PDA

View Full Version : Can SAS and MBAM run together ?


Mack Jones
September 2nd, 2010, 03:53 AM
Hi,
I bought yesterday SAS and MBAM, those tools are really impressive. Congrats to their developpers ! ;)

At the next reboot, the system hangs up, with the SAS splash screen blocked. MBAM is running in the background.
When I disabled Real time protection and First chance prevention in SAS, all is ok.

Can I use together in real time or should I choose only one of them ?
Is the 1st chance prevention option faulty ?

Thank you guys in advance for your precious help/ :thumb:

Sincerely,
Mack

Boyfriend
September 2nd, 2010, 04:00 AM
Both can be used together (exclude MBAM folders in SAS). What is your antivirus solution? Also exclude both from your AV.

acr1965
September 2nd, 2010, 04:42 AM
Back when I had Vista SAS would always hang at boot if real time protection was enabled. I finally just uninstalled it.

Why do you want to run them together? Has there been some recent improvement to the SAS real time protection? SAS is good for on demand scans and removing malware but I am yet to see any test results showing SAS with competent real time protection. Maybe something changed.

Mack Jones
September 2nd, 2010, 05:19 AM
-{ Quote: "Both can be used together (exclude MBAM folders in SAS). What is your antivirus solution? Also exclude both from your AV." }-

Thanks for your reply boyfriend.
I'll use ESS or NIS2011 but it is installed yet since it's a fresh install.

Mack Jones
September 2nd, 2010, 05:21 AM
-{ Quote: "Back when I had Vista SAS would always hang at boot if real time protection was enabled. I finally just uninstalled it.


Why do you want to run them together? Has there been some recent improvement to the SAS real time protection? SAS is good for on demand scans and removing malware but I am yet to see any test results showing SAS with competent real time protection. Maybe something changed." }-

Hi acr1965,
If I'm right, you advices me not to use SAS for real time protection. But I don't know if it has improved or not. So, MbAM should be enough ?

acr1965
September 2nd, 2010, 05:50 AM
-{ Quote: "Hi acr1965,
If I'm right, you advices me not to use SAS for real time protection. But I don't know if it has improved or not. So, MbAM should be enough ?" }-
Enough is relative to the rest of your set up and your comfort level. But I think that whatever is covered by MBAM alone will be about the same as what's covered in the MBAM+SAS combo.

Mack Jones
September 2nd, 2010, 06:31 AM
-{ Quote: "Enough is relative to the rest of your set up and your comfort level. But I think that whatever is covered by MBAM alone will be about the same as what's covered in the MBAM+SAS combo." }-


Thanks for this reply.
Does it mean it is useless to use them together ?
Can I use MBAM with Eset or Norton ?

JoeBlack40
September 2nd, 2010, 06:45 AM
I run them both with AVG and CIS-AV disabled.It happened to me once SAS's startup screen to be frozen.Solution?I have untick the option "show splash screen at startup" in SAS preferences.It was annoying anyway.

Mr.PC
September 2nd, 2010, 07:02 AM
Running Both SAS and MBAM Real-Time?
I don't find it a good idea to run two (2) Scanners Real-Time.
Run one Real-Time (MBAM) + the other On-Demand (SAS).

Most users prefer and AV Real-Time with:
-MBAM On-Demand
And/OR
-SAS On-Demand

Mack Jones
September 2nd, 2010, 07:39 AM
-{ Quote: "I run them both with AVG and CIS-AV disabled.It happened to me once SAS's startup screen to be frozen.Solution?I have untick the option "show splash screen at startup" in SAS preferences.It was annoying anyway." }-

This is a trick I'll try.
ThX :)

Mack Jones
September 2nd, 2010, 07:43 AM
-{ Quote: "Running Both SAS and MBAM Real-Time?
I don't find it a good idea to run two (2) Scanners Real-Time.
Run one Real-Time (MBAM) + the other On-Demand (SAS).

Most users prefer and AV Real-Time with:
-MBAM On-Demand
And/OR
-SAS On-Demand" }-


I thought it was possible since layered defense is an option.
It is the same for an AV engine and MBAM ? Say using ESS with it.

Sincerely,
Mack

BG
September 2nd, 2010, 07:51 AM
Mack I run NIS2011 & MBAM realtime on a couple of different 64bit machines. No slow downs or problems what so ever. I don't believe it would be a problem to add SAS to this mix and use as a on-demand only option.:)

Boyfriend
September 2nd, 2010, 08:14 AM
-{ Quote: "Thanks for your reply boyfriend.
I'll use ESS or NIS2011 but it is installed yet since it's a fresh install." }-

Whatever main security product you choose, remember to made exclusions. Although both can run file, I recommend MBAM only along with main AV. It is working very well on my security setup and I do not feel need of SAS Pro (MBAM and SAS detections overlaps mostly). You can use SAS scheduled scan for further security.

Mack Jones
September 2nd, 2010, 08:31 AM
Thank you for all my friends, I'll follow your precious advices and tell you the result. ;)


Just one thing, how to add folders to the "ignore list" tab in MBAM ? I'm trying to clic and drop but doesn't work. I don't see any "add" button...


Sincerely,
Mack

Boyfriend
September 2nd, 2010, 10:29 AM
Current MBAM version do not support manually adding exclusions (ignore list). If you have any detection, then you can exclude it, else not.

Victek123
September 2nd, 2010, 10:41 AM
-{ Quote: "Running Both SAS and MBAM Real-Time?
I don't find it a good idea to run two (2) Scanners Real-Time.
Run one Real-Time (MBAM) + the other On-Demand (SAS).

Most users prefer and AV Real-Time with:
-MBAM On-Demand
And/OR
-SAS On-Demand" }-

Most of the points have been covered. I would just add that it's a good idea to keep both MBAM and SAS. Yesterday I was doing malware cleanup for someone. Both of these programs found and removed problems, but in this particular case it was SAS that removed the main problem, which was a "scareware" fake antivirus. My personal preference is to run Prexv (free facebook version with safeonline) along side the primary AV since it is highly compatible and has excellent real-time detection capability (as long as you have an internet connection). I use MBAM and SAS for "on demand".

Mr.PC
September 2nd, 2010, 11:21 AM
-{ Quote: "Most of the points have been covered. I would just add that it's a good idea to keep both MBAM and SAS. Yesterday I was doing malware cleanup for someone. Both of these programs found and removed problems, but in this particular case it was SAS that removed the main problem, which was a "scareware" fake antivirus. My personal preference is to run Prexv (free facebook version with safeonline) along side the primary AV since it is highly compatible and has excellent real-time detection capability (as long as you have an internet connection). I use MBAM and SAS for "on demand"." }-I agree. The idea is to use a Real-Time Scanner (an AV)
and 1 or more On-Demand Scanners as a Back Up solution (Second Opinion).

G1111
September 2nd, 2010, 12:41 PM
-{ Quote: "Thanks for this reply.
Does it mean it is useless to use them together ?
Can I use MBAM with Eset or Norton ?" }-
I am using MBAM real time with Emsisoft and use SAS for occasional scans (portable version, although I do have a license). Add a firewall and a HIPS (I use DefenseWall) or sandbox and you have very strong protection.

cheater87
September 2nd, 2010, 01:45 PM
Yes they can be run together. They are a very powerful combo.

Mack Jones
September 4th, 2010, 03:30 AM
Kudos to you guys ! I'll test the configuration you advice me:
AV+MBAM real-time and SAS on-demand.

I'm amazed on how light Malwarebytes is. :)


Thank you my friends,

Mack ;)

Searching_ _ _
September 4th, 2010, 04:16 AM
No, you can not run them together.
You must run them one at a time. ;D

progress
September 4th, 2010, 04:48 AM
-{ Quote: "Running Both SAS and MBAM Real-Time?
I don't find it a good idea to run two (2) Scanners Real-Time.
Run one Real-Time (MBAM) + the other On-Demand (SAS).
" }-

I second that (!) ;)

sg09
September 4th, 2010, 05:04 AM
They should not cause any problem while together mainly because SAS does only on-execution scan and it is very light on resources. Remember to make exclusions as suggested by Boyfriend. As said by JoeBlack40 the flash screen can be removed from showing. It can also be freezed for other reason. I have experienced that before.

Mack Jones
September 4th, 2010, 05:33 AM
-{ Quote: "No, you can not run them together.
You must run them one at a time. ;D" }-


Is it technically impossible or just not recommended ? BG tells us he runs NIS & MBAM at the same time without any slowdown...I'm a bit lost now :what:

Mack

Mr.PC
September 4th, 2010, 05:45 AM
-{ Quote: "No, you can not run them together.
You must run them one at a time. ;D" }-
-{ Quote: "They should not cause any problem while together mainly because
SAS does only on-execution scan and it is very light on resources.
Remember to make exclusions as suggested by Boyfriend.
As said by JoeBlack40, the flash screen can be removed from showing.
It can also be freezed for other reason. I have experienced that before." }-
Running Both SAS and MBAM Real-Time? Why doing that?
Just run one (1) On-Access/Real-Time
and
the other On-Demand as a Back-Up/Second Opinion Scanner.

-Even worse Scenario:

Running Both SAS and MBAM Real-Time while having a Resident AV? :o
-SAS Real-Time
-MBAM Real-Time
-AV Real-Time

What a WASTE of System Resources!

Mack Jones
September 4th, 2010, 06:31 AM
-{ Quote: "Running Both SAS and MBAM Real-Time? Why doing that?
Just run one (1) On-Access/Real-Time
and
the other On-Demand as a Back-Up/Second Opinion Scanner.

-Even worse Scenario:

Running Both SAS and MBAM Real-Time while having a Resident AV? :o
-SAS Real-Time
-MBAM Real-Time
-AV Real-Time

What a WASTE of System Resources!" }-


Thanks for the clarification :)
AV+MBAM on access is overkill too ?
For instance in my setup, Malwarebytes will detect nasties NOD32 don't pick up. Am I right ?

Mr.PC
September 4th, 2010, 08:11 AM
-{ Quote: "Thanks for the clarification :)
AV+MBAM on access is overkill too ?
For instance in my setup, Malwarebytes will detect nasties NOD32 don't pick up. Am I right ?" }-
AV + MBAM On-Access -OR- AV + SAS On-Access is tolerable.

BUT
AV+ MBAM On-Access + SAS On-Access
is a Waste of Resources
for a minimal Incremental protection!

shadek
September 4th, 2010, 08:32 AM
Agreed. Having a regular AV with either MBAM or SAS will suffice. Having them all enabled in real-time will cripple your computer to pieces.

twl845
September 4th, 2010, 08:33 AM
I have been running SAS Pro real time and MBAM on demand and find that arrangement the best. I tried running MBAM Pro real time and SAS Pro on demand and MBAM Pro caused difficulties on bootup for me. It hogged resources loading up. I tried delaying it's loading for 60 seconds, and that helped, but every time I upgraded I'd have to do it over. A pain in the butt. SAS causes no problems on bootup.

JerryM
September 4th, 2010, 09:56 AM
At times I have run SAS Pro, MBAM, and an AV all real time. I have had no problem with resources. All works well together and no slowdowns except when SAS opens it ties up my system for a minute or so. For that reason I don't normally run SAS Pro except on demand.

I often wonder why some are so worried about system resources. Since I don't experience any problems or slowdowns that I notice I couldn't care a whit about resources. In fact I am more concerned about security than efficiency. Of course, if one can have both fine.

So run them both if your system doesn't have problems.

Although off topic, an illustration is that I have been a hunter until the last few years when age has taken its toll. When I would choose a hunting rifle I did it on the basis of need including velocity. Some are always preaching efficiency, but my intent was to obtain terminal performance even at the expense of efficiency. It worked for me.

So it is with computers. I want security more than efficiency.
I realize that some will argue that security can be obtained without SAS and MBAM running together real time. Others will say that only an AV is necessary. My own experience causes me to reject the latter so I will run at least an AV and MBAM, which I consider the best, together. Also I am not experiencing any problems with Mamutu in the mix.

Regards,
Jerry

Mack Jones
September 4th, 2010, 12:05 PM
-{ Quote: "At times I have run SAS Pro, MBAM, and an AV all real time. I have had no problem with resources. All works well together and no slowdowns except when SAS opens it ties up my system for a minute or so. For that reason I don't normally run SAS Pro except on demand.

I often wonder why some are so worried about system resources. Since I don't experience any problems or slowdowns that I notice I couldn't care a whit about resources. In fact I am more concerned about security than efficiency. Of course, if one can have both fine.

So run them both if your system doesn't have problems.

Although off topic, an illustration is that I have been a hunter until the last few years when age has taken its toll. When I would choose a hunting rifle I did it on the basis of need including velocity. Some are always preaching efficiency, but my intent was to obtain terminal performance even at the expense of efficiency. It worked for me.

So it is with computers. I want security more than efficiency.
I realize that some will argue that security can be obtained without SAS and MBAM running together real time. Others will say that only an AV is necessary. My own experience causes me to reject the latter so I will run at least an AV and MBAM, which I consider the best, together. Also I am not experiencing any problems with Mamutu in the mix.

Regards,
Jerry" }-


Thanks for sharing your experience Jerry !
I'm trying MBAM and NIS yet, everything seems to run properly, no slowdown whatsoever.

Boyfriend
September 4th, 2010, 12:14 PM
@Mack Jones,
Nice to see that you have finally decided a good security setup. MBAM is good supplemental protection along with any AV. Remember to exclude MBAM folders in NIS for even better performance + security.