc, and then connects using RDC, everything works fine. If you are not already logged into the pc, and then log into the RDC, you get the errors. Again, I apologize for not having the exact error available at this time, but it states something like "failed to create service." I will get the correct information and I will post it later.

Does anyone have any suggestions?

#2
yardbird

    Forum Deity

  • Honorary Members
  • PipPipPipPipPipPip
  • 3,726 posts
  • Gender:Male
  • Location:Sedona. Arizona, USA
  • Interests:Where we keep the World Safe
Hi! we should address 1 pc at a time, or post pc no# 1 in one thread, pc no #2 in another thread, please!

Quote

Protection module issues with Remote Desktop Connections?, 2 PC's
It would help if we saw the error code number.

Quote

It seems that if the user is already logged on to the pc, and then connects using RDC, everything works fine. If you are not already logged into the pc, and then log into the RDC, you get the errors.
please explain connecting to a remote desktop connection, if you are logged on? Tell us how you connect? WifI - DSL, other, Then run a MBAM quick scan with the Protection Moduale on, and post back with any issues please. (update your mbam database also) Let us know when your ready...regards...
Posted Image
No trees were harmed in the posting of this message...however an extraordinarily large number of electrons were horribly inconvenienced.
http://www.tentrexindustries.com/

#3
matt1981m

    New Member

  • Members
  • Pip
  • 9 posts
  • Gender:Male

View Postyardbird, on Jul 19 2009, 05:44 PM, said:

Hi! we should address 1 pc at a time, or post pc no# 1 in one thread, pc no #2 in another thread, please! It would help if we saw the error code number.

please explain connecting to a remote desktop connection, if you are logged on? Tell us how you connect? WifI - DSL, other, Then run a MBAM quick scan with the Protection Moduale on, and post back with any issues please. (update your mbam database also) Let us know when your ready...regards...

My apologies again for the minimal information provided earlier. When John first told me about the problem, he didn't have very many specifics. He thought maybe it was the Windows XP installation he was using got corrupted, or something... The first error code was "(CreateService) Failed to perform desired action. Error Code: 1073." The second error code he would receive would be "(OpenEvent) Failed to perform the desired action. Error Code: 2."

PC 1: Sony Vaio laptop, Core 2 Duo T2310, 2GB Ram, 500GB WD 5400RPM HDD, Windows 7 Ultimate (testing RC1 release)

PC 2: An old PC I built about 7 years ago..., AMD Athlon XP 2200+, 736MB RAM, 30GB Seagate 7200RPM HDD, Windows XP Professional w/ SP3.

My friend has a DSL Connection...

Now as to my comment about being logged on. While he was at home, he was using the computer (at this point, it doesnt matter which one, he was able to duplicate the issue on both), and the Protection Module was running and he was able to interact with it (check for updates, etc). He then left for work and left the computer running with his admin account logged in. He arrives at work, and after logging into his workstation and getting everything he normally uses at work up and going, he decides to login to the home computer using Remote Desktop. He is using the default Remote Desktop client built into Windows to connect to the computer at home. When connecting to the home computer while his user account is still logged in, he is able to see the Protection Module still running, and all is fine... Now let's say he reboots his computer, or otherwise causes the user account to not be already logged in, and then while no one is logged into the home computer, he connects to the computer using Remote Desktop, when the Protection Module starts (set to start automatically), he will receive the "...error code 1073" message, and will also receive an windows error stating that "Malwarebytes has stopped responding and has been closed." The only way he has been able to start the Protection module again, is to Uninstall, Run the MBAM-Clean.exe program, and install/register again. Sometimes that wont work. I remoted into his computer when it started happening and I at one time had to set the MBAMProtection service to "manual" start ("sc config mbamprotection start= demand" via cmd) inorder to prevent it from starting with the computer so I could run the MBAM-Clean.exe file again, and get it to remove. I had to do that because otherwise after installing/registering and attempting to start the protection module, he would only receive the "...Error Code: 2" message. After he was able to duplicate the issue on the Windows 7 installation, I had him reinstall and get the Protection Module to work, and then leave that computer alone. I then had him just install MalwareBytes without the protection module on the Windows XP Pro machine and he will continue to only that without the module running until this can be fixed. I currently do not have a license for the protection module for my computers, but I am interested in purchasing licenses for each of my machines, I just wanted to make sure this gets resolved before I do so. My friend doesn't really care either way, but I know it is hard enough to have a program as good as what you guys have designed continue to be the best, and I want to make sure that problems like this get taken care of. I use RDC's alot and would need to have that functionality be intact before I purchase. I hope this is something that can be fixed. John is out of town for a few days, but if you need any more informaton, please just ask, and I will do my best to try and get it for you asap.

Thank you again for your assistance in this matter.

#4
matt1981m

    New Member

  • Members
  • Pip
  • 9 posts
  • Gender:Male
I forgot to add one more tidbit...

If after you get the 1073 error, you can sometimes reboot the computer and log in locally on the computer without using RDC, sometimes the protection module will start without any errors being given, but never if you use RDC to login to the computer without already being logged in to the computer locally. I believe that Windows is not allowing the MBAMProtection service to start as it would normally do.

#5
matt1981m

    New Member

  • Members
  • Pip
  • 9 posts
  • Gender:Male
I have not seen any replies to this issue. Is the issue being addressed? I am getting ready to renew my current AV subscription and would like to get rid of them and use the Malwarebytes protection unit... This issue must be resolved for me to do that. Is this being reviewed or....?

#6
TeMerc

    Forum Deity

  • Moderators
  • PipPipPipPipPipPip
  • 1,935 posts
  • Gender:Male
  • Location:Phx. AZ. USA
  • Interests:Formula 1 Auto Racing, Computer Security, Entertainment, Sci-Fi, SuperHeroes

View Postmatt1981m, on Aug 7 2009, 12:00 AM, said:

I have not seen any replies to this issue. Is the issue being addressed? I am getting ready to renew my current AV subscription and would like to get rid of them and use the Malwarebytes protection unit... This issue must be resolved for me to do that. Is this being reviewed or....?
While this specific thread has not been replied to they are working on trying to narrow down the cause of it for the small handful of systems experiencing the issue.

You'll still need an av application, Malwarebytes is not an antivirus application.
Tom Mercado
Consumer Support Engineer

Posted Image

Follow us: Twitter, Become a fan: Facebook

#7
AdvancedSetup

    Forum Deity

  • Administrators
  • PipPipPipPipPipPip
  • 22,575 posts
  • Gender:Male
  • Location:US
This error only happens on Remote Desktop that we've seen. If using a remote control product that provides console 0 you will not see this error. A user at the computer physically logging in or using it will not see this error either.

As TeMerc said, we are still researching the cause.
Ron Lewis
Manager, Online Support

Posted Image

Follow us: Twitter, Become a fan: Facebook

If you've posted to the HJT forum and it has been over 5 days without a response please send a Private Message asking for assistance.

#8
matt1981m

    New Member

  • Members
  • Pip
  • 9 posts
  • Gender:Male
thank you for replying... I will be switching over to a free av client and will also be using the protection module...thank you again for making such an awesome product!!!!

#9
prairie dog

    Forum Deity

  • Malware Hunters
  • PipPipPipPipPipPip
  • 1,548 posts

View Postmatt1981m, on Aug 9 2009, 03:21 PM, said:

thank you for replying... I will be switching over to a free av client and will also be using the protection module...thank you again for making such an awesome product!!!!

If you are looking for a good free AV. I would recommend Avira Antivir Personal :(
Avira Antivir Personal and MBAM Pro
On demand: SAS and Hitman Pro
Firewall-Online Armor Premium
FF3-adblock plus, noscript, betterprivacy, WOT, Keyscrambler, TrackMeNot
Sandboxie


ONE DAY AT A TIME!

#10
YoKenny1

    Forum Deity

  • Honorary Members
  • PipPipPipPipPipPip
  • 1,739 posts
  • Gender:Male
  • Location:Ont. Canada
  • Interests:Using computers for learning.
    Happily retired IBMer after 31 years mainly in hardware maintenance.
I like avast! anti virus:
http://www.avast.com...avast-home.html
E5200 2.5GHZ, 4GB RAM, 320GB HD, Win7 Home Premium 64-bit, avast! V6.0 Free, IE9
P4 2.8GHZ, 1.5GB RAM, 40GB HD, XP Pro SP3, 32-bit, avast! V6.0 Pro, Macrium Reflect
with IE8 and Chrome, hpHosts, MVPS HOSTS files, MBAM Full, OpenDNS, SpeedFan, WinPatrol PLUS

#11
Firefox

    Forum Deity

  • Trusted Advisors
  • PipPipPipPipPipPip
  • 5,591 posts
  • Gender:Male
  • Location:USA

View Postprairie dog, on Aug 9 2009, 03:26 PM, said:

If you are looking for a good free AV. I would recommend Avira Antivir Personal :lol:
Would you say that this is better than AVG?

Posted Image


Dell Precision T5400, Win7 Ultimate 32bit fully updated, Symantec Endpoint Protection,
Watchguard Firewall, Intel Xeon CPU, Dual Quad Core Processors, 4GB Ram,
E5410 @ 2.33GHz, Nvidia Quadro FX570, Raid-1 Dual 500GB Sata 10000 rpm Hard Drives
Dual DVD Burners, IE9, Opera, MBAM


#12
prairie dog

    Forum Deity

  • Malware Hunters
  • PipPipPipPipPipPip
  • 1,548 posts

View PostFirefox, on Aug 10 2009, 03:21 PM, said:

Would you say that this is better than AVG?

Definetly :( . I use to have AVG 8.5 free and it was ok, but Avira has a much better detection rate and is WAY lighter than AVG on resources. I am very happy with Avira. :(
Avira Antivir Personal and MBAM Pro
On demand: SAS and Hitman Pro
Firewall-Online Armor Premium
FF3-adblock plus, noscript, betterprivacy, WOT, Keyscrambler, TrackMeNot
Sandboxie


ONE DAY AT A TIME!

#13
Firefox

    Forum Deity

  • Trusted Advisors
  • PipPipPipPipPipPip
  • 5,591 posts
  • Gender:Male
  • Location:USA
well gonna have to check it out then... Thanks for the info prairie dog....

Posted Image


Dell Precision T5400, Win7 Ultimate 32bit fully updated, Symantec Endpoint Protection,
Watchguard Firewall, Intel Xeon CPU, Dual Quad Core Processors, 4GB Ram,
E5410 @ 2.33GHz, Nvidia Quadro FX570, Raid-1 Dual 500GB Sata 10000 rpm Hard Drives
Dual DVD Burners, IE9, Opera, MBAM


#14
prairie dog

    Forum Deity

  • Malware Hunters
  • PipPipPipPipPipPip
  • 1,548 posts

View PostFirefox, on Aug 10 2009, 04:36 PM, said:

well gonna have to check it out then... Thanks for the info prairie dog....

You're very welcome :(
Avira Antivir Personal and MBAM Pro
On demand: SAS and Hitman Pro
Firewall-Online Armor Premium
FF3-adblock plus, noscript, betterprivacy, WOT, Keyscrambler, TrackMeNot
Sandboxie


ONE DAY AT A TIME!

#15
Firefox

    Forum Deity

  • Trusted Advisors
  • PipPipPipPipPipPip
  • 5,591 posts
  • Gender:Male
  • Location:USA
got it installed on one computer. It is different than what I am used to seeing. Do you guys have some recommended settings for it, other than the defaults?

Posted Image


Dell Precision T5400, Win7 Ultimate 32bit fully updated, Symantec Endpoint Protection,
Watchguard Firewall, Intel Xeon CPU, Dual Quad Core Processors, 4GB Ram,
E5410 @ 2.33GHz, Nvidia Quadro FX570, Raid-1 Dual 500GB Sata 10000 rpm Hard Drives
Dual DVD Burners, IE9, Opera, MBAM


#16
prairie dog

    Forum Deity

  • Malware Hunters
  • PipPipPipPipPipPip
  • 1,548 posts

View PostFirefox, on Aug 10 2009, 10:18 PM, said:

got it installed on one computer. It is different than what I am used to seeing. Do you guys have some recommended settings for it, other than the defaults?

I just use the default settings. If you set heuristics on high, then you will most likely have to deal with a good amount of False positives. Other than that I'm not sure.
Avira Antivir Personal and MBAM Pro
On demand: SAS and Hitman Pro
Firewall-Online Armor Premium
FF3-adblock plus, noscript, betterprivacy, WOT, Keyscrambler, TrackMeNot
Sandboxie


ONE DAY AT A TIME!

#17
Firefox

    Forum Deity

  • Trusted Advisors
  • PipPipPipPipPipPip
  • 5,591 posts
  • Gender:Male
  • Location:USA
the default was not set to automatically udpate though?

Posted Image


Dell Precision T5400, Win7 Ultimate 32bit fully updated, Symantec Endpoint Protection,
Watchguard Firewall, Intel Xeon CPU, Dual Quad Core Processors, 4GB Ram,
E5410 @ 2.33GHz, Nvidia Quadro FX570, Raid-1 Dual 500GB Sata 10000 rpm Hard Drives
Dual DVD Burners, IE9, Opera, MBAM


#18
prairie dog

    Forum Deity

  • Malware Hunters
  • PipPipPipPipPipPip
  • 1,548 posts

View PostFirefox, on Aug 10 2009, 10:23 PM, said:

the default was not set to automatically udpate though?

Strange. It should have been. Open up the main GUI and go to Administration->scheduler->Check the daily update box
Avira Antivir Personal and MBAM Pro
On demand: SAS and Hitman Pro
Firewall-Online Armor Premium
FF3-adblock plus, noscript, betterprivacy, WOT, Keyscrambler, TrackMeNot
Sandboxie


ONE DAY AT A TIME!

#19
Firefox

    Forum Deity

  • Trusted Advisors
  • PipPipPipPipPipPip
  • 5,591 posts
  • Gender:Male
  • Location:USA
ok I did not see that main gui.... I went some place else forget what its called but I had right clicked the system tray icon and then the item that was not checked was the program updates one.

The one in the gui was checked in the administration section like you said.

Posted Image


Dell Precision T5400, Win7 Ultimate 32bit fully updated, Symantec Endpoint Protection,
Watchguard Firewall, Intel Xeon CPU, Dual Quad Core Processors, 4GB Ram,
E5410 @ 2.33GHz, Nvidia Quadro FX570, Raid-1 Dual 500GB Sata 10000 rpm Hard Drives
Dual DVD Burners, IE9, Opera, MBAM


#20
prairie dog

    Forum Deity

  • Malware Hunters
  • PipPipPipPipPipPip
  • 1,548 posts

View PostFirefox, on Aug 10 2009, 10:51 PM, said:

ok I did not see that main gui.... I went some place else forget what its called but I had right clicked the system tray icon and then the item that was not checked was the program updates one.

The one in the gui was checked in the administration section like you said.

You should be all set :(
Avira Antivir Personal and MBAM Pro
On demand: SAS and Hitman Pro
Firewall-Online Armor Premium
FF3-adblock plus, noscript, betterprivacy, WOT, Keyscrambler, TrackMeNot
Sandboxie


ONE DAY AT A TIME!





1 user(s) are reading this topic

0 members, 1 guests, 0 anonymous users

Follow Us