PDA

View Full Version : MBAM anti-malware application


twl845
April 11th, 2008, 09:07 PM
I have just learned of an antimalware app called MBAM or "Malwarebytes Antimalware". http://www.malwarebytes.org/mbam.php
Is any one here using this product, and if so what is your impression of it? Any screen shots? :)

LoneWolf
April 11th, 2008, 10:34 PM
-{ Quote: "I have just learned of an antimalware app called MBAM or "Malwarebytes Antimalware". http://www.malwarebytes.org/mbam.php
Is any one here using this product, and if so what is your impression of it? " }-


Been using it for around 9 months.
Updates often,excellent support,fairly quick scanning.
IMO an very good anti-malware that keeps getting better.
I use MBAM for realtime and SAS on-demand.
Free version=scan and remove / Paid adds a guard

-{ Quote: "Any screen shots? :)" }-

Ok.....

G1111
April 11th, 2008, 10:47 PM
-{ Quote: "I have just learned of an antimalware app called MBAM or "Malwarebytes Antimalware". http://www.malwarebytes.org/mbam.php
Is any one here using this product, and if so what is your impression of it? Any screen shots? :)" }-

I second LoneWolf excellant program and support. I use it along side KAV.

bellgamin
April 12th, 2008, 12:13 AM
The cost for paid version is ~$25, which (per their website (http://www.malwarebytes.org/propurchase.php)) licenses MBAM for "lifetime"...

-{ Quote: "Malwarebytes is committed to our customers, we do not tack on hidden fees or extra costs of any kind. By purchasing our products you receive a lifetime of free upgrades and support after ordering. With RegNow services, you can have your license information in your e-mail inbox within a few minutes of ordering." }-

I have had consistently bad experience with outfits that offer lifetime, one-off licenses. It's a risky business model IMO.

EliteKiller
April 12th, 2008, 02:19 AM
-{ Quote: "The cost for paid version is ~$25, which (per their website (http://www.malwarebytes.org/propurchase.php)) licenses MBAM for "lifetime"...



I have had consistently bad experience with outfits that offer lifetime, one-off licenses. It's a risky business model IMO." }-

I have zero problems supporting a company that offers a solid product w/ a lifetime license. Even if you only get 2-5 years out a of a $25 license it's better than dealing with annual renewals. Both SAS and MBAM offer free versions with identical detection/removal rates as the pay version. The same cannot be said for other select "brand name" antispyware apps that require annual renewals.

stapp
April 12th, 2008, 02:35 AM
Thanks to Lone Wolf for the screenshots. Useful info for when my AVG antispy runs out.

lordpake
April 12th, 2008, 02:44 AM
My (currently) only beef with MBAM is that there is no way to trial the resident protection. All you have is a fancy button that tells whether it works or not. Not very cool. You don't get any chance to see how it would actually impact your system's overall performance or how it acts in conjunction with other applications.

twl845
April 12th, 2008, 09:43 AM
Thanks for the info and screenshots Lonewolf! I'll give it a try when my AVG gets closer to timing out. ;D

MaB69
April 12th, 2008, 10:08 AM
-{ Quote: "My (currently) only beef with MBAM is that there is no way to trial the resident protection. All you have is a fancy button that tells whether it works or not. Not very cool. You don't get any chance to see how it would actually impact your system's overall performance or how it acts in conjunction with other applications." }-

Hi lordpake,

I have to agree with you but may be you can suggest this at MBAM forum (http://www.malwarebytes.org/forums/) ?

Regards,

MaB

twl845
April 12th, 2008, 10:19 AM
-{ Quote: "Hi lordpake,

I have to agree with you but may be you can suggest this at MBAM forum (http://www.malwarebytes.org/forums/) ?

Regards,

MaB" }-
I take it from your signature that MBAM coexists with OA well? :)

MaB69
April 12th, 2008, 10:41 AM
-{ Quote: "I take it from your signature that MBAM coexists with OA well? :)" }-

Hi twl845,

What's make you think this ?
I don't use AS in realtime

regards,

MaB

Chubb
April 12th, 2008, 10:42 AM
-{ Quote: "The cost for paid version is ~$25, which (per their website (http://www.malwarebytes.org/propurchase.php)) licenses MBAM for "lifetime"..." }-

BTW, I couldn't find the price of the life-time on the web site (http://www.malwarebytes.org/propurchase.php)

The Buy Now (http://www.regnow.com/softsell/nph-softsell.cgi?item=12128-1) button always bring me to an empty web page.

Have I missed something?:wacko:

twl845
April 12th, 2008, 11:21 AM
-{ Quote: "Hi twl845,

What's make you think this ?
I don't use AS in realtime

regards,

MaB" }-
I just noticed that you are using OA as am I, so I thought I'd check. ;D

LoneWolf
April 12th, 2008, 11:24 AM
-{ Quote: "BTW, I couldn't find the price of the life-time on the web site (http://www.malwarebytes.org/propurchase.php)

The Buy Now (http://www.regnow.com/softsell/nph-softsell.cgi?item=12128-1) button always bring me to an empty web page.

Have I missed something?:wacko:" }-

The buy now link takes me to the RegNow purchase page, $24.95 for one lifetime lic.
You can download the free version to give it a spin from MajorGeeks (http://www.majorgeeks.com/Malwarebytes_Anti-Malware_d5756.html).
The last I heard, the Malwarebytes developers were planning to work on a trial version of the paid.(with guard)
I posted asking about the trial over at their forums. They are usually pretty quick at answering.

Chubb
April 12th, 2008, 12:13 PM
-{ Quote: "The buy now link takes me to the RegNow purchase page, $24.95 for one lifetime lic.
You can download the free version to give it a spin from MajorGeeks (http://www.majorgeeks.com/Malwarebytes_Anti-Malware_d5756.html).
The last I heard, the Malwarebytes developers were planning to work on a trial version of the paid.(with guard)
I posted asking about the trial over at their forums. They are usually pretty quick at answering." }-

Thanks, but no matter I open the Buy Now link in Opera, IE or Firefox, it always give me a blank page. Did I miss something? Thanks. :wacko:

LoneWolf
April 12th, 2008, 12:21 PM
-{ Quote: "Thanks, but no matter I open the Buy Now link in Opera, IE or Firefox, it always give me a blank page. Did I miss something? Thanks. :wacko:" }-

Clicking on the buy now link I get this.

199183

I don't know why it's not working for you.
I'm using Firefox.
You can also download the free version from Major Geeks (http://www.majorgeeks.com/Malwarebytes_Anti-Malware_d5756.html)

199184

Saraceno
April 12th, 2008, 12:26 PM
Chubb: clear your cache and then reload page.

Thanks for the screenshots LoneWolf. That's how a GUI should look. Downloaded the trial and very impressed. :thumb:

Is the realtime scanner resource heavy at all, or fairly light?

LoneWolf
April 12th, 2008, 12:36 PM
-{ Quote: "Chubb: clear your cache and then reload page.

Thanks for the screenshots LoneWolf. That's how a GUI should look. Downloaded the trial and very impressed. :thumb:

Is the realtime scanner resource heavy at all, or fairly light?" }-


Here is the memory usage.

199185

I know that does not tell the whole story but after starting up windows and logging on there is an initial high cpu usage which calms down to 0 or near 0 cpu after around 20 sec or so.
No slow downs at all here though with guard active. MBAM works well with the rest of my setup.

You say you downloaded the trial?
I think you may have the free version.

Saraceno
April 12th, 2008, 01:08 PM
Thanks for that.

Seems standard for a light program running.

I downloaded the free version, and the scan was running light, but am interested in trying out a trial of the full version if it becomes available.

You used it for long?

And hopefully they stick a big fat logo on their site asap. ;)

LoneWolf
April 12th, 2008, 01:12 PM
Unforunetly it seems that there will be no trial (http://www.malwarebytes.org/forums/index.php?showtopic=4241) with the guard for a while.

Chubb
April 12th, 2008, 01:16 PM
-{ Quote: "Clicking on the buy now link I get this.
I don't know why it's not working for you.
I'm using Firefox.
" }-

Hi LoneWolf,

Thanks for the screenshot. I can download the file, only that the Regnow page doesn't load, even after closing KIS. Will boot to Windows XP and see what happens.

lordpake
April 12th, 2008, 01:18 PM
-{ Quote: "Unforunetly it seems that there will be no trial (http://www.malwarebytes.org/forums/index.php?showtopic=4241) with the guard for a while." }-
Well that SUCKS. I guess this app is a no-go for me then, too bad.

twl845
April 12th, 2008, 01:33 PM
-{ Quote: "Thanks for the info and screenshots Lonewolf! I'll give it a try when my AVG gets closer to timing out. ;D" }-
Has anyone had to use it to clean out malware yet? If you have, how did it do?

n8chavez
April 13th, 2008, 03:24 AM
Is there any way of testing this product? I would hate to find out after the fact that I wasn't protected like I thought I was.

Perman
April 13th, 2008, 09:16 AM
-{ Quote: "Is there any way of testing this product? I would hate to find out after the fact that I wasn't protected like I thought I was." }-
Hi,

If I were you, I would

Just continue to use its free on-demand scanner, until such time that there are sufficient data/evidences to convince you that it is paid ware keeper.

Reasons ? There is no time-limited free trials available, plus you already have
"Win Patrol plus" which provides real time monitoring functions, although it may not perform that top-notched task---it is OK.

In any given business sense, brushing customers' feather in opposite direction IS a fatal error.---I mean NO free trial- let alone a new comer with little credentials(they may have some freewares experiences, so what !) under the belt. Even a deep discount, I will be hesitated to fork over hard currency.

Take care.

Good luck.

twl845
April 13th, 2008, 09:25 AM
-{ Quote: "Hi,

If I were you, I would

Just continue to use its free on-demand scanner, until such time that there are sufficient data/evidences to convince you that it is paid ware keeper.

Reasons ? There is no time-limited free trials available, plus you already have
"Win Patrol plus" which provides real time monitoring functions, although it may not perform that top-notched task---it is OK.

In any given business sense, brushing customers' feather in opposite direction IS a fatal error.---I mean NO free trial- let alone a new comer with little credentials(they may have some freewares experiences, so what !) under the belt. Even a deep discount, I will be hesitated to fork over hard currency.

Take care.

Good luck." }-
I definetely agree. When the time comes, I will try the free product for a while before I consider buying. Perhaps the word will get back to the company that trial versions are good business. ;)

RubbeR DuckY
April 13th, 2008, 01:37 PM
I assure you all we are working on a trial of the product. The scanner and updating has been, and always will be free of charge.

Thanks for the support (and the criticisms) everyone.

Marcin

n8chavez
April 13th, 2008, 02:09 PM
I think certain application deserve a little faith. Yes, there is no trial of the on-access scanner. So what? If you don't have that much faith in the company to purchase AM now you never will.

LoneWolf
April 13th, 2008, 04:02 PM
-{ Quote: "I assure you all we are working on a trial of the product. The scanner and updating has been, and always will be free of charge.

Thanks for the support (and the criticisms) everyone.

Marcin" }-

Thanks for the news and post RubbeR Ducky. ;D
I'm sure that when the trial is ready it will be welcomed by many here. :thumb:

-{ Quote: "I think certain application deserve a little faith. Yes, there is no trial of the on-access scanner. So what? If you don't have that much faith in the company to purchase AM now you never will." }-

Right no trial yet, but that is coming.
The scanner is available for free so why not?
To each their own though.
Myself, I've had faith in Malwarebytes enough to beta test their app.
And I don't have faith in many betas. ;D
Glad I did,turned out to be a fine finished product. :thumb:

n8chavez
April 13th, 2008, 04:11 PM
-{ Quote: "
Right no trial yet, but that is coming.
The scanner is available for free so why not?
To each their own though.
Myself, I've had faith in Malwarebytes enough to beta test their app.
And I don't have fath in many betas. ;D
Glad I did,turned out to be a fine finished product. :thumb:" }-

No worries on my end. I bought MBAM yesterday via SixFiles (thanks Teknokrat). I am very excited about this product. Although, I will admit that I'd like to see it in action.

quietman7
April 13th, 2008, 04:55 PM
-{ Quote: "Has anyone had to use it to clean out malware yet? If you have, how did it do?" }-I have used MBAM numerous time to assist others with malware infection removal. It is very effective especially against the rogue applications that keep appearing, smitfraud and vundo variants. Those involved in its development like Rubber Ducky are dedicated to its ongoing improvement and I appreciate all their hard work and efforts with this product.

ejames82
April 13th, 2008, 10:08 PM
the free version works flawlessly as an on-demand scanner, in the same way that asquared free does. the update goes smoothly and quickly with a progress bar. the scan is quick and saves a log file. it's easy to use in safe mode. you can tell that it is well thought out. the forum is very receptive to suggestions and the atmosphere is good. these guys are busting their fannies on these programmes, and they know what they're doing.
it's a good feeling to have another malware remover on the computer, just in case.

Perman
April 14th, 2008, 07:57 AM
-{ Quote: "I assure you all we are working on a trial of the product. The scanner and updating has been, and always will be free of charge.

Thanks for the support (and the criticisms) everyone.

Marcin" }-
Hi,

I like what I hear and Have already experienced the excellent work your product(free scanner) has delivered.

We all know SAS and Nick both have been very successful in making SAS above the crowds. I have sensed many similarities on your products, I dubbed yours is an understudy to SAS.

Keeping up the good work. Lending your ears to the consumers/customers is undoubtably the vital ingredient of success, small venture/new comer in particular.

lordpake
April 14th, 2008, 01:38 PM
-{ Quote: "I think certain application deserve a little faith. Yes, there is no trial of the on-access scanner. So what? If you don't have that much faith in the company to purchase AM now you never will." }-

Faith? Oh I do have faith in them. What I also have is my own (quite possibly unique) system setup here. Which is why a trial with working resident protection would be nice :)

To see whether it runs or not; and if it runs, how smoothly. As Aradia here (my PC ^^) only has 512MB RAM, it's important to see how much MBAM uses.

And no, I most likely will not be adding more RAM, instead I'm likely saving my pennies for a whole new setup, as this one is getting quite archaic ;D

twl845
April 14th, 2008, 01:53 PM
I'm sure it'll be fine. If not uninstall it. Glad to hear you're going for a new set up. Two things to consider are: Vista Ultimate reqiures 2 gb of Ram to run the system and have some left over, and Dell will be glad to let you pay off your computer on time so you can have your new computer now and save to pay for it at the same time. I'm sure the other manufacturers have time payments as well. ;D

lordpake
April 14th, 2008, 01:57 PM
Oh no, no Dell for me. Never! Aradia is custom built, each part handpicked by yours truly. The only real way to go :) And don't even get me started on Vista... I think I'll stick to XP as long as possible.

twl845
April 14th, 2008, 02:04 PM
-{ Quote: "Oh no, no Dell for me. Never! Aradia is custom built, each part handpicked by yours truly. The only real way to go :) And don't even get me started on Vista... I think I'll stick to XP as long as possible." }- XP forever for me as well. A custom built sounds great! That is out of my league. I'm retired on a fixed income.

twl845
April 14th, 2008, 06:45 PM
I just installed the free version and ran a quick scan. I must have had 5 or 6 FW popups during the installation and received one popup I believe after the scan that stated MBAM was trying to take over SuperAntispyware, where upon I clicked block. Has anyone else seen this attempt to take over SAS, or am I misinterpreting it?

Perman
April 14th, 2008, 06:55 PM
-{ Quote: " Has anyone else seen this attempt to take over SAS, " }-
Hi,

Not this lighting speed ! although I have said that MBAM is an understudy to SAS. :)

I run Both free on demand scanner, during MBAM's installation I did not have any warning in this nature.

ejames82
April 14th, 2008, 07:39 PM
-{ Quote: "I think I'll stick to XP as long as possible" }-
-{ Quote: "XP forever for me as well." }-

microsoft just extended xp (i would assume support for it) and i think they will continue to. it's hard to avoid all the problems and complaints associated with vista. people are singing the praises of win98. i hear some people even gloating about still using win98. if they pull the plug on xp, i think you'll see a stampede of people that switch to linux, or an alternative OS, and never return to microsoft.

twl845
April 14th, 2008, 09:27 PM
-{ Quote: "Hi,



I run Both free on demand scanner, during MBAM's installation I did not have any warning in this nature." }-
The pop up concerning SuperAntispyware was After the installation during the scan.

RubbeR DuckY
April 14th, 2008, 09:28 PM
-{ Quote: "Has anyone else seen this attempt to take over SAS, or am I misinterpreting it?" }-

Can I please see a screenshot? The firewall messages might have been because you left the "Check for Updates" option checked after installation.

No clue on the SAS popups though, would like to take a look :).

twl845
April 14th, 2008, 09:36 PM
-{ Quote: "Can I please see a screenshot? The firewall messages might have been because you left the "Check for Updates" option checked after installation.

No clue on the SAS popups though, would like to take a look :)." }-
How can I give a screenshot of a pop up that is gone? I'll check the check for updates option. I presume it should be off? Later - There is no Check for updates to leave checked. All the is, is a check for updates button.

RubbeR DuckY
April 14th, 2008, 09:40 PM
-{ Quote: "
How can I give a screenshot of a pop up that is gone?
" }-

Sorry about that, I meant if you could reproduce it.

-{ Quote: "
I'll check the check for updates option. I presume it should be off?
" }-

No, I was only speaking about the installer. Many users do not update the product after they install it. Therefore, we added an optional "Check for Updates" function to download the latest updates after installation. This does not affect your computer after the installation is completed. You are now responsible for checking for updates :).

Let me know if I can help with anything else and hopefully you can reproduce that popup.

twl845
April 14th, 2008, 09:47 PM
-{ Quote: "Sorry about that, I meant if you could reproduce it.



No, I was only speaking about the installer. Many users do not update the product after they install it. Therefore, we added an optional "Check for Updates" function to download the latest updates after installation. This does not affect your computer after the installation is completed. You are now responsible for checking for updates :).

Let me know if I can help with anything else and hopefully you can reproduce that popup." }-
OK, I'll try. :)

Firebytes
April 16th, 2008, 01:01 AM
RubbeR DuckY (or anyone else in the know),

I installed MBAM to try it out (with Returnil session lock engaged) and I have a couple of questions.

The program allows for performing a right click scan on individual files/folders, which works if MBAM is not already running (it opens MBAM and scans the selected file/folder). If you already have MBAM running (but not scanning) and then right click a file/folder and select scan a window pops up and advises that MBAM is already running and then MBAM doesn't scan the selection. So is it not possible to select an individual file or folder if MBAM is already open? I didn't see any option inside the GUI for scanning individual files/folders. Did I miss something?

Concerning the test button for determining if realtime protection is compatible with a users system; what are the most common things that cause a system to fail the test? (It failed on the system I tested it on but maybe it was due to having Returnil's Session Lock engaged?)

Thanks

n8chavez
April 16th, 2008, 01:20 AM
-{ Quote: "RubbeR DuckY (or anyone else in the know),

I installed MBAM to try it out (with Returnil session lock engaged) and I have a couple of questions.

The program allows for performing a right click scan on individual files/folders, which works if MBAM is not already running (it opens MBAM and scans the selected file/folder). If you already have MBAM running (but not scanning) and then right click a file/folder and select scan a window pops up and advises that MBAM is already running and then MBAM doesn't scan the selection. So is it not possible to select an individual file or folder if MBAM is already open? I didn't see any option inside the GUI for scanning individual files/folders. Did I miss something? " }-

No, you are not correct; MBAM has no problem scanning files and/or folders on my system if the main gui is currently open.

-{ Quote: "Concerning the test button for determining if realtime protection is compatible with a users system; what are the most common things that cause a system to fail the test? (It failed on the system I tested it on but maybe it was due to having Returnil's Session Lock engaged?)

Thanks" }-

I have no clue on this one. I would guess that Returmil is the problem, though I cannot be sure.

Huupi
April 16th, 2008, 04:27 AM
just installed it,small file 1,5 mb !,the free version is good enough for me,doing only on demand scans,IMO scanspeed is comparable with SAS,many languages (Dutch !!) GUI could'nt be better,simple and transparant,updates are fast and smooth,and supportforums are very helpfull,good support from the developpers team.

But as always :How it keeps up with all the presentday malware,so like to hear how it perform in detecting and cleaning,any experiences ??

twl845
April 16th, 2008, 08:16 AM
-{ Quote: "RubbeR DuckY (or anyone else in the know),

I installed MBAM to try it out (with Returnil session lock engaged) and I have a couple of questions.

The program allows for performing a right click scan on individual files/folders, which works if MBAM is not already running (it opens MBAM and scans the selected file/folder). If you already have MBAM running (but not scanning) and then right click a file/folder and select scan a window pops up and advises that MBAM is already running and then MBAM doesn't scan the selection. So is it not possible to select an individual file or folder if MBAM is already open? I didn't see any option inside the GUI for scanning individual files/folders. Did I miss something?

Concerning the test button for determining if realtime protection is compatible with a users system; what are the most common things that cause a system to fail the test? (It failed on the system I tested it on but maybe it was due to having Returnil's Session Lock engaged?)

Thanks" }-
Are you using the free or paid version?

Firebytes
April 16th, 2008, 12:26 PM
-{ Quote: "Are you using the free or paid version?" }-

I was trying out the free version. It has a "test button" to determine if the real time protection would be compatible with a users system.

-{ Quote: " No, you are not correct; MBAM has no problem scanning files and/or folders on my system if the main gui is currently open." }-

You are able to right click and scan individual folders with MBAM already open? I sure couldn't, but maybe something else on my system was causing the problem. I will try MBAM again later and see if I can figure it out.

n8chavez
April 16th, 2008, 12:43 PM
-{ Quote: "
You are able to right click and scan individual folders with MBAM already open? I sure couldn't, but maybe something else on my system was causing the problem. I will try MBAM again later and see if I can figure it out." }-

That is correct. I had no problems doing what you described.

Firebytes
April 16th, 2008, 01:10 PM
n8chavez,

I haven't tried MBAM again yet but I was thinking that possibly the difference in why it didn't work on my system was that maybe the system needs to be rebooted after installing MBAM. I didn't reboot after installing it since I was under session lock with Returnil at the time. MBAM didn't ask for a reboot when installing either though. Like I said I will test it out again later.

Also, I doubt it makes a difference but I think you are using the paid (resident protection ) version right? I was trying the free version.

n8chavez
April 16th, 2008, 01:23 PM
-{ Quote: "n8chavez,

Also, I doubt it makes a difference but I think you are using the paid (resident protection ) version right? I was trying the free version." }-

Yes, I have the paid version (which I got at a discout from SixFiles (http://sixfiles.com/dbase/files/malwarebytes-malwarebytes-anti-malware.html)).

LoneWolf
April 16th, 2008, 01:37 PM
Interesting........
If I have the GUI open and I wish to right click to scan a file I get this message too.....

199284

Never thought about this before.
Not sure I'm concerned about it either.
This is with the pro version, Guard active.
Turning guard off has the same results here.

Firebytes
April 16th, 2008, 02:18 PM
-{ Quote: "Interesting........
If I have the GUI open and I wish to right click to scan a file I get this message too.....Never thought about this before.
Not sure I'm concerned about it either.
This is with the pro version, Guard active.
Turning guard off has the same results here." }-

If you can't right click and scan a file/folder on demand with the program running (especially with the pro version running all the time) then that kind of kills the point of having the shell extension at all. I wonder why n8chavez is able to do so and we can't? Must be something about our systems.

LoneWolf
April 16th, 2008, 02:33 PM
-{ Quote: "If you can't right click and scan a file/folder on demand with the program running (especially with the pro version running all the time) then that kind of kills the point of having the shell extension at all. I wonder why n8chavez is able to do so and we can't? Must be something about our systems." }-

But if I want to right click and scan a single file, I don't have the GUI of MBAM open anyway so like I said its no big deal to me.

Firebytes
April 16th, 2008, 02:47 PM
-{ Quote: "But if I want to right click and scan a single file, I don't have the GUI of MBAM open anyway so like I said its no big deal to me." }-

gotcha

Huupi
April 16th, 2008, 04:11 PM
It looks like that MBAM can't scan external drives,if i select my external drive in the scan interface to scan it,then it scans my C:\,very weird !?!.
Also if i rightclick the drive in comp. management to scan,it starts but after a second it throw up screen '' fineshed sucsessfully '',and a log with nothing found in memory,systemfiles bla bla bla.
I would say,try it yourself,i'm curious if its only me or...........:-[

n8chavez
April 16th, 2008, 05:03 PM
-{ Quote: "It looks like that MBAM can't scan external drives,if i select my external drive in the scan interface to scan it,then it scans my C:\,very weird !?!.
Also if i rightclick the drive in comp. management to scan,it starts but after a second it throw up screen '' fineshed sucsessfully '',and a log with nothing found in memory,systemfiles bla bla bla.
I would say,try it yourself,i'm curious if its only me or...........:-[" }-

I'm sorry but I cannot help you right now as I do not have an external drive. I do plan on going to the University tomorrow where I can meet up with a friend of mine that has one. I will report back then.

RubbeR DuckY
April 18th, 2008, 04:53 PM
I scarcely get replies about topic notifications. I am subscribed to this thread, weird.

Anyway, the reason the program does not scan when you click on the shell extension and the GUI is open because it would defeat the purpose of a shell extension.

The purpose of the shell extension is to scan a file when the main GUI is closed. Granted, that would be a nice feature to be able to scan a file with the GUI open .. will look into that. :)

Huupi
April 18th, 2008, 04:57 PM
-{ Quote: "I scarcely get replies about topic notifications. I am subscribed to this thread, weird.

Anyway, the reason the program does not scan when you click on the shell extension and the GUI is open because it would defeat the purpose of a shell extension.

The purpose of the shell extension is to scan a file when the main GUI is closed. Granted, that would be a nice feature to be able to scan a file with the GUI open .. will look into that. :)" }-

And to my question ?

RubbeR DuckY
April 18th, 2008, 04:58 PM
Ooops, sorry about that :).

What kind of external drive is it? A USB connected drive? Can you please tell me if it shows up in the Full Scan list?

Huupi
April 18th, 2008, 05:13 PM
-{ Quote: "Ooops, sorry about that :).

What kind of external drive is it? A USB connected drive? Can you please tell me if it shows up in the Full Scan list?" }-

It does,but in preferences,defaults are scan ALWAYS registry,memory etc.so if i select my external USB2 drive,i guess it wil scan that drive but always first my system because of that,this is not good because i have to untick the default preferences.It works but its quite an annoyance to do that over and over again if i wish to scan my external drives.

thanks.

RubbeR DuckY
April 18th, 2008, 05:15 PM
You can click Full Scan and uncheck everything but the external drive. Or, you can scan the external drive with the shell extension, this is probably the best choice.

Huupi
April 18th, 2008, 05:39 PM
-{ Quote: "You can click Full Scan and uncheck everything but the external drive. Or, you can scan the external drive with the shell extension, this is probably the best choice." }-

No, it will always scan the system (C:\) first,because of the defaults[look in preferences],if i do it from the shell extension,indeed it scan my ext. disk such as music files,office files and stuff but not the compressed Shadow Protect image files.
After the scan it throw up a log file with nothing relevant in it such as nothing found in memory,nothing found in registry ??? ,nothing found in files.
I better like to have a logfile from what it actually scant !!! :D

Sorry but this is what i get from it.

RubbeR DuckY
April 18th, 2008, 05:41 PM
It will not scan your images because they are probably huge files. There is a size limit for scanning. Also, anything being scanned on your C:\ drive is probably memory and heuristics, which should not take more than 1 minute combined.

Huupi
April 18th, 2008, 05:59 PM
-{ Quote: "It will not scan your images because they are probably huge files. There is a size limit for scanning. Also, anything being scanned on your C:\ drive is probably memory and heuristics, which should not take more than 1 minute combined." }-

Admit it scans very fast,great ! But i like to scan only what is selected,and i like to have a log in what it actually scanned. The initial '' default '' scan include also system folders and registry,and on my rig it takes 9 min. to finish,thereafter it scans the selected drive,no there is something definatily wrong with your shell coding,sorry to say so but these are my findings.

These image files are huge (gigs) so i understand

edit : my mistake , initial scan before the selected drive is scanned took 27 sec. i can live with that !!

Macstorm
April 20th, 2008, 01:31 AM
Nice GUI (from post #2).

I've never heard of this security app before. Thanks ;)

Huupi
April 20th, 2008, 05:10 AM
So MBAM should be a good one,cause on some cleaning forums,MBAM is the preferred tool,no mention of SAS ! ???

twl845
April 20th, 2008, 08:40 AM
-{ Quote: "So MBAM should be a good one,cause on some cleaning forums,MBAM is the preferred tool,no mention of SAS ! ???" }-
I am running SAS real time, and installed MBAM for on demand scans the other day. I think this will be a nice combo. ;D

Perman
April 20th, 2008, 08:59 AM
-{ Quote: "I am running SAS real time, and installed MBAM for on demand scans the other day. I think this will be a nice combo. ;D" }-
Hi,

IMO, this is an excellent arrangement !

MBAM is an relatively new product(although been around for a bit :) ) and has a full steam built in, IS an ideal BACKUP, should something very good happen to SAS, then you have an understudy to fall onto.

I am awaiting MBAM's next smart move ( incentive)to get feet wet on its Pro version, and I would urge its developer to prioritize it . ::)

Huupi
April 20th, 2008, 11:52 AM
As already said,looks very promising,today i did my weekly ondemand scans with both SAS and MBAM.
MBAM found a trojan, Trojan.Fakealert in progamfiles/rainlendar/uninstall.exe,but SAS stay silent ! Both with most recent signatures.
Sadly in my hurry i let MBAM clean it,so i can't upload it anymore.

EliteKiller
April 20th, 2008, 12:04 PM
-{ Quote: "As already said,looks very promising,today i did my weekly ondemand scans with both SAS and MBAM.
MBAM found a trojan, Trojan.Fakealert in progamfiles/rainlendar/uninstall.exe,but SAS stay silent ! Both with most recent signatures.
Sadly in my hurry i let MBAM clean it,so i can't upload it anymore." }-

It could have been a FP since Rainlendar (http://www.rainlendar.net/cms/index.php) is a legit calendar app. Check the MBAM Quarantine.

fcukdat
April 20th, 2008, 01:08 PM
-{ Quote: "As already said,looks very promising,today i did my weekly ondemand scans with both SAS and MBAM.
MBAM found a trojan, Trojan.Fakealert in progamfiles/rainlendar/uninstall.exe,but SAS stay silent ! Both with most recent signatures.
Sadly in my hurry i let MBAM clean it,so i can't upload it anymore." }-

So You had a fake alert icon in your toolbar flashing away trying to goad you into downloading and buying rogue brand X to clean what it claims is active on your PC ????

If you had fake alert bot(Trojan) on your machine you would not need an antimalware scanner to tell you it was there;) it would be bugging the hell out of you whilst your pondering where the hell did that come from....

Almost certainly a False/positive by MBAM and not a miss by SAS;)

Huupi
April 20th, 2008, 01:13 PM
It could be,as already said i have no evidence anymore.

legit app. could be compromised in many ways so i'm not surprised that a trojan was found in Rainlendar executable. But what you said is totally possible,at least SAS found nothing.

Huupi
April 20th, 2008, 01:36 PM
-{ Quote: "So You had a fake alert icon in your toolbar flashing away trying to goad you into downloading and buying rogue brand X to clean what it claims is active on your PC ????

If you had fake alert bot(Trojan) on your machine you would not need an antimalware scanner to tell you it was there;) it would be bugging the hell out of you whilst your pondering where the hell did that come from....

Almost certainly a False/positive by MBAM and not a miss by SAS;)" }-

I know the carnival,big black bugs crawling acros my friends desktop,flashing popups and stuff.
BTW i had this discussed in an earlier thread concerning SAS cleaning abilities,where i had to admit that SAS failed on me because of me( assumed that system restore points were deleted,before cleaning,but it was'nt.)

Perman
April 21st, 2008, 12:03 AM
Hi,

I ran MBAM couple days ago, it found Trojan.FakeAlert in my C:\System Volume Information\_restore xxxxx,

A F.P. ?

EliteKiller
April 21st, 2008, 12:07 AM
-{ Quote: "Hi,

I ran MBAM couple days ago, it found Trojan.FakeAlert in my C:\System Volume Information\_restore xxxxx,

A F.P. ?" }-
Possibly. However check the MBAM quarantine to see if it's there, then look under 'more tools' and submit the file to MB for further analysis. You could also check it on virscan.org and virustotal.

KDNeese
April 21st, 2008, 02:47 AM
-{ Quote: "I just installed the free version and ran a quick scan. I must have had 5 or 6 FW popups during the installation and received one popup I believe after the scan that stated MBAM was trying to take over SuperAntispyware, where upon I clicked block. Has anyone else seen this attempt to take over SAS, or am I misinterpreting it?" }-

What program (HIPS software I assume) were you running that gave you the popups? I don't know if this is related, but I did notice that after installing MBAM that my context menu had changed. Before installation one of the options on the context menu was "Scan with Superantispyware." After installation that option disappeared from the context menu and was replaced with "Scan with Malwarebytes Antimalware." I don't remember the installation procedure asking me if I wanted MBAM in the menu, but I know I wasn't very happy that SAS had disappeared. I was able to fix the problem and have both apps in the menu, but I'm wondering if this is something related to the popups you received. So far I like MBAM, although I really don't like the idea of any program making itself a default app or changing file associations without my prior permission.

EASTER
April 21st, 2008, 03:21 AM
Do you guys really trust this app and can you yourselves who bought into it can show some proof in screenshots how it is been effective against malwares or rootkits?

Curious.

Huupi
April 21st, 2008, 03:45 AM
It was way back in 2006 that Nick from SAS was almost beaten to death,so to speak that i felt sorry for him. The harsh critics he had to endure at the time would anybody scared away from Wilders but not for him !!
And see how it evolved with time into what we have today. :D

To show and proof his dream came trough had anything to do with Nick ,more so then the ''constructive remarks'' here on Wilders.

KDNeese
April 21st, 2008, 08:52 AM
-{ Quote: "Do you guys really trust this app and can you yourselves who bought into it can show some proof in screenshots how it is been effective against malwares or rootkits?

Curious." }-

Having just installed it and, as far as I know, having a clean system, it hasn't had the opportunity to show me what it can do. However, I could say the same thing about any of my security apps. My AV as never alerted (except on a few FP's), SAS has never alerted or detected anything on scan, SSM has never warned me of anything illegitimate starting up... I could go on. But that is simply because I am an ultra-safe surfer and take the property security measures to mitigate my chances of becoming infected. So at least in my circumstances, lack of detection is like an argument from silence.. it doesn't really prove anything. I did some research on MBAM before I ever decided to install it, and I have found nothing to make me distrust it or the company. It is available for download on several sites I trust (which have also tested it and attest to its trustworthiness). I saw no reason why I should avoid it.

twl845
April 21st, 2008, 09:25 AM
-{ Quote: "What program (HIPS software I assume) were you running that gave you the popups? I don't know if this is related, but I did notice that after installing MBAM that my context menu had changed. Before installation one of the options on the context menu was "Scan with Superantispyware." After installation that option disappeared from the context menu and was replaced with "Scan with Malwarebytes Antimalware." I don't remember the installation procedure asking me if I wanted MBAM in the menu, but I know I wasn't very happy that SAS had disappeared. I was able to fix the problem and have both apps in the menu, but I'm wondering if this is something related to the popups you received. So far I like MBAM, although I really don't like the idea of any program making itself a default app or changing file associations without my prior permission." }-
At the time I was installing, I was unaware that the new version of my FW had a bug which sent out the pop ups. The bug got fixed and I uninstalled MBAM and all traces of it in the registry and programs page of the FW, and re-installed it with only one pop up.