Malwarebytes Anti-Ransomware Beta

Hi pbust

I run MARW 0.9.15.416, with EMIS 11 and MBAE Premium on a Windows 8.1 PC.

On three separate occaisions I have gotten a series of gray, red-bordered pop-ups from the lower right-hand corner of my monitor saying something like: "Warning. MARW has detected ransomeware activity on your system and has quarantined it." Yet, whenever I see that and look at my Quarantine it is empty.

Am I misreading those warnings and they actually say "......has blocked it..." The pop-ups drop quickly so I am not totally certain if it says blocked or quarantined.

I did acually have that experience today. I left a scan running and left the PC for a couple of hours. When I entered my password to wake up my pc and lift the passsword screen, I got a very quick look at my desktop and saw that the scan had completed and thet EMIS required a restart to install an update. Then my password page suddenly dropped and it said "Locked"

So I tried a restart. This time I first got a spinning Windows sceen saying something like Windows is setting up/configuring (something like that) your PC. When my desktop reappeared my system was nearly totally borked. Everything under Desktop in File Explorer had disappeared. My PC had reverted to an much earlier state/configuration and most of my programs would not open, including my One Drive. My Firefox extensions and bookmarks had been totally wiped. I did however have everything that had been filed under C: User.>Me.

I tried another re-start and this time my PC was back to its most current configuration with all files and programs there and functioning as they should.

After one of the restarts I had to reverify my PC with Microsoft.

It was during one of these attempts that MARW popped up with its warnings, I was so confused and upset that I don't recall at what point a series of three MARW warning pop ups appeared, but I am pretty sure it was after the first restart when my system appeared borked.

So while my Quarantine remained empty it appears that MARW may have unlocked or prevented from re-locking the second restart and saved my system by effecting whatever it was that first locked and borked my PC. Dunno. As everyone here knows I am relatively clueless

 

MBARW is supposed to block ransomware without user intervention.

You want to stop it before it can encrypt your files. So it should quarantine and automatically delete suspected ransomware downloaded from the Web.

 

Hello hawki:

Before any data is lost, please consider logging into, or registering and logging into, Malwarebytes Anti-Ransomware Beta and opening a topic with with a Copy/Paste of your above post.

Additional data will likely be requested.

Thank you in advance hawki.

 

What the time frame for the Malwarebytes Anti-Ransomware to be release in the final stage, do you Malwarebytes guys have any information on what is you're current time frame for this.

Thank you.

 

The MB forum is being blasted with false positives, So I guess it will probably take some time for them to finish it ;-)

 

Thanks for the heads up

 

MBARW occasionally identifies legitimate software as ransomware and tries to delete it. I've had to add them to MBARW's exclusion list to make sure it doesn't remove them.

 

I get the impression that the false positives are a too big of a problem at the moment.

 

Lost my MBAM Pro license thanks to reinstall... At least it came with a device from Craigslist.

Therefore I probably won't be able to see this in action, since I won't be able to buy a lifetime license.

No, I don't see the need for a subscription security service with my current setup and mindset.

 

TeslaCrypt shuts down and Releases Master Decryption Key
http://www.bleepingcomputer.com/new...huts-down-and-releases-master-decryption-key/

 

Any news about MBARW? updates or something?

 

No updates. If there's a new beta, it should be posted here.

 

Malwarebytes Anti-Ransomware (MBARW) Beta7 has been announced: https://forums.malwarebytes.org/topic/184386-malwarebytes-anti-ransomware-beta-7-now-available/

Please see the announcement for changelogs and download link.

Thank you.

 

Usually I don't run beta software, Emsisoft and Malwarebytes are the exclusions, haven't tried this beta yet, I may yet just to check it out, but not really needed as Appguard should cover any ransomware. However, waiting with anticipation for this to be incorporated into MBAM, should be another win for the Malwarebytes crew.

 

I'm not going to lie, based on everything that I read, I don't feel comfortable to install it on my machine.

 

And you're point is? I just have the feeling that it's not ready for prime time yet. You would have hoped that by now it would be.

 

Trying MBARW out. Simple and clean user interface, uses a service called MBAMService.exe. Uses 0.01 to 0.18% on my CPU (a low end dual core pentium G3240), seems that this beta 7 has solved most issues. Malware Bytes is known for its long beta's when introducing 'new' technology to their flagship (MBAM), so they will release one or two beta's with the technology incorporated into MBAM, before public release.

 

@SHvFI

Agree complety, just to be sure nothing gets lost in translation: my comment is not a complaint, just an observation.

Thx

 

Is this SW ever going to go any where or is it abandonware, seems like it's been in beta for ever now

 

I think it's supposed to be integrated into MBAM.
It was never meant to be a standalone utility.

 

Correct, the program has many issues still and it was released some time ago. They just don't seem to be making any real progress with it.

 

"I think it's supposed to be integrated into MBAM.
It was never meant to be a standalone utility." right!!!!

but what happens to the lifetime lic for MBAM? will we get the upgrade including this new anti-ransomeware or will be be stuck with just MBAM unless we buy a yearly sub for this new product?
seems like there are getting to be more companies sucking people in with a lifetime lic then finding a way to make them buy a yearly sub.

 

Once MBARW is out of beta(some day) YES it will be rolled into MBAM, one product, for FREE

those who have a lifetime lic will have it forever those that have a yearly sub will have to renew it as it's intergraded into MBAM that is now renewable software yearly.

 

coll so at that point I should give up my paid sub for WAR?