Kaseya agent is stopped by powershell

Question

Kaseya agent is stopped by powershell

Ion Luca 1

Hi All.

Maybe someone had similar problem and can help me. I have 2 servers with Window Server 2019 and a have an issue,
after i installed Kaseya Agent, the agent service goes down after ~ 30 second and i've seen this error in the application log.

The process 'C:\Program Files (x86)\Kaseya\KSAAS115469179648742\AgentMon.exe' was terminated by the process 'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe' with termination code -1. The creation time for the exiting process was 0x01d794f252ee684f.

I've tried to start service manually but the result was the same.

Please give me an advice if you've had a similar issue.

Thank you in advance.

Rich Matheisen 47,901 Reputation points

2021-08-20T14:57:34.387+00:00

I'd check with Kaseya if I were you. That software's been attacked several time over the last few years, by crypto-currency miners and REvil (ransomware).

PowerShell may be running as a scheduled task to intentionally disable monitoring.

1 answer

Your answer

Rich Matheisen 47,901 Reputation points

2021-08-20T14:57:34.387+00:00

I'd check with Kaseya if I were you. That software's been attacked several time over the last few years, by crypto-currency miners and REvil (ransomware).

PowerShell may be running as a scheduled task to intentionally disable monitoring.

Answer 1

Ion Luca 1

Thank for help. I've found the cause of the problem. There was installed "CentraStage" app which started powershell and stop Kaseya.

Share via

Kaseya agent is stopped by powershell

1 answer

Your answer