Anti Malwarebytes just nuked 20 of our systems with False Positive

Discussion in 'other anti-malware software' started by GrammatonCleric, Apr 15, 2013.

Thread Status:
Not open for further replies.
  1. G1111

    G1111 Registered Member

    Joined:
    May 11, 2005
    Posts:
    2,294
    Location:
    USA
    Re: Holly freaking shiat AntiMalwarebytes just nuked 20 of our systems with False Positiv

    Thanks, I am not currently running it real time. Just did a manual database update to be sure. Very sorry this happened to them. They are a great group of people.
     
    Last edited: Apr 16, 2013
  2. biscuits

    biscuits Registered Member

    Joined:
    Feb 16, 2010
    Posts:
    113
    Re: Holly freaking shiat AntiMalwarebytes just nuked 20 of our systems with False Positiv

    Did you delete the quarantine folder when you uninstalled MBAM? Your missing files are there. I hope you still have the mbam logs so you can see where the files should be placed.

    Also try running task manager and run explorer.exe (or any other windows fiel manager you have); this could help you navigate.
     
  3. JRViejo

    JRViejo Super Moderator

    Joined:
    Jul 9, 2008
    Posts:
    97,440
    Location:
    U.S.A.
    Re: AntiMalwarebytes just nuked 20 of our systems with False Positiv

    Removed Off Topic Posts. We Urge All Wilders Members to Report A Bad Post to Keep Threads On Topic.
     
  4. FOXP2

    FOXP2 Guest

    Re: AntiMalwarebytes just nuked 20 of our systems with False Positiv

    .
    @Shadowwar

    I run Pro with "Automatically quarantine" disabled and I stopped hitting quarantine in the dialogues after a half dozen warnings.

    As Restore wasn't working, I shut down MBAM and resolved the issues manually. (Didn't even have to reboot.) But that leaves MBAM with those six in its quarantine.

    Is it OK to just "Delete All" to clear that window and the quarantine?

    Thanks.
     
  5. ght1

    ght1 Guest

    Re: AntiMalwarebytes just nuked 20 of our systems with False Positiv

    That's why I don't use software with autodelete / autoquarantine settings. ;)
     
  6. Tarnak

    Tarnak Registered Member

    Joined:
    Feb 5, 2007
    Posts:
    5,285
    Re: AntiMalwarebytes just nuked 20 of our systems with False Positiv


    Ditto...Computer runs 24/7 ;)
     
  7. Antimalware18

    Antimalware18 Registered Member

    Joined:
    Dec 12, 2008
    Posts:
    417
    Re: AntiMalwarebytes just nuked 20 of our systems with False Positiv

    sweet jesus I'm happy I disabled realtime protection from MBAM pro yesterday :D

    I am very sorry for all the people who's computers were messed up though...good luck to you all.
     
  8. avman1995

    avman1995 Registered Member

    Joined:
    Sep 24, 2012
    Posts:
    944
    Location:
    india
    Re: AntiMalwarebytes just nuked 20 of our systems with False Positiv

    oh wow...thank god I didnt on my laptop on the time during this bad update came out :rolleyes:
     
  9. safeguy

    safeguy Registered Member

    Joined:
    Jun 14, 2010
    Posts:
    1,797
    Re: Holly freaking shiat AntiMalwarebytes just nuked 20 of our systems with False Positiv

    FPs like this are unwelcome and leave a bad experience and impression to those affected. Although it's good to see MBAM representatives apologizing and promising to improve the internal process, I can't help but to wonder if there was any system in place previously that defines what not to be 'touched'? Asking out of curiosity only...
     
  10. Shadowwar

    Shadowwar Spyware Expert

    Joined:
    Feb 26, 2004
    Posts:
    305
    Re: AntiMalwarebytes just nuked 20 of our systems with False Positiv

    I would leave quaritine files there for a while in case you find other errors in the next few days so we know what was deleted.

    This bypassed all the checks we have in place and something we thought could never ever happen. We are analyzing each failure and why it happened and what we need to do to prevent it in future.
     
  11. Blues7

    Blues7 Registered Member

    Joined:
    May 11, 2009
    Posts:
    870
    Location:
    2500'
    Re: AntiMalwarebytes just nuked 20 of our systems with False Positiv

    I hope that all who were afflicted are able to restore their systems quickly and successfully. (I've removed MBAM Pro from my system at least for the time being.)
     
  12. wtsinnc

    wtsinnc Registered Member

    Joined:
    Oct 3, 2008
    Posts:
    943
    Re: AntiMalwarebytes just nuked 20 of our systems with False Positiv

    MBAM 1.75 'detected' eleven threats during a scan last night.
    These detections were all in archives on an external hard drive which has been scanned hundreds of times in the past, mostly with earlier versions of MBAM and never before in these archives has malware been found.

    I'm 99% certain these are fps and now even more so after reading this thread.
    Luckily, I don't employ auto-quarrantine so no damage (so far).

    This is disappointing. Malwarebytes has been one of the very few applications I've trusted explicitly;
    --not any longer.
     
  13. Shadowwar

    Shadowwar Spyware Expert

    Joined:
    Feb 26, 2004
    Posts:
    305
    Re: AntiMalwarebytes just nuked 20 of our systems with False Positiv

    wtsinnc

    1.75 instituted archive scanning so thats may be why its hitting them now. If you trully think they are a fp though please post in our false positive forum and we will get it fixed up.

    What you are stating isnt involved with the fp issue from last night.
     
  14. siketa

    siketa Registered Member

    Joined:
    Oct 25, 2012
    Posts:
    2,718
    Location:
    Gaia
    Re: AntiMalwarebytes just nuked 20 of our systems with False Positive

    People should learn to read changelogs of their favourite software.
    :isay:
     
  15. JerryM

    JerryM Registered Member

    Joined:
    Aug 31, 2003
    Posts:
    4,306
    Re: AntiMalwarebytes just nuked 20 of our systems with False Positive

    I'm afraid most of us won't learn how to read them, and the impact on the system. I sure don't know.

    I believe we should be able to trust the developers to test the application so that it works correctly. Unfortunately that trust was greatly misplaced in this case. I have also seen posts on about all AV forums where a change has crashed a system.
    This one was especially bad, however, and some will have a hard time trusting MBAM again.

    I am willing to wait awhile and see how it shakes out. MBAM has been one of my favorites since it was introduced. I have high confidence that such a thing won't happen again, but who can know?

    Jerry
     
  16. Shadowwar

    Shadowwar Spyware Expert

    Joined:
    Feb 26, 2004
    Posts:
    305
    Re: AntiMalwarebytes just nuked 20 of our systems with False Positive

    We simply cannot let this happen again and will be doing whatever it takes and costs to prevent it.
     
  17. DOSawaits

    DOSawaits Registered Member

    Joined:
    Dec 11, 2008
    Posts:
    469
    Location:
    Belgium
    Re: AntiMalwarebytes just nuked 20 of our systems with False Positive

    Talking about customer support. :thumb:
     
  18. Antarctica

    Antarctica Registered Member

    Joined:
    Feb 25, 2003
    Posts:
    2,177
    Location:
    Canada
    Re: AntiMalwarebytes just nuked 20 of our systems with False Positive

    One thing is sure, your fast response to this problem shows your professionalism. And for that I respect you and have confidence in MBAM.:)
     
  19. mick92z

    mick92z Registered Member

    Joined:
    Apr 27, 2007
    Posts:
    548
    Location:
    Nottingham
    Re: AntiMalwarebytes just nuked 20 of our systems with False Positive

    Good grief, I had no idea MBAM automatically quarantined detected threats :eek:
    I've had MBAM pro on several machines for a few years, and only just seen the option in settings. I have unticked the option
     

    Attached Files:

    • mbam.PNG
      mbam.PNG
      File size:
      17.3 KB
      Views:
      341
  20. Shadowwar

    Shadowwar Spyware Expert

    Joined:
    Feb 26, 2004
    Posts:
    305
    Re: AntiMalwarebytes just nuked 20 of our systems with False Positive

    It was just added in a recent version.
     
  21. JerryM

    JerryM Registered Member

    Joined:
    Aug 31, 2003
    Posts:
    4,306
    Re: AntiMalwarebytes just nuked 20 of our systems with False Positive

    If not auto, what does MBAM do with a suspicious file? I assume that it will query you as to the disposition?
    Thanks,
    Jerry
     
  22. mick92z

    mick92z Registered Member

    Joined:
    Apr 27, 2007
    Posts:
    548
    Location:
    Nottingham
    Re: AntiMalwarebytes just nuked 20 of our systems with False Positive

    Right, that's why i didn't notice it then.
    Sorry to hear about all this, I have the greatest respect for your product and customer support. I hope this does not damage your reputation too much.
    Maybe the option to auto quarantine should be left unticked by default :)
     
  23. Shadowwar

    Shadowwar Spyware Expert

    Joined:
    Feb 26, 2004
    Posts:
    305
    Re: AntiMalwarebytes just nuked 20 of our systems with False Positive

    I will pass on your suggestion. Thanks!


    If its not checked then you will be prompted to make the decision yourself.
     
  24. TonyW

    TonyW Registered Member

    Joined:
    Oct 12, 2005
    Posts:
    2,741
    Location:
    UK
    Re: Holly freaking shiat AntiMalwarebytes just nuked 20 of our systems with False Positiv

    If they've not updated and been hit by that update, there is no issue. The offending update only lasted 15 minutes before it was apparently replaced. Of course, some people were affected in that time frame. Subsequent database updates do not contain the error; it's only if you happened to download the faulty update at the time it was released where the problems arise.
     
  25. Shadowwar

    Shadowwar Spyware Expert

    Joined:
    Feb 26, 2004
    Posts:
    305
Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.