Unable to Scan Or Deploy to Systems (Target Directory)

Comments

3 comments

  • T Has

    I am also seeing this issue. I dealt with this when we had Malwarebytes Endpoint Security with Anti-Ransomware installed. Back then adding the exclusions to ARW fixed it. We recently converted to Malwarebytes Endpoint Protection (Cloud) and it is back again. I entered the same exclusions and it has not fixed the issue.

    I have also added a Startup Script to delete all of the leftover files in the Deploy and Inventory directories under C:\Windows\AdminArsenal\. I have duplicated my main MB policy and moved my PC into it to try to figure out what setting is causing it, but no lock yet. It was ARW before, but I don't see any ARW-specific settings in Nebula except for Rollback. I tried turning off Anti-Exploit so far with no luck.

    Have you figured out a cure yet?

    1
    Comment actions Permalink
  • Anthony Weiss

    The issue seemed to go away on its own.  There were a number of steps followed, I opened tickets with both vendors on this.

     

    Reference PDQ case 205607 .  This case has a number of standard checks.  It also had fixes to a partially corrupt DB, which you may want to check if appropriate.  It may help support get you to a solution faster than I did (a couple of months)

    Reference Malwarebytes ticket 2934238. This case involved process captures and identified the anti-ransomware portion as the culprit.  They had a beta build that they wanted me to test out, but by the time I circled back to the issue, it suddenly disappeared. Been gone since.

    1
    Comment actions Permalink
  • T Has

    Thanks for the info on the case numbers.

    I turned off Behavior Protection on my test policy a few days ago and the Inventory scan cleanup has been successful ever since. I just turned it back on to see if it starts leaving behind the exe's again.

    1
    Comment actions Permalink

Please sign in to leave a comment.