PDA

View Full Version : Possible MBAM false positives?


JRCATES
January 3rd, 2009, 01:37 AM
I just downloaded and installed Megabytes' Anti-Malware.....updated the definitions and ran my first scan.

It found two objects, that after Googling and researching a bit, might be false positives. Neither NOD32, Kasperksy Online Scanner, or SuperAntiSpyware identified either of these objects (marked by MBAM as "adware").

For now, I have selected them to be "ignored" by MBAM in future scans. But without submitting them as false positives....is there any other way to have them looked at more closely?

Thanks

firzen771
January 3rd, 2009, 01:48 AM
-{ Quote: "I just downloaded and installed Megabytes' Anti-Malware.....updated the definitions and ran my first scan.

It found two objects, that after Googling and researching a bit, might be false positives. Neither NOD32, Kasperksy Online Scanner, or SuperAntiSpyware identified either of these objects (marked by MBAM as "adware").

For now, I have selected them to be "ignored" by MBAM in future scans. But without submitting them as false positives....is there any other way to have them looked at more closely?

Thanks" }-

first of all, im guessing u mean Malwarebytes' and not megabytes'. and maybe if u can tell us where these files are located, are they a file to a well known application.

cheater87
January 3rd, 2009, 02:23 AM
What did it find and where?

TonyKlein
January 3rd, 2009, 02:47 AM
Also, it would be a very good idea to post at the Malwarebytes board in the False Positives (http://www.malwarebytes.org/forums/index.php?showforum=42) section.

Not only is that by far the fastest way of both bringing it to the developers attention and getting an informed opinion, but, should it indeed be a FP, it would then be fixed very fast indeed.

JRCATES
January 3rd, 2009, 04:35 AM
Thanks for the replies and responses, guys :thumb:

MALWAREbytes' (yes, my bad - nasty cold has been clouding my thinking the past few days) Anti-Malware found two registry entries referring to Weatherbug...which came bundled with RealPlayer. Classified it as "Adware.Minibug", but researching a little about Weatherbug, the version that came with RealPlayer doesn't "pop up" any advertisements, but the ads appear within the program's box...IF you actually use the Weatherbug program...which I have not, and don't intend to. For that matter, I don't use RealPlayer much at all.

Seems this Weatherbug has been discussed for years now as to whether it is or should be classified as spyware or not, and most vendors are split as to whether to classify it as such or not......

TonyKlein
January 4th, 2009, 03:26 AM
I've never used or 'contracted' Weatherbug myself, so I have no personal experience there, but at least we can discount the FP theory.

According to the Wikipedia article (http://en.wikipedia.org/wiki/WeatherBug) the freeware version still has ads as well as banners, and various other security software also target it:

http://forums.spybot.info/showthread.php?t=40390
http://www.emsisoft.com/en/malware/?Adware.Win32.WeatherBug
http://research.sunbelt-software.com/threatdisplay.aspx?threatid=4052312

C.S.J
January 4th, 2009, 09:34 AM
its the one thing i dont like about MBAM, the amount of False Alarms ive recieved when trying it, is rather ridiculous. :-\

rainbow1112
January 4th, 2009, 09:40 AM
U should report the FP in their forum they correct FP very fast most of the time within a day.

EliteKiller
January 4th, 2009, 01:56 PM
http://www.malwarebytes.org/forums/index.php?showtopic=4210&hl=weatherbug

IMO Weatherbug is nothing but bloated adware.

firzen771
January 4th, 2009, 04:58 PM
ads always piss me off, i say if there is an ad, no matter what kind, it should be detected as adware/spyware. nobody wants to bothered with that crap.