Malwarebytes Anti-Malware 2.00 RC1

Actually I upgraded "over the top" of 1.75 without issues, but in any case hopefully the bug you're seeing will be squashed in the next build.

 

gerardwil, thank you!!
Running like a smooth cocktail

 

Just installed RC1.

One problem though. When I open the program and in the 'Dashboard' section and click on the 'Scheduler' on the bottom right it just opens and I can change the settings even though I have set the 'Access Policies' to ask for a password. Plus, when i put a check mark in the boxes it does not stick.

Otherwise, working well.

Robert

 

Thanks G.
Running smooth here on both Win7 laptops (32 and 64).Not yet upgraded on my Win 8.1 machine.

 

You could just keep the real time protection on and exclude windows and program files from protection. This will save you a massive (but non noticeable ) speed advantage of 0.0469 seconds when starting IE11 (on Pentium E5200). They have really optimized code execution of V2.


QUESTION relating to PUM
a) Is that only scan based?
b) Is this planned as real-time protection in future (old Ewido now AVG was so effective, because it monitored registry changes, when an executable changed a sensitive registry value, it was also scanned by the blacklist and send to Ewido for further analysis)

 

I was trying out the access policy settings in MBAM, I password protected the Access Policies section but for some reason when i enter the password the program closes unexpectedly and I the Windows error saying check for solution.
Using Windows 8.1 x86.

 

Faulting application name: mbam.exe, version: 1.0.0.495, time stamp: 0x53165beb
Faulting module name: mbamcore.dll, version: 0.6.7.0, time stamp: 0x5315ec55
Exception code: 0xc0000005
Fault offset: 0x00002b9a
Faulting process id: 0x294
Faulting application start time: 0x01cf42ad4ee126ac
Faulting application path: C:\Program Files\MBAM\Malwarebytes Anti-Malware\mbam.exe
Faulting module path: C:\Program Files\MBAM\Malwarebytes Anti-Malware\mbamcore.dll
Report Id: 8ed79c6b-aea0-11e3-9f99-c11d196d02f0

Was playing with drive by malware (with 1806 IE-zone on block), so theoretically file should not been downloaded. IE always asks whether to save or run file (choosing allow or save would cause an error in IE as it always does with 1806 on block also with no MBAM installed). Maybe MBAM intercepted the empty /non-existant (down loaded) file? Repeating same sequence did not re-produce the error.

*** 1806 trick ***
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3]
"1806"=dword:00000003

 

Will there be an option to turn off the warnings permanently?

 

Considering its RC1, I'd be hedging my bets that this is how the official release will work. I have web protection disabled, which means I get a popup every time I start my PC. I too am hoping that they soon realise that these popups are just not on. I can accept if the popup happened only once right after you disabled web protection, but to continually popup every time you start your PC is a real PITA !!!

For those using XP, could you image how users would react if they had a popup every time they start windows to be told - "You are vulnerable - Click Fix to Upgrade to Windows 8"

 

Is there any performance (pc impact) test comparing Malwarebytes AM vs other AV's?

 

I too hope these popups are ONLY ONCE. I do not need to be constantly reminded . I bought a licence for this not too long ago to support the developers, hope I don't regret it. Maybe i should bought of HMP with Alert instead.

Is there anyway to voice our complaints??

 

G'day TS4H,

Definitely worth voicing your concerns on the MBAM forums, which are constantly reviewed by MBAM Developers and Product Management. There's a section in the MBAM forums' created specifically for MBAM 2.00 BETA. You can click here if you wish to create a new topic to provide feedback.

OR

There's already a few relevant threads going around where you can post about your concerns, such as here and here

 

The bold claim of MBAM is that it catches malware your AV misses (not only old malware).
There is no technical explanation to support this claim, therefore did some testing on Win 8.1 laptop which I configure for a friend.

Real Time protection
After some testing, I can't seem to find any special on-execution features. The protection is based on a relative small blacklist (of latest malware) with no special protection as load into memory before execution check. This leaves me baffled to be honest. Anyone know of features I have missed in testing?


On-deman scan
Looks at anomalies e.g. in registry, the unwanted modifications for example in your registry (windows settings). This really is impact of security analist knowledge, but since this feature is on-scan only, it is post-intrusion.Why pay for PRO when most distinct/unique capabilities are in FREE also?


Suggestion
Unless I am missing something, real unique features are in FREE (looking at anomalies), but magically protection of MBAM + WD in for instance win 8.1 is top notch, so add a feature, see PIC and maybe joind AV tests on standard Win 8.1 with WD + MBAM

 

IP blocking definitely works in Real Time Protection. I saw MBAM blocking a trojan recently that was trying to phone home.

 

G'day mate. Cheers for the reply. Will get onto it.

regards.

 

Since early 2009 or so (when I started using Vista) I have been using only what's provided by my operating system (first Vista Business, Now Windows 7 Ultimate). Before I will use 3rd party software it has to deliver a lot and delay a little (in terms of program startup/usage delay).

Checking Malicious Websites is 0.0285 delay in IE11 startup (IP filter), Checking Malware is 0.0469 delay in IE11 startup (EXE filter) when using Google als home page. For reference BitDefender free delays +/- 0.2850, Avast with file shield and on-execute check only (using its cache, because average of 10 startups is measured and IE11 is signed) delays +/- 0.3450, Panda Free +/- 0.4830. When you look at MRG effitas test Malwarebytes scores the same as Avast, Panda, Avira.

So the guys at Malwarebytes seem to use plain vanilla technique while breaking speed and detection records. How do they do that?

 

Found a bug: after Windows Restore: Malicious Website Protection is deactivated and can't be set on again.

Uninstalling now will play with the final again

 

As of this morning, Malwarebytes Anti-Malware 2.00.0.1000 is out of the Release Candidate phase and has now gone Gold/RTM/Final Release.