MBAM scan

[Tarnak]

Started a MBAM scan, then a Prevx scan started automatically, which seemed to slow the MBAM scan to a crawl. See screenshots showing FP's which I allowed to be trusted. Also, the Prevx scan restarted again. Seems a little confusing, perhaps.;)

[Triple Helix]

Are they malware files in the recyle bin?

TH

[Tarnak]

-{ Quote: "Are they malware files in the recyle bin?

TH" }-

No, I don't go looking for malware...intentionally, that is....:)

[Triple Helix]

You will have to this! It the fastest to get them fixed! Joe is in the UK so he would be sleeping now.

-{ Quote: " If you think that Prevx is wrongly detecting a file (false positive), please do a system scan by clicking "Scan Now" on the front screen of Prevx 3.0 and then save the scan log by clicking on Tools - Save Scan Results. Then, please send the scan log by e-mail at report@prevxresearch.com explaining the problem" }-

TH

[Tarnak]

-{ Quote: "You will have to this! It the fastest to get them fixed! Joe is in the UK so he would be sleeping now.


TH" }-

Yes...I realise this....He said he was off to the UK for awhile. :)

I don't think it is so much as a FP problem, but more like this... see following:

NB - I use the freeware version of MalwareBytes.

http://www.wilderssecurity.com/showthread.php?t=251675&page=3
http://www.wilderssecurity.com/showpost.php?p=1532944&postcount=70

-{ Quote: "Yes, not necessarily an AV but other security - one of the main compatibility issues is MalwareBytes in realtime + Prevx however note that it is not a global issue: it will only happen in extremely rare circumstances and can be prevented with a minor registry change that lets Prevx play nicer with other security programs. We're holding off deploying this fix until the release of v3.5 which is scheduled for next week but if you do come across the issue again, let me know and I can send you the details." }-

[PrevxHelp]

-{ Quote: "Yes...I realise this....He said he was off to the UK for awhile. :) " }-

In the office in the UK :) Feel free to forward on any FPs using the instructions Triple Helix has pasted :)

-{ Quote: "I don't think it is so much as a FP problem, but more like this... see following:

NB - I use the freeware version of MalwareBytes." }-

The slowdown you are experiencing actually shows that the realtime protection is working - we're scanning every file at the same time that MalwareBytes scans it. It is indeed not an optimal way to perform but many other AVs do it as well (McAfee in particular when Prevx is scanning). The problem with MalwareBytes+Prevx during the scan is that they load files in such a way that it looks like the files are about to run and there really isn't any way to differentiate without potentially hurting protection.

However, if you right click on the Prevx tray icon, click "Stop Protection" and then click the dropdown arrow and select "Enable in 10 minutes", that will fully disable Prevx and allow you to scan much faster with MalwareBytes.

Let me know if you have any questions with this - I've tried the new, test version of Prevx with MalwareBytes on Windows 7 and it no longer slows down, however, the issue may exist only on XP (I'll be investigating this closer soon :))

[Tarnak]

I sent copy of the scan using the instructions pasted by Triple Helix.

However, your research section will have received 2 emails, due an error in my Outlook Express. It was not configured correctly for outgoing. I rarely use it. I basically just use web based email.

Will I get a reply letting me know what the outcome is...re FPs?

I bet this way takes longer than when we had the former(now closed)FP thread. ;) :)

[PrevxHelp]

-{ Quote: "I sent copy of the scan using the instructions pasted by Triple Helix.

However, your research section will have received 2 emails, due an error in my Outlook Express. It was not configured correctly for outgoing. I rarely use it. I basically just use web based email.

Will I get a reply letting me know what the outcome is...re FPs?

I bet this way takes longer than when we had the former(now closed)FP thread. ;) :)" }-

You should have gotten a reply a few hours ago :)

[Tarnak]

-{ Quote: "You should have gotten a reply a few hours ago :)" }-

Thanks! I rescanned and it is clear once again. :)

[Motherroad]

With me it used too take longer to scan and you could see prevx in the background scanning. Now I do not see this anymore. Makes me think that Prevx is sleeping sometimes.

[PrevxHelp]

-{ Quote: "With me it used too take longer to scan and you could see prevx in the background scanning. Now I do not see this anymore. Makes me think that Prevx is sleeping sometimes." }-

It depends on the files being scanned - Prevx can usually determine a file as legitimate very quickly so it won't need to rescan it constantly on every MBAM scan. If you haven't made major system changes, you probably wouldn't see Prevx pop up the "Authenticating Files..." message after running the first full system MBAM scan with Prevx enabled.

[Motherroad]

OK. Thanks for that info.