Zemana AntiMalware 2 BETA

Windows 8.1U3 Pro, 32-bit:
ZAM Portable (v2.10.2.18 / v2.10.1.774 beta) & MBAE Premium v1.06.1.1019, no problems.
----
Windows 8.1U3 Pro, 32-bit:
ZAM v2.10.2.18 & MBAE Premium v1.06.1.1019, no problems.
----
Windows XP SP3, 32-bit:
ZAM v2.10.2.18 & MBAE Premium v1.06.1.1019, no problems.

 

I downloaded the new beta and I like it. I noticed some faster speeds. It runs a smart scan faster and I noticed it runs a deep scan about 5 minutes faster. I am using Malwarebytes Anti-Exploit free along with Malwarebytes Antimalware Premium with Norton running Windows 7 64-bit and haven't had any problems

 

It's possible that Webroot has something to do with my issue too. I'll keep trying different settings.

 

@ Emre TINAZTEPE

I've sent you a PM.

 

https://www.wilderssecurity.com/threads/malwarebytes-anti-exploit.354641/page-81#post-2486003

 

I have been quiet in this thread due to the fact I have had no problems whilst testing the beta from the beginning.

Everything is still working OK across each update and just wanted to report that everything is working as expected.

 

Just installed it yesterday , only get 90 days license , hope it will work good when I test its scanning and cleaning capabilities.

 

Zemana Anti-Malware 2.10.1.895

• Fixed a bug in system restore point creation
• Fixed a bug in file enumeration in non NTFS drives
• Fixed a bug with exclusions
• Improved report format
• Improved user experience
• Improved browser hijack cleaner

Tuesday, April 28, 2015 3:28 PM

 

Once again, there is no way to download the above mentioned version as the download link from the changelog page :

not updated and remain with stable version.2.10.2.18......
It's ridiculous.......

Anyway, if somebody wants to download the latest beta version 2.10.1.895,
here are the correct link;
ZAM 2.10.1.895[beta]:http://cdn9.zemana.com/AntiMalware/ZAMv2.10.1.895.Setup.exe
Portable: http://cdn9.zemana.com/AntiMalware/ZAMv2.10.1.895.exe

 

I put some malware (3 files) on these paths:

C:\Malware
C:\Program Files\Malware
C:\Program Files (x86)\Malware
C:\Users\Public\Malware
C:\Users\Whatever\Malware
C:\Users\Whatever\AppData\Local\Malware
C:\Users\Whatever\AppData\LocalLow\Malware
C:\Users\Whatever\AppData\Roaming\Malware
C:\Windows\Malware
C:\Windows\Temp\Malware

Zemana AntiMalware 2.10.1.895 Deep Scan:
- didn't detect the red paths.
- 12m27s
- 63.494 files. Very inconsistent on the number of files to be scanned. It varies a lot!
- BitDefender engine didn't detect them, comparing with HitmanPro.

HitmanPro 3.7.9.240 Default Scan:
- detect them all.
- 1m33s
- 46.411 files.
- all detected by BitDefender and Kaspersky engines.

 

Zemana Anti-Malware 2.11.1.9

Wednesday, April 29, 2015 5:30 PM

• Fixed a bug in registry enumeration
• Fixed a bug in service
• Added more scan locations
• Fixed a bug in malware scanning and cleaning

http://zemana.com/WhatsNew.aspx?ProductID=2

 

ZAM 2.11.1.9 [beta] : http://cdn9.zemana.com/AntiMalware/ZAMv2.11.1.9.Setup.exe
Portable: http://cdn9.zemana.com/AntiMalware/ZAMv2.11.1.9.exe

 

I've been comparing Zemana to Herdprotect and the two don't compare. Herd Protect free found more stuff than Zemana did. Zemana detected some things, but seems to forget other things such as installation files and other stuff.

 

I agree ..

 

@metmichallica Thanks for the insight bon ami.

 

Can you please share the scan results for both products? They are probably false positives because Herd Protect is using too many engines and this comes with too many false positives as most of the users point out frequently.

Thanks for sharing the results.

1. Regarding BitDefender issue, these files were not detected by BitDefender when they were first scanned but they were detected by other AVs we use. We have cached this infected scan result for future scans so Bitdefender does not appear in this result. This is the reason we didn't consider rescanning the files. In case none of the AVs detected them, they would be added into our rescan queue and you would see the updated results. For more information, you can take a look at the results at VirusTotal.

On the other hand, I agree that this is confusing and this made us think about removing engine selection feature from ZAM and we will only show if the scanned file is malware or not.

2. Regarding the locations, I agree that those locations should be added to our locations database. If those locations were being used by an active malware on your system, they would be detected but in this case we call them as "data at rest" and they are not active. Also, the difference in scanning time is due to the method we use for scanning files. We open all the files and inspect the file format so we can even detect a malware file without an extension. This is the main reason it takes more time.

We are working on these issues and will release an update once those locations are added to ZAM.

 

This is intentional since we don't want to publish a BETA version's link on our product page which may confuse our customers. BETA users will automatically get updated to latest BETA version.

In order to download the latest version of BETA manually, you can use your registered email in the page below:
http://www.zemana.com/product/beta/register.aspx

 

IMO, you have to clarify the above with a note in your "Whats New" web page.......
i.e. =

-------------------
I prefer to use the latest version (stable or beta, whatever it comes first).
In your stabe version, you don't have the option "download also beta updates" ,
so I have to switch manually from stable to beta and vice versa.

 

update_27ba2549_29.exe is detected potential malicious by my bitdefender internet security 2015. I just pressed the button for the zemena autoupdate und it wouldn't since bitdefender stopped it.

 

I also believe your registry scanner can use some work. I found some things which Hitman Pro detected, but not Zemana.


Potential Unwanted Programs _________________________________________________

HKLM\SOFTWARE\Classes\AppID\escortEng.DLL\ (Funmoods)
HKLM\SOFTWARE\Classes\AppID\esrv.EXE\ (Funmoods)
HKLM\SOFTWARE\Classes\AppID\{B12E99ED-69BD-437C-86BE-C862B9E5444D}\ (Funmoods)
HKLM\SOFTWARE\Classes\c\ (Claro)
HKLM\SOFTWARE\Classes\Wow6432Node\AppID\escortEng.DLL\ (Funmoods)
HKLM\SOFTWARE\Classes\Wow6432Node\AppID\esrv.EXE\ (Funmoods)
HKLM\SOFTWARE\Classes\Wow6432Node\AppID\{B12E99ED-69BD-437C-86BE-C862B9E5444D}\ (Funmoods)

 

I don't know if this is a good idea.

And show only if the file is a malware or not will also show the engines that that it?

 

I haven't run a scan in this snapshot for 22 days, but it finally picked up this file [my control file], that HMP has been picking up since I downloaded it a few months ago.

Spoiler: screenshots

 

Further details:

Code:

Zemana AntiMalware 2.11.1.9 (Portable)
-------------------------------------------------------
Scan Result           : Completed
Scan Date             : 2015/5/1
Operating System      : Windows XP 32-bit
Processor             : 4X Intel(R) Core(TM)2 Quad CPU  Q6600 @ 2.40GHz
BIOS Mode             : Legacy
CUID                  : Deleted
Scan Type             : Smart Scan
Duration              : 6m 14s
Scanned Objects       : 8110
Detected Objects      : 1
Excluded Objects      : 1
Read Level            : SCSI
Auto Upload           : Yes
Show All Extensions   : No
Scan Documents        : Yes
Engines               : Zemana, Avira, Eset, Kaspersky
Domain Info           : WORKGROUP,1,2


Detected Objects
-------------------------------------------------------
SoftonicDownloader_for_avg-linkscanner.exe
   Status             : Scanned
   Object             : %userprofile%\desktop\softonicdownloader_for_avg-linkscanner.exe
   MD5                : E15CA80B470CC6547BA6CBF143C9AAFD
   Publisher          : Softonic International
   Size               : 367448
   Version            : 1.41.6.11
   Detections         : Avira: SPR/Dldr.Agent.bxib.12, Eset: a variant of Win32/SoftonicDownloader.G application, Zemana: Win32/Adware.Downloader.Softonic!Ep
   Cleaning Action    : Quarantine
   Traces             : File - %userprofile%\desktop\softonicdownloader_for_avg-linkscanner.exe



Cleaning Result
-------------------------------------------------------
Cleaned               : 1
Reported as safe      : 0
Failed                : 0

 

http://www.zemana.com/WhatsNew.aspx?ProductID=2
Zemana Anti-Malware 2.11.1.62 [beta]
Monday, May 4, 2015 3:30 PM

• Minor improvements
• Fixed an issue with rootkit cleaning
• Improved licensing and partner id system

Known Issues
• Multi language support (If you would like to contribute, please reach us from dev@zemana.com)
• Support for Safe Boot Mode
-------------
ZAM 2.11.1.62 [beta]: http://cdn9.zemana.com/AntiMalware/ZAMv2.11.1.62.Setup.exe
Portable: http://cdn9.zemana.com/AntiMalware/ZAMv2.11.1.62.exe

 

As soon as it updated I got a bsod!



EDIT: Weird, how could sbie be the culprit?
050415-13915-01.dmp 5/4/2015 11:35:10 PM DRIVER_UNLOADED_WITHOUT_CANCELLING_PENDING_OPERATIONS 0x100000ce 0x8f72d264 0x00000008 0x8f72d264 0x00000000 SbieDrv.sys SbieDrv.sys+16bd8 32-bit SbieDrv.sys+17399 SbieDrv.sys+16f24 SbieDrv.sys+1382 C:\Windows\Minidump\050415-13915-01.dmp 2 15 7601 181,152 5/4/2015 11:38:26 PM